Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/976925-2551-4b2b-900a-e111f322636a/1/z8TCrjOIRe_ngC3uwjTq4_e5XzE.mft
File: z8TCrjOIRe_ngC3uwjTq4_e5XzE.mft (raw, json)
Hash identifier: Gpw+eizBp6LkXFAa8QXd4W5rtBzJN7pjVXJKnGZWxhI=
Subject key identifier: 11:2F:9D:BC:38:91:D0:37:56:D4:3A:0E:3A:CD:E4:70:4D:F3:38:F8
Authority key identifier: CF:C4:C2:AE:33:88:45:EF:E7:80:2D:EE:C2:34:EA:E3:F7:B9:5F:31
Certificate issuer: /CN=cfc4c2ae338845efe7802deec234eae3f7b95f31
Certificate serial: 019E1E6C2FB2541A6CB020A82CD4CEBCAEC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8TCrjOIRe_ngC3uwjTq4_e5XzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/976925-2551-4b2b-900a-e111f322636a/1/z8TCrjOIRe_ngC3uwjTq4_e5XzE.mft
Manifest number: 02FF
Signing time: Tue 12 May 2026 23:01:07 +0000
Manifest this update: Tue 12 May 2026 23:01:07 +0000
Manifest next update: Wed 13 May 2026 23:01:07 +0000
Files and hashes: 1: HfBJ2Nut_YAQuWjhDmP8H2eMvJ8.roa (hash: qlvHpaLVzXcUtxyLFD8U+1k01vVLX6TwfsOJYC4Ocds=)
2: z8TCrjOIRe_ngC3uwjTq4_e5XzE.crl (hash: psp0JaNNtYXLcy5HSQnTCLt3Qy7W8deBkxaOewH9yyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/976925-2551-4b2b-900a-e111f322636a/1/z8TCrjOIRe_ngC3uwjTq4_e5XzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/976925-2551-4b2b-900a-e111f322636a/1/z8TCrjOIRe_ngC3uwjTq4_e5XzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/z8TCrjOIRe_ngC3uwjTq4_e5XzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:2f:b2:54:1a:6c:b0:20:a8:2c:d4:ce:bc:ae:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfc4c2ae338845efe7802deec234eae3f7b95f31
Validity
Not Before: May 12 23:01:07 2026 GMT
Not After : May 13 23:01:07 2026 GMT
Subject: CN=112f9dbc3891d03756d43a0e3acde4704df338f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b8:39:d1:a7:36:35:41:d9:e8:e3:1b:6d:68:
85:14:54:03:83:23:de:28:42:4e:77:6c:4e:5b:71:
e6:19:dd:b7:c8:e8:11:e0:3a:14:b5:b9:50:53:8f:
a3:08:db:d3:f4:e4:ba:fd:ea:41:3f:da:88:12:08:
cb:e5:d2:9b:7b:fa:93:27:6b:44:74:6c:24:1d:46:
6d:81:f9:18:b3:4d:d5:66:80:47:de:a4:b0:eb:95:
9e:ed:82:11:6d:2d:07:e4:2a:ea:2a:73:08:56:22:
e7:87:de:a3:dd:d1:b4:b5:b8:b6:f9:4d:01:6f:0e:
31:3c:d3:18:88:23:f5:40:7f:0a:ff:b1:33:f0:fc:
4a:9a:98:d9:45:35:37:e0:ee:a0:d2:eb:51:eb:f8:
ff:ff:37:a4:dc:36:47:23:ae:11:84:53:58:fb:0d:
d3:20:1a:96:be:f5:69:1a:90:a2:67:e5:ba:c1:ad:
e2:b8:e2:9b:b7:06:56:95:db:d0:c8:0e:3d:8d:89:
a1:22:4f:72:d6:ee:3e:ec:e8:5f:13:0b:dc:03:ab:
88:43:49:2b:8d:99:48:40:e4:e4:2d:e4:96:d3:fc:
e4:2c:90:75:79:ac:12:d6:e8:bb:2f:35:90:a1:fc:
6e:2a:da:21:13:b8:79:8d:b4:87:1e:01:82:da:1f:
c2:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:2F:9D:BC:38:91:D0:37:56:D4:3A:0E:3A:CD:E4:70:4D:F3:38:F8
X509v3 Authority Key Identifier:
keyid:CF:C4:C2:AE:33:88:45:EF:E7:80:2D:EE:C2:34:EA:E3:F7:B9:5F:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8TCrjOIRe_ngC3uwjTq4_e5XzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/976925-2551-4b2b-900a-e111f322636a/1/z8TCrjOIRe_ngC3uwjTq4_e5XzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/976925-2551-4b2b-900a-e111f322636a/1/z8TCrjOIRe_ngC3uwjTq4_e5XzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:fd:81:f2:2c:c0:5e:09:04:8e:a8:a6:6b:ca:43:e4:89:a0:
02:64:8d:f8:db:ae:55:39:7c:95:a3:44:a5:3f:8a:ea:fb:ce:
1f:06:ac:a2:6b:f9:ff:92:3f:fb:09:31:24:e2:59:1e:fa:0f:
e6:d0:67:56:31:91:12:fd:07:8d:5f:aa:02:cf:4a:3f:45:99:
96:63:99:57:9d:a8:03:6c:82:ea:3f:c8:2d:c1:47:5e:06:39:
ce:47:9a:67:45:1b:c2:d1:7d:35:83:b4:10:be:2d:48:61:ab:
1d:a6:61:fd:3a:2a:14:25:c8:8c:12:6e:ee:71:6c:4e:92:5a:
62:8b:5a:59:d4:46:48:59:ef:9c:80:79:40:65:60:a7:90:23:
e2:2f:f7:69:ad:09:71:68:60:90:1b:78:4e:ca:85:c8:c6:8f:
06:dd:86:e4:5f:b1:43:7a:b0:ca:3f:13:87:e2:89:fb:6c:a7:
15:c6:9e:8c:61:b0:41:e9:df:ae:72:a8:c3:a8:77:8c:5d:c6:
e3:0f:dc:34:53:38:9d:41:3f:d8:cf:2e:87:b2:bd:a0:05:10:
c9:77:67:da:c5:0b:ea:0b:9d:9b:a2:58:d4:3c:b6:0b:bf:e8:
2d:8b:69:fd:71:ff:88:fd:f6:29:b0:d0:14:16:86:7c:b1:f2:
6f:eb:5c:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:20:28 2026 by rpki-client