Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/976925-2551-4b2b-900a-e111f322636a/1/z8TCrjOIRe_ngC3uwjTq4_e5XzE.mft
File: z8TCrjOIRe_ngC3uwjTq4_e5XzE.mft (raw, json)
Hash identifier: yMLqgkICh3cxs1q1LHxVBiFzYXF1lxsg8ze09t9SVq8=
Subject key identifier: 9E:70:F3:AE:D6:E3:2E:7C:91:FA:FD:90:A5:91:B4:AA:64:32:08:6A
Authority key identifier: CF:C4:C2:AE:33:88:45:EF:E7:80:2D:EE:C2:34:EA:E3:F7:B9:5F:31
Certificate issuer: /CN=cfc4c2ae338845efe7802deec234eae3f7b95f31
Certificate serial: 01A0CFDB27DFEB8090CB9CE99E5A4F6A7BB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8TCrjOIRe_ngC3uwjTq4_e5XzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/976925-2551-4b2b-900a-e111f322636a/1/z8TCrjOIRe_ngC3uwjTq4_e5XzE.mft
Manifest number: 0464
Signing time: Wed 23 Sep 2026 20:00:41 +0000
Manifest this update: Wed 23 Sep 2026 20:00:41 +0000
Manifest next update: Thu 24 Sep 2026 20:00:41 +0000
Files and hashes: 1: HfBJ2Nut_YAQuWjhDmP8H2eMvJ8.roa (hash: qlvHpaLVzXcUtxyLFD8U+1k01vVLX6TwfsOJYC4Ocds=)
2: z8TCrjOIRe_ngC3uwjTq4_e5XzE.crl (hash: 28lJwoHv68ahmCE6kQ2UAusFfUkLVzAyyjPisBccpwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/976925-2551-4b2b-900a-e111f322636a/1/z8TCrjOIRe_ngC3uwjTq4_e5XzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/976925-2551-4b2b-900a-e111f322636a/1/z8TCrjOIRe_ngC3uwjTq4_e5XzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/z8TCrjOIRe_ngC3uwjTq4_e5XzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:db:27:df:eb:80:90:cb:9c:e9:9e:5a:4f:6a:7b:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfc4c2ae338845efe7802deec234eae3f7b95f31
Validity
Not Before: Sep 23 20:00:41 2026 GMT
Not After : Sep 24 20:00:41 2026 GMT
Subject: CN=9e70f3aed6e32e7c91fafd90a591b4aa6432086a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7b:b5:88:bd:3b:f2:e3:e4:a4:97:0c:2d:eb:
63:e2:f9:83:74:06:fe:c4:47:04:c0:80:23:5e:78:
56:c5:81:0c:0d:33:bb:e4:2a:1a:c7:87:e1:c3:b3:
21:da:5d:92:1e:80:62:f5:fb:8b:ce:22:26:8e:73:
06:95:75:f4:51:33:d5:71:8e:82:d6:26:de:22:3a:
a7:01:3b:8f:fd:b8:81:fd:83:c4:6d:ad:58:39:c4:
a0:2f:ad:ec:6c:f0:3f:6a:87:0b:8f:25:f6:fb:18:
be:07:5d:b9:43:88:57:87:2f:51:df:f2:86:84:16:
59:f9:30:6b:e3:18:7c:8c:c7:93:d3:1f:6e:da:ce:
eb:73:d8:08:ae:ef:8f:eb:f1:e2:94:b5:a4:0d:86:
ef:c6:8a:2a:dd:38:a9:1a:be:b9:3e:1e:0f:a7:98:
db:74:0b:1c:12:4d:52:a4:77:72:e8:a2:df:76:cf:
7a:3c:01:10:8e:26:6c:a7:62:47:4a:48:99:63:7f:
1a:c8:8b:a9:fb:0d:de:45:58:4b:ab:45:30:6c:83:
4e:b0:d5:6d:88:8b:02:56:d3:67:05:0e:ee:21:15:
6a:62:95:03:aa:8d:a9:b4:5b:c2:ce:98:3b:0d:ae:
ce:36:1b:5f:82:24:23:38:62:fd:f3:17:ec:c9:fc:
bf:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:70:F3:AE:D6:E3:2E:7C:91:FA:FD:90:A5:91:B4:AA:64:32:08:6A
X509v3 Authority Key Identifier:
keyid:CF:C4:C2:AE:33:88:45:EF:E7:80:2D:EE:C2:34:EA:E3:F7:B9:5F:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8TCrjOIRe_ngC3uwjTq4_e5XzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/976925-2551-4b2b-900a-e111f322636a/1/z8TCrjOIRe_ngC3uwjTq4_e5XzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/976925-2551-4b2b-900a-e111f322636a/1/z8TCrjOIRe_ngC3uwjTq4_e5XzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:09:b0:17:06:4b:68:4f:45:c4:8c:e3:f4:ec:8c:e2:f4:37:
87:1f:d7:0e:16:76:e1:ab:29:f6:4c:ce:bc:42:8b:29:21:9f:
a3:9f:0c:ce:90:86:69:3c:7f:ea:d2:97:6f:89:ad:46:b0:8a:
3c:d1:8e:38:8f:3a:5b:ea:d2:e7:8a:97:9a:03:0b:5a:44:9c:
68:e2:72:79:4a:b1:ac:f6:ab:dd:88:56:49:ae:58:f6:fe:3f:
89:c6:52:5b:51:38:f2:6c:b6:4a:10:c3:c3:80:b8:8d:77:1c:
f6:91:2b:9d:88:4b:cd:e5:10:b3:e5:d5:22:67:b3:2e:3d:09:
3a:2b:fb:a7:53:97:bb:71:63:2f:84:9e:5e:2c:e7:29:ac:88:
c0:8d:e3:4b:61:60:a4:a0:98:d5:91:29:be:73:fa:48:c3:6b:
eb:9f:8e:f9:d3:e3:28:c8:3d:ca:1a:13:b6:29:0f:70:c9:34:
0d:9f:c8:3d:b4:e0:ed:9c:77:e8:10:44:e1:12:0e:ae:dc:37:
13:dd:d7:85:91:36:7b:f8:e1:e8:2c:44:8e:b4:7f:3f:90:ff:
a0:9d:9a:69:bb:4d:75:3f:85:e7:8c:35:b5:6b:bb:92:be:89:
cc:d4:7d:fd:67:a7:d3:e8:11:12:9f:fd:71:95:56:0d:6f:60:
04:e8:f6:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 05:03:13 2026 by rpki-client