Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.mft
File: z9whc4iqfpAo3R4EumQpE1LWC-8.mft (raw, json)
Hash identifier: 4LzNq6X9ZKbT2LMNVyEvWvAAGx3oyl6eoZ+AnZWd0uU=
Subject key identifier: 20:9D:FB:A2:99:D7:E1:64:94:01:52:8C:4B:CB:D6:72:00:95:FE:12
Authority key identifier: CF:DC:21:73:88:AA:7E:90:28:DD:1E:04:BA:64:29:13:52:D6:0B:EF
Certificate issuer: /CN=cfdc217388aa7e9028dd1e04ba64291352d60bef
Certificate serial: 019F90914A011F7B77A1B6FBE6F92F9B9783
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z9whc4iqfpAo3R4EumQpE1LWC-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.mft
Manifest number: 062D
Signing time: Thu 23 Jul 2026 20:01:08 +0000
Manifest this update: Thu 23 Jul 2026 20:01:08 +0000
Manifest next update: Fri 24 Jul 2026 20:01:08 +0000
Files and hashes: 1: 18mBvWMTzIGjuf0KvgUDpqaEgck.roa (hash: GFEk4/+4DhuQ+HzNstdRPkKFI3j7dtiSLG7Lkc2nCys=)
2: z9whc4iqfpAo3R4EumQpE1LWC-8.crl (hash: E9S8OEN8e+V2rLTTAl3FXFiTMj6pcBeT11ogh+bBhJ8=)
3: zsYYk54DnHl7eLevLUFDMgKz4P8.asa (hash: 6luWGIPO7hhqIfw0IR/ULYO//RhcC5nGHlt4UBWyulU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/z9whc4iqfpAo3R4EumQpE1LWC-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:91:4a:01:1f:7b:77:a1:b6:fb:e6:f9:2f:9b:97:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfdc217388aa7e9028dd1e04ba64291352d60bef
Validity
Not Before: Jul 23 20:01:08 2026 GMT
Not After : Jul 24 20:01:08 2026 GMT
Subject: CN=209dfba299d7e1649401528c4bcbd6720095fe12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:e6:65:9b:98:3b:5f:17:0e:be:4d:15:a7:39:
75:6c:49:e8:b9:c0:b3:81:66:63:97:9d:dc:b1:56:
78:c5:4e:d7:7e:3d:c8:f4:cb:a1:eb:45:27:8a:f2:
a1:4a:0c:17:2c:7c:dc:15:e8:36:15:e9:78:33:c1:
15:27:fb:b3:a7:ed:15:a8:c1:eb:a9:10:48:90:97:
b9:1d:c1:6b:82:b0:7e:87:f7:d4:09:8d:eb:03:55:
3a:38:38:af:60:19:15:76:21:d2:21:5d:01:b7:ac:
5c:75:e6:a4:92:ca:bf:7c:35:fc:93:de:3a:75:39:
90:5c:fa:e3:ab:f0:e3:36:c5:c4:d8:59:5b:7c:cc:
8c:b4:9a:27:12:3c:f0:f7:4a:dc:91:e3:60:7a:ea:
4c:c9:ee:70:05:2b:32:6b:bb:ab:8f:ce:f1:a8:93:
23:9e:d3:1f:77:e1:16:fb:cf:04:62:97:69:34:13:
6f:c2:88:50:c5:80:36:30:76:cd:58:fd:6a:bc:e2:
16:99:d3:48:be:12:b1:42:61:b0:2a:68:74:99:81:
4f:2a:ea:fc:d4:5b:e9:90:65:44:b6:05:39:03:1d:
5e:64:92:3e:52:d0:f4:16:54:65:7a:51:98:cb:c8:
0b:8d:d3:f0:5d:61:90:24:d1:d4:81:95:90:58:03:
89:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:9D:FB:A2:99:D7:E1:64:94:01:52:8C:4B:CB:D6:72:00:95:FE:12
X509v3 Authority Key Identifier:
keyid:CF:DC:21:73:88:AA:7E:90:28:DD:1E:04:BA:64:29:13:52:D6:0B:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9whc4iqfpAo3R4EumQpE1LWC-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:a5:b1:7f:6a:27:de:7b:98:fe:44:ab:1b:da:0c:08:c3:14:
4f:e9:17:21:de:18:e7:9e:65:ba:17:9d:5b:de:f3:f1:91:66:
a9:ec:28:16:fd:97:f0:20:d3:0b:e1:f2:e1:09:3f:ac:73:7d:
1d:07:2e:a6:74:c1:67:c7:08:9d:fb:8f:9b:bf:86:57:48:94:
a6:7b:6e:1d:aa:e2:f2:2d:8d:f4:6b:0a:42:ce:4d:33:97:19:
b9:c7:1f:e4:5f:c1:74:cd:0e:8b:ce:fa:77:cf:ca:56:9c:3b:
b6:e6:a1:55:c5:7d:47:11:5b:cb:8c:e8:8f:8b:49:f0:bb:0e:
8e:7f:81:a1:e5:a0:2a:15:e8:dd:d7:5d:4e:fe:31:83:ea:70:
70:2e:e5:ef:f3:89:42:fc:1e:50:a8:6d:4d:39:68:7b:9b:b3:
02:76:b4:92:99:3b:aa:3e:64:fc:7d:ef:3e:2d:23:49:cf:43:
b0:76:8f:79:22:6e:f7:ca:f1:9a:65:3c:41:20:a5:8a:43:f2:
00:44:1f:28:fc:8d:e9:27:61:41:c6:aa:4f:e3:50:77:87:b4:
65:b4:4c:b4:24:8d:f9:e6:5e:31:b4:1f:16:65:ca:ab:ee:e9:
c9:5c:c7:87:4f:3a:78:8e:2c:e4:b2:08:5c:6f:40:82:53:7b:
23:2f:e9:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:07:54 2026 by rpki-client