Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/f2cc54-722a-495f-a94c-2836ad1c321e/1/Z8fCgrBpftBVTIBfUACrEro7nH4.mft
File: Z8fCgrBpftBVTIBfUACrEro7nH4.mft (raw, json)
Hash identifier: uqJXvPmYqNcOpRsvaVBscezGQrUxAW0H4Z6vs3P2XmE=
Subject key identifier: AB:D1:3D:62:BD:71:6C:78:56:71:58:6B:3E:C7:43:DC:36:D6:A1:93
Authority key identifier: 67:C7:C2:82:B0:69:7E:D0:55:4C:80:5F:50:00:AB:12:BA:3B:9C:7E
Certificate issuer: /CN=67c7c282b0697ed0554c805f5000ab12ba3b9c7e
Certificate serial: 019D3262BE57E72F5DD30FB35C17B37E7E4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8fCgrBpftBVTIBfUACrEro7nH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/f2cc54-722a-495f-a94c-2836ad1c321e/1/Z8fCgrBpftBVTIBfUACrEro7nH4.mft
Manifest number: 08C8
Signing time: Sat 28 Mar 2026 03:00:25 +0000
Manifest this update: Sat 28 Mar 2026 03:00:25 +0000
Manifest next update: Sun 29 Mar 2026 03:00:25 +0000
Files and hashes: 1: RnwkUlCJs9bw50GiSdHn7SGXOeo.roa (hash: 8K20xbc5P6ZWPSIDkIUTcAS1BtzkRFadgOrDQ1YrclI=)
2: Z8fCgrBpftBVTIBfUACrEro7nH4.crl (hash: hJThRE1cVx0mqW45l1W13pdOWox3mROVfCTT2wViyhs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/f2cc54-722a-495f-a94c-2836ad1c321e/1/Z8fCgrBpftBVTIBfUACrEro7nH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/f2cc54-722a-495f-a94c-2836ad1c321e/1/Z8fCgrBpftBVTIBfUACrEro7nH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z8fCgrBpftBVTIBfUACrEro7nH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:62:be:57:e7:2f:5d:d3:0f:b3:5c:17:b3:7e:7e:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67c7c282b0697ed0554c805f5000ab12ba3b9c7e
Validity
Not Before: Mar 28 03:00:25 2026 GMT
Not After : Mar 29 03:00:25 2026 GMT
Subject: CN=abd13d62bd716c785671586b3ec743dc36d6a193
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:9c:fb:b1:58:78:83:a2:53:d6:f5:c3:d5:b4:
9b:f5:c9:ac:2a:a4:2c:ec:94:e6:02:e7:22:2e:32:
c4:18:f4:96:ac:ed:68:2d:bc:20:c7:e6:00:f5:73:
bd:a1:ee:aa:98:30:d5:b0:f9:c3:93:63:4c:50:86:
ef:0d:93:3b:60:35:90:84:5f:42:1f:6e:b0:ca:25:
45:3d:2c:4d:9e:36:d8:54:dd:1a:ba:2f:c3:73:c3:
0b:77:e5:fa:9e:51:32:75:9b:bb:39:d1:99:a7:cc:
c3:71:d3:1a:40:4c:8e:71:a2:b2:81:76:8d:d0:f0:
f7:f0:68:14:8d:40:4c:ce:dc:34:ce:4a:40:05:7e:
50:ca:ec:6c:74:1f:38:e1:ef:23:bd:f2:96:6a:98:
74:f6:8a:67:75:9a:45:12:32:17:3c:2d:43:0e:82:
71:88:51:f3:34:b0:6f:34:20:d4:4b:50:23:3e:43:
23:b7:fc:c8:f1:f9:a0:a4:99:a7:02:a2:2d:42:d8:
9e:37:37:4a:b3:ab:02:ab:31:10:7f:f2:0c:1c:69:
82:14:18:d5:94:ab:4e:f2:51:3e:65:c3:66:56:7f:
b3:d1:bf:a9:89:27:8b:62:f3:0f:0d:3f:6b:87:fb:
1b:c9:53:72:0a:9e:c8:99:f9:96:12:9c:ae:c5:9d:
cb:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:D1:3D:62:BD:71:6C:78:56:71:58:6B:3E:C7:43:DC:36:D6:A1:93
X509v3 Authority Key Identifier:
keyid:67:C7:C2:82:B0:69:7E:D0:55:4C:80:5F:50:00:AB:12:BA:3B:9C:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8fCgrBpftBVTIBfUACrEro7nH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/f2cc54-722a-495f-a94c-2836ad1c321e/1/Z8fCgrBpftBVTIBfUACrEro7nH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/f2cc54-722a-495f-a94c-2836ad1c321e/1/Z8fCgrBpftBVTIBfUACrEro7nH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
db:65:f9:0d:71:02:83:72:f6:7f:de:a0:3e:70:0d:ef:ee:9d:
a8:1c:7d:06:19:c9:90:7d:70:dc:b2:9b:b2:56:2d:0d:a8:2f:
93:31:22:79:dd:af:f6:04:d5:ca:7b:92:a3:91:e0:db:40:87:
e2:a5:26:28:35:d2:41:77:c0:65:bb:a1:58:dc:e1:8c:fd:aa:
d1:38:9b:91:9d:a9:01:09:ef:55:fe:ba:44:d9:fa:e9:2d:2d:
07:b4:b9:12:c1:16:67:6a:a7:08:2a:d8:b4:4e:37:05:6b:24:
d3:55:0b:75:23:70:bc:68:55:00:65:05:85:5c:d9:9d:da:04:
87:b8:01:f4:c5:ec:42:c6:57:13:65:87:14:fa:55:a9:3c:7c:
95:c8:93:70:95:72:fd:df:70:83:04:57:da:5e:13:48:64:60:
31:89:6c:84:93:5b:40:23:71:5a:57:64:71:fe:6a:19:9f:84:
00:bd:2b:64:4f:f5:58:16:97:10:db:12:f9:ab:89:02:20:e9:
23:5e:1b:79:59:77:4a:cc:4b:a1:f7:1e:2d:74:dd:4d:49:ea:
ba:d3:7d:8e:53:7e:b0:c2:7e:5b:24:7c:d2:87:c0:3c:01:5f:
85:6f:57:04:78:08:86:b7:26:05:70:1d:2e:97:14:22:c2:18:
b5:b5:69:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:33:23 2026 by rpki-client