Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/10c000-77b0-466d-b4cf-445400d703c8/1/z8q4ydIXrDB5wwFLGNRG4hPxlJI.mft
File: z8q4ydIXrDB5wwFLGNRG4hPxlJI.mft (raw, json)
Hash identifier: vUa7EzFibgJOGX3vmBG23HV650QzufT43p0yo2zWlnQ=
Subject key identifier: FA:C7:0D:61:56:0A:69:CB:47:13:D1:99:B7:05:FB:03:CC:4E:0E:2B
Authority key identifier: CF:CA:B8:C9:D2:17:AC:30:79:C3:01:4B:18:D4:46:E2:13:F1:94:92
Certificate issuer: /CN=cfcab8c9d217ac3079c3014b18d446e213f19492
Certificate serial: 019D265F2788EBCC9AE43FD67E6B91C1ED31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8q4ydIXrDB5wwFLGNRG4hPxlJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/10c000-77b0-466d-b4cf-445400d703c8/1/z8q4ydIXrDB5wwFLGNRG4hPxlJI.mft
Manifest number: 188C
Signing time: Wed 25 Mar 2026 19:01:03 +0000
Manifest this update: Wed 25 Mar 2026 19:01:03 +0000
Manifest next update: Thu 26 Mar 2026 19:01:03 +0000
Files and hashes: 1: EZtw6hEm4-HQ85gMEHMRDpjYxJg.roa (hash: JGtJrI2m1JuEfJQglCfJ1ymwyYrm8ObpYBPxT/bs1tE=)
2: kBCB2dunkrqzg_SLB8-xM23RZt0.roa (hash: 7JjO+kfaDrDk7G2Fc1zLFdd1555LJH9UCjrEULuO84w=)
3: z8q4ydIXrDB5wwFLGNRG4hPxlJI.crl (hash: OtCHI1PTwmBp+TQ4E/6NTb8LBqg56kUh4gTdR23eRC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/10c000-77b0-466d-b4cf-445400d703c8/1/z8q4ydIXrDB5wwFLGNRG4hPxlJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/10c000-77b0-466d-b4cf-445400d703c8/1/z8q4ydIXrDB5wwFLGNRG4hPxlJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/z8q4ydIXrDB5wwFLGNRG4hPxlJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:27:88:eb:cc:9a:e4:3f:d6:7e:6b:91:c1:ed:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfcab8c9d217ac3079c3014b18d446e213f19492
Validity
Not Before: Mar 25 19:01:03 2026 GMT
Not After : Mar 26 19:01:03 2026 GMT
Subject: CN=fac70d61560a69cb4713d199b705fb03cc4e0e2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d8:cb:a6:de:f4:57:36:80:70:01:d8:e4:07:
88:d2:47:0a:f3:e9:70:05:5e:92:8c:55:32:7f:c8:
87:fb:0d:60:af:8d:a3:07:42:5d:b7:f0:b5:45:40:
a3:ac:53:57:29:be:97:74:4a:63:24:31:8e:69:c8:
3f:b8:33:83:5b:fc:c1:47:f0:d5:89:c4:0f:21:34:
14:74:fa:6f:7d:4a:20:b8:33:37:82:cb:ca:6f:fe:
57:84:04:7c:6d:d0:4c:e9:3c:38:52:60:0d:7b:a3:
55:fa:17:43:cb:1b:5b:a8:5a:c4:68:dd:05:fe:45:
02:1c:1d:a2:8d:27:20:ce:79:1f:6c:c3:a7:8e:b7:
0c:76:cf:47:ef:80:83:05:a8:57:37:37:a5:fb:2a:
f8:49:b4:4f:a7:53:30:60:6e:0c:9a:18:3d:e7:fb:
25:4d:ea:e9:2a:49:a8:34:10:d2:84:25:23:f2:60:
55:72:49:a6:76:42:58:e4:b9:71:87:3a:b8:f4:55:
20:34:05:a6:93:a8:ca:8a:6e:61:07:e6:0b:ab:9a:
53:2b:ea:66:2b:2a:15:59:0c:cf:ec:75:e2:d1:ba:
78:52:b9:db:10:b8:ac:5f:74:28:40:d3:dc:f0:18:
3b:e7:f9:88:06:b7:3d:2d:91:e3:2d:5f:ed:76:0e:
48:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:C7:0D:61:56:0A:69:CB:47:13:D1:99:B7:05:FB:03:CC:4E:0E:2B
X509v3 Authority Key Identifier:
keyid:CF:CA:B8:C9:D2:17:AC:30:79:C3:01:4B:18:D4:46:E2:13:F1:94:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8q4ydIXrDB5wwFLGNRG4hPxlJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/10c000-77b0-466d-b4cf-445400d703c8/1/z8q4ydIXrDB5wwFLGNRG4hPxlJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/10c000-77b0-466d-b4cf-445400d703c8/1/z8q4ydIXrDB5wwFLGNRG4hPxlJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:3d:6b:59:aa:74:f9:51:31:27:25:84:92:b2:80:29:18:1e:
2d:9a:c7:ed:ae:38:0e:12:85:b7:5b:c7:e0:6f:f4:33:e9:b8:
a9:f9:fd:40:b7:04:64:85:ec:15:76:f4:fc:8e:93:a7:15:78:
9d:e2:f5:fe:69:c4:3e:31:98:03:e1:6c:21:c6:39:b5:71:9a:
81:17:42:21:63:cf:26:87:95:aa:e3:6a:73:ca:e0:74:00:ca:
04:f6:b6:ae:65:c4:3c:02:d0:ca:9b:68:ab:02:3a:43:c6:2f:
de:65:0b:ba:4c:b5:38:bc:06:63:9f:36:28:52:94:a7:06:c9:
30:08:6c:24:74:86:89:f6:72:25:72:60:0c:23:04:09:4b:f3:
24:b9:75:e0:4c:9c:b1:64:07:24:04:a0:1f:43:76:d7:2e:3c:
74:04:b9:4f:b8:4e:47:4c:4e:e7:a6:91:94:07:01:38:01:5c:
66:ce:94:df:84:10:68:77:e0:5f:93:1d:6b:67:ee:1f:b0:23:
e3:9d:fa:a1:05:5c:6e:d1:24:3e:78:f1:0d:f7:b2:1f:a4:49:
b3:5f:a5:36:26:da:3c:90:ec:09:59:67:80:69:9d:af:fa:9c:
d0:9c:b1:92:97:a7:34:55:39:e3:c5:22:57:0c:97:ef:1d:a8:
6a:cc:c5:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:58:45 2026 by rpki-client