Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.mft
File: z-rOcUwpVo7xlwB7FB0SdYzEFdU.mft (raw, json)
Hash identifier: KNUOSMGcJwq+5oAjdouFj74mzdH/Wv0oTdqCrdPxLAA=
Subject key identifier: 1A:74:A9:3F:6F:70:FD:FB:AF:62:75:DB:8F:77:EA:41:47:B1:C8:F6
Authority key identifier: CF:EA:CE:71:4C:29:56:8E:F1:97:00:7B:14:1D:12:75:8C:C4:15:D5
Certificate issuer: /CN=cfeace714c29568ef197007b141d12758cc415d5
Certificate serial: 019D28848EC9000DB37FFD0449009FBEE903
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z-rOcUwpVo7xlwB7FB0SdYzEFdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.mft
Manifest number: 13E8
Signing time: Thu 26 Mar 2026 05:01:08 +0000
Manifest this update: Thu 26 Mar 2026 05:01:08 +0000
Manifest next update: Fri 27 Mar 2026 05:01:08 +0000
Files and hashes: 1: G0xz0bLV9EAQly4_g7VObUShRtE.roa (hash: ABgZUft6yhbazt8klEM2ZtMjod9FBs3oPUw6gWfrGKk=)
2: Nl34h2eIaTAhYgUdF-bfPv1rKsw.roa (hash: Td8M1b5eYn7YJIEViFQBLyeZjyCEUobMfRK7pwtir7Y=)
3: UhXahydsOo_qiwzRtVGqPmi_pwk.roa (hash: DFHZo+ZnvqIq4efxazwJLIWQqpNgr1YvbSZZDY8hdCA=)
4: dMRJpZJ1JNYLWgq3FuqchxjnETE.roa (hash: fce7GbHsuDUNjDLPVqwrMpy3SolSS3TeDUI3vt7NKIY=)
5: eTyIZqGBeRs9llTAx7ZMC0wX0a4.roa (hash: O9RU0zVHK29OhSRSOJLSNO075vgHiZ+2AECagLjqPhA=)
6: oomUoRc8kAeXbJ8Vact092RPz5A.roa (hash: +kRKbGJLzWAadibg+zB0y/8pWSdZTuvX7OD3gBOEtzw=)
7: z-rOcUwpVo7xlwB7FB0SdYzEFdU.crl (hash: yJ5RnBIB/iLnU5RXWhJBrGZzgo+JjMAUdPt/wx9W6UQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.mft
rsync://rpki.ripe.net/repository/DEFAULT/z-rOcUwpVo7xlwB7FB0SdYzEFdU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:8e:c9:00:0d:b3:7f:fd:04:49:00:9f:be:e9:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfeace714c29568ef197007b141d12758cc415d5
Validity
Not Before: Mar 26 05:01:08 2026 GMT
Not After : Mar 27 05:01:08 2026 GMT
Subject: CN=1a74a93f6f70fdfbaf6275db8f77ea4147b1c8f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:8a:2a:1c:8b:36:e2:a9:1f:be:67:66:8a:0c:
81:f3:07:b5:bc:ab:73:95:74:5c:7c:8e:6b:2a:5c:
4d:f1:38:ce:ad:e4:c9:36:f2:74:9d:ac:c4:8c:e4:
04:85:86:5c:ad:73:8e:77:81:4d:c8:0e:34:30:a9:
bb:9f:41:ad:cd:9b:ee:66:dd:f2:a7:05:f1:d0:17:
a0:a4:1b:64:ed:6a:43:4d:87:e8:a7:0f:dd:45:3d:
0a:88:fe:fa:f0:a7:de:76:49:7e:50:c0:66:bd:fc:
46:23:5c:a8:36:43:04:07:0b:3c:4e:f0:1d:d3:1b:
7a:69:35:56:21:fe:29:17:cc:53:cf:ee:78:32:9c:
25:0c:d4:77:e8:b0:2f:ae:71:7b:09:d5:74:e0:db:
0e:4c:a8:fa:e4:16:99:fe:0a:6f:f3:dc:38:59:58:
74:f6:96:8d:d2:81:fc:8a:1b:6f:f5:37:ae:f1:cf:
7e:6d:de:7e:b6:10:4f:b2:6d:78:f9:e4:77:92:05:
d4:7c:bb:75:66:c7:03:2d:7c:06:e2:03:2d:4f:e3:
c4:5a:3a:5b:d1:6e:6b:81:e6:1b:ad:03:4d:91:83:
e7:4b:35:16:49:d4:66:e8:79:9b:1e:8e:a7:16:df:
3f:13:32:22:6d:1d:36:f0:7d:79:a0:0c:38:5f:00:
75:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:74:A9:3F:6F:70:FD:FB:AF:62:75:DB:8F:77:EA:41:47:B1:C8:F6
X509v3 Authority Key Identifier:
keyid:CF:EA:CE:71:4C:29:56:8E:F1:97:00:7B:14:1D:12:75:8C:C4:15:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z-rOcUwpVo7xlwB7FB0SdYzEFdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:63:3e:9c:55:12:32:c9:7b:26:c7:3a:3c:3d:c8:ea:43:da:
83:34:f7:4b:82:dd:33:e3:5c:47:d8:2b:e0:ef:0e:a3:46:a3:
f3:36:73:af:dc:7c:94:10:66:6d:03:5b:f4:d7:fd:97:40:19:
45:5e:3d:7d:67:01:8e:d5:10:51:62:6f:3a:df:ae:6e:7e:c6:
1c:f5:66:a9:5d:7e:f7:0f:0c:ff:6f:c6:66:14:dc:90:f7:e0:
c1:21:45:8b:02:43:19:37:36:16:96:cc:0b:bf:03:97:e4:01:
d8:9b:58:7b:01:4b:61:5f:96:99:8b:f0:c3:28:7c:9d:15:60:
35:a8:db:5b:97:cb:91:14:92:23:c3:72:4f:a8:04:a3:21:e6:
63:36:5e:07:e0:74:8f:d9:57:ee:18:ff:41:34:68:ce:10:51:
1e:1b:49:07:f7:81:5f:fd:1e:5f:25:de:20:65:11:df:6f:a8:
d0:fd:24:4d:d3:a2:9e:bc:3d:b8:e1:b1:d1:0a:f5:aa:81:b6:
38:52:8c:6e:d7:de:e7:1f:e7:90:23:f8:e5:2a:1d:fb:f4:01:
77:5e:bd:e8:bd:1e:0f:24:ed:85:85:65:6a:57:da:d6:f6:b6:
68:23:b2:0e:79:d0:cb:10:88:45:26:11:de:07:0c:96:f6:6b:
1d:47:cb:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ohI7JAA2zf/0ESQCfvukDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmZWFjZTcxNGMyOTU2OGVmMTk3MDA3YjE0MWQxMjc1OGNj
NDE1ZDUwHhcNMjYwMzI2MDUwMTA4WhcNMjYwMzI3MDUwMTA4WjAzMTEwLwYDVQQD
EygxYTc0YTkzZjZmNzBmZGZiYWY2Mjc1ZGI4Zjc3ZWE0MTQ3YjFjOGY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5YoqHIs24qkfvmdmigyB8we1vKtz
lXRcfI5rKlxN8TjOreTJNvJ0nazEjOQEhYZcrXOOd4FNyA40MKm7n0GtzZvuZt3y
pwXx0BegpBtk7WpDTYfopw/dRT0KiP768Kfedkl+UMBmvfxGI1yoNkMEBws8TvAd
0xt6aTVWIf4pF8xTz+54MpwlDNR36LAvrnF7CdV04NsOTKj65BaZ/gpv89w4WVh0
9paN0oH8ihtv9Teu8c9+bd5+thBPsm14+eR3kgXUfLt1ZscDLXwG4gMtT+PEWjpb
0W5rgeYbrQNNkYPnSzUWSdRm6HmbHo6nFt8/EzIibR028H15oAw4XwB1kQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBp0qT9vcP37r2J124936kFHscj2MB8GA1UdIwQY
MBaAFM/qznFMKVaO8ZcAexQdEnWMxBXVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvei1yT2NVd3BWbzd4bHdCN0ZCMFNkWXpFRmRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9mYzFiZWYtZTcyYi00YTQ1LTk0NjMt
OGZkMzk0YjUzNTdjLzEvei1yT2NVd3BWbzd4bHdCN0ZCMFNkWXpFRmRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9mYzFiZWYtZTcyYi00YTQ1LTk0NjMtOGZkMzk0YjUzNTdj
LzEvei1yT2NVd3BWbzd4bHdCN0ZCMFNkWXpFRmRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV2M+nFUS
Msl7Jsc6PD3I6kPagzT3S4LdM+NcR9gr4O8Oo0aj8zZzr9x8lBBmbQNb9Nf9l0AZ
RV49fWcBjtUQUWJvOt+ubn7GHPVmqV1+9w8M/2/GZhTckPfgwSFFiwJDGTc2FpbM
C78Dl+QB2JtYewFLYV+WmYvwwyh8nRVgNajbW5fLkRSSI8NyT6gEoyHmYzZeB+B0
j9lX7hj/QTRozhBRHhtJB/eBX/0eXyXeIGUR32+o0P0kTdOinrw9uOGx0Qr1qoG2
OFKMbtfe5x/nkCP45Sod+/QBd1696L0eDyTthYVlalfa1va2aCOyDnnQyxCIRSYR
3gcMlvZrHUfLZg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:29:02 2026 by rpki-client