Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/Z8-tfCTlxrSvWBw97AueL7DBMcQ.mft
File: Z8-tfCTlxrSvWBw97AueL7DBMcQ.mft (raw, json)
Hash identifier: sXkHe4782gCZgYOPp4AEXy1UPPxlETg3diCNu4qu7QM=
Subject key identifier: 41:34:7C:A8:9B:CA:A6:7C:68:A5:A1:A1:19:4A:78:07:B9:B7:6F:BF
Authority key identifier: 67:CF:AD:7C:24:E5:C6:B4:AF:58:1C:3D:EC:0B:9E:2F:B0:C1:31:C4
Certificate issuer: /CN=67cfad7c24e5c6b4af581c3dec0b9e2fb0c131c4
Certificate serial: 01A0D3EF6994217981C2A343B8D0306A800E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8-tfCTlxrSvWBw97AueL7DBMcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/Z8-tfCTlxrSvWBw97AueL7DBMcQ.mft
Manifest number: E7
Signing time: Thu 24 Sep 2026 15:01:17 +0000
Manifest this update: Thu 24 Sep 2026 15:01:17 +0000
Manifest next update: Fri 25 Sep 2026 15:01:17 +0000
Files and hashes: 1: 6LtQiSb78nDyjbmEiYfBW6K94lQ.roa (hash: J7MI4GNzgAtUYP9XKuJ4vcnnaKJ8K4FoSSPzAm0y+FY=)
2: 7HjQZcnyPGzTBbrXVDpIzGTxTAQ.roa (hash: evgW7hhbeIzJbe2wQVkcrOjUE5xE8nomQXZ1TrKMAc0=)
3: 8yzRL6UTfoY2UAWRhFfcY21aiw8.roa (hash: 9a1PcOeE8ZLKSk+KrqFMb26rK/NZVC1SSfxLpvqFg4A=)
4: PKOV_kT6uGHhTn2-6WDHVB3hpzY.roa (hash: FXsrCUeyVdza65q3avYmUJtFZh5GIUafzTy0U+HiLQE=)
5: TAhJXyuaU-go54rMGjVHPRVQsF8.roa (hash: T2ctTiMfso19o9sCdUv1gT123PCz7JSAkNRApoDkkn8=)
6: Z8-tfCTlxrSvWBw97AueL7DBMcQ.crl (hash: aRzPwOjgVIvhr54d2mc7P8iIZYQCa6k5de0wazj7Ah4=)
7: cP1pRSbGF2VydLggt4WcH_Io63k.roa (hash: rej2g9WtxITjbtIMhQNau2HJc/7FPh2+SNTgiY69p1A=)
8: lciHL8Z1BSH4tJKSK6v4VIpHQQQ.roa (hash: n7tikthFcj7M5HJ14fYaGIRaUsjAfU/R0n+U8AFO1ms=)
9: pKcn8ZOkERD-XLZgPeULEQ2qPoY.roa (hash: TDT0jcowVii6rblfICInjysSX3+/qS6/908mLzL3IDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/Z8-tfCTlxrSvWBw97AueL7DBMcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/Z8-tfCTlxrSvWBw97AueL7DBMcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z8-tfCTlxrSvWBw97AueL7DBMcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:ef:69:94:21:79:81:c2:a3:43:b8:d0:30:6a:80:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67cfad7c24e5c6b4af581c3dec0b9e2fb0c131c4
Validity
Not Before: Sep 24 15:01:17 2026 GMT
Not After : Sep 25 15:01:17 2026 GMT
Subject: CN=41347ca89bcaa67c68a5a1a1194a7807b9b76fbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2f:18:a6:f1:79:83:3e:2e:db:e2:f1:4c:f5:
d1:9f:b9:72:49:3d:ec:4e:61:fc:81:fb:44:11:de:
7e:fa:2a:5c:78:45:ca:fa:ed:04:f0:c7:a5:bd:76:
dc:c1:86:34:0a:8e:13:9d:34:72:b6:4c:bc:65:3d:
2e:ac:f1:c9:90:99:9c:1c:02:8c:c7:b6:7e:f7:d5:
c4:c0:37:c0:26:e5:12:2d:f4:0f:52:35:2b:6c:8e:
61:22:60:ae:8e:33:82:6c:ec:bb:dd:69:e6:06:c1:
b1:de:95:6b:c6:5e:2d:05:f6:18:85:5a:78:55:5b:
8f:5c:33:70:65:52:85:95:8d:d3:7a:23:1a:62:08:
d6:1f:c4:28:ed:ba:ff:2e:49:2c:1d:a9:ea:83:bd:
6e:49:be:4a:0e:e0:f7:e9:6f:0c:54:5d:f1:72:b0:
97:b2:7f:06:1d:2a:ab:c3:3e:f3:c2:bb:82:43:5f:
b8:b6:ad:c9:61:4f:30:5e:0c:b4:cc:9f:eb:f6:86:
70:36:d6:d8:59:76:a1:cb:65:d9:78:d1:b9:d8:f9:
6c:f0:54:af:4c:89:1f:40:c1:ff:54:7f:58:04:92:
49:e3:aa:2f:65:8a:2b:70:c8:80:ae:7e:df:7d:6c:
98:55:91:8b:e4:63:3c:75:89:bc:11:38:cc:9c:f2:
23:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:34:7C:A8:9B:CA:A6:7C:68:A5:A1:A1:19:4A:78:07:B9:B7:6F:BF
X509v3 Authority Key Identifier:
keyid:67:CF:AD:7C:24:E5:C6:B4:AF:58:1C:3D:EC:0B:9E:2F:B0:C1:31:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8-tfCTlxrSvWBw97AueL7DBMcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/Z8-tfCTlxrSvWBw97AueL7DBMcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/Z8-tfCTlxrSvWBw97AueL7DBMcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:d6:88:5e:8e:3e:59:26:7f:9d:2c:b1:33:d3:16:7d:17:f8:
fb:ac:08:58:2e:7d:75:34:3e:c5:52:45:8d:2b:81:7f:38:67:
2d:7a:d6:c0:9b:97:3f:f7:25:5e:1f:ec:20:2a:4b:4c:e1:97:
e0:cf:bb:2d:48:cc:40:f3:a9:60:f4:11:5c:24:68:68:0c:86:
10:82:74:46:aa:ab:3f:fe:68:0c:11:3e:e6:cf:22:e9:b5:11:
f3:56:aa:85:b3:f4:e1:7c:65:43:db:41:3a:d9:1f:39:57:25:
f2:b9:32:a5:05:14:67:ab:29:7b:74:c0:be:ea:53:ac:29:1a:
f6:51:72:d6:7b:40:06:bf:77:de:76:29:2c:34:c2:e5:e4:25:
13:0e:8f:6d:ea:74:51:86:bd:0a:60:37:c1:99:99:b0:22:b2:
25:07:1b:83:b7:24:02:f0:ca:6b:cd:b9:ba:a1:0b:8f:fd:88:
2d:b3:b2:fa:d9:c1:da:f2:c2:db:a2:a1:ae:bb:b5:45:c9:22:
d1:21:a6:99:6c:ed:72:66:50:c4:c6:5c:0d:5e:e6:f4:38:0d:
8c:2c:cb:83:60:b3:5f:d2:cb:30:8d:eb:5a:5e:b5:35:65:13:
e2:2b:8d:da:20:ce:7c:a0:48:14:14:e0:1e:86:2a:40:58:8c:
66:d4:d3:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:42:16 2026 by rpki-client