Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.mft
File: z-rOcUwpVo7xlwB7FB0SdYzEFdU.mft (raw, json)
Hash identifier: P8VM7vv0oPo54HxmRL/JIG2msIjyPIX+sIZJCDs0epY=
Subject key identifier: B9:5D:FC:EB:9F:88:99:7D:FD:05:A6:74:68:E8:2A:DB:37:41:51:6A
Authority key identifier: CF:EA:CE:71:4C:29:56:8E:F1:97:00:7B:14:1D:12:75:8C:C4:15:D5
Certificate issuer: /CN=cfeace714c29568ef197007b141d12758cc415d5
Certificate serial: 019E1DC72570D51A80EDE2D5F0033F8D3B46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z-rOcUwpVo7xlwB7FB0SdYzEFdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.mft
Manifest number: 1467
Signing time: Tue 12 May 2026 20:00:50 +0000
Manifest this update: Tue 12 May 2026 20:00:50 +0000
Manifest next update: Wed 13 May 2026 20:00:50 +0000
Files and hashes: 1: G0xz0bLV9EAQly4_g7VObUShRtE.roa (hash: ABgZUft6yhbazt8klEM2ZtMjod9FBs3oPUw6gWfrGKk=)
2: Nl34h2eIaTAhYgUdF-bfPv1rKsw.roa (hash: Td8M1b5eYn7YJIEViFQBLyeZjyCEUobMfRK7pwtir7Y=)
3: UhXahydsOo_qiwzRtVGqPmi_pwk.roa (hash: DFHZo+ZnvqIq4efxazwJLIWQqpNgr1YvbSZZDY8hdCA=)
4: dMRJpZJ1JNYLWgq3FuqchxjnETE.roa (hash: fce7GbHsuDUNjDLPVqwrMpy3SolSS3TeDUI3vt7NKIY=)
5: eTyIZqGBeRs9llTAx7ZMC0wX0a4.roa (hash: O9RU0zVHK29OhSRSOJLSNO075vgHiZ+2AECagLjqPhA=)
6: oomUoRc8kAeXbJ8Vact092RPz5A.roa (hash: +kRKbGJLzWAadibg+zB0y/8pWSdZTuvX7OD3gBOEtzw=)
7: z-rOcUwpVo7xlwB7FB0SdYzEFdU.crl (hash: nyHf6Dk7bFz1xb9qRhWn4qWc8AiOyEc1nbMwSjEG7IE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.mft
rsync://rpki.ripe.net/repository/DEFAULT/z-rOcUwpVo7xlwB7FB0SdYzEFdU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:25:70:d5:1a:80:ed:e2:d5:f0:03:3f:8d:3b:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfeace714c29568ef197007b141d12758cc415d5
Validity
Not Before: May 12 20:00:50 2026 GMT
Not After : May 13 20:00:50 2026 GMT
Subject: CN=b95dfceb9f88997dfd05a67468e82adb3741516a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c1:6a:44:9d:52:cc:80:6c:36:8b:c5:1a:7c:
5b:68:94:60:dc:57:fb:7a:74:bf:2f:71:7a:fc:d7:
b1:8f:47:cd:86:c5:97:77:ef:70:4e:ba:87:0b:0e:
69:76:3a:59:f3:33:bb:77:1a:93:66:cf:bf:06:34:
80:b0:ab:a2:89:09:4a:0f:2f:0e:78:dd:28:3f:34:
ed:30:42:44:05:86:12:5d:be:c8:69:e4:f3:f1:5f:
8a:a7:38:fd:94:19:fb:d6:1b:e3:a7:d7:5c:d0:67:
25:0d:26:7a:b0:d5:59:29:f4:3c:d1:e5:22:a5:01:
52:3b:39:17:5a:7f:fd:4e:72:d0:f1:ba:c9:4d:44:
15:aa:f2:8b:04:9a:90:56:35:ba:8a:36:dc:b1:36:
b0:74:4e:40:43:11:0b:9d:b2:b1:18:00:04:c4:65:
f1:62:0c:b8:9a:ac:be:61:2c:fe:9d:8c:7d:98:30:
ae:37:e2:4b:4e:f6:80:02:0d:43:e4:19:0a:50:2e:
83:89:83:95:39:93:c0:77:2e:98:bc:f2:18:98:4f:
80:88:fa:8c:58:a2:32:d3:02:63:77:19:46:e8:86:
17:40:c2:78:12:13:bc:7b:e3:d8:6c:34:b3:c5:45:
e1:cb:b4:4f:57:f9:f9:db:2b:fe:3d:43:9f:e9:6c:
47:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:5D:FC:EB:9F:88:99:7D:FD:05:A6:74:68:E8:2A:DB:37:41:51:6A
X509v3 Authority Key Identifier:
keyid:CF:EA:CE:71:4C:29:56:8E:F1:97:00:7B:14:1D:12:75:8C:C4:15:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z-rOcUwpVo7xlwB7FB0SdYzEFdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:e2:c8:74:71:9b:13:4f:3c:93:38:dd:c1:e6:cc:4f:a3:ef:
03:8f:54:03:cb:83:9f:6f:4c:0c:81:01:2b:87:f2:be:b7:ce:
cb:a4:c3:a5:93:25:cc:8a:2e:69:a9:93:ed:1a:2b:fe:64:5c:
81:3e:2f:9a:c0:c0:1c:99:ea:ec:94:ce:6e:4f:65:d6:7d:e6:
a6:a8:7e:9f:aa:56:41:8f:c9:ed:cc:ec:4f:00:b9:d3:32:47:
75:90:01:6d:87:8e:f7:83:5b:dc:41:7d:f0:32:e1:a9:81:54:
47:21:67:a0:98:76:da:01:b5:8f:2d:da:d1:b1:94:77:b0:36:
30:5b:45:eb:d4:e2:b3:60:f9:0c:4e:96:ae:00:a6:3d:65:77:
9b:16:b8:d4:c8:7b:90:82:a0:d5:ed:fe:3e:a7:96:b9:a6:fe:
82:eb:93:d8:d8:d1:90:c4:d1:0c:d2:a9:a2:e9:ab:a5:e8:a7:
c4:24:0c:9a:4f:b7:38:72:65:2d:53:a2:98:97:4d:83:00:47:
1c:86:fe:a0:8e:c5:b4:a9:2f:57:a4:5a:4c:db:f4:c2:24:96:
be:4c:28:73:02:b7:5a:ad:3a:fb:b6:be:43:c5:62:0e:07:c6:
cb:39:d1:a4:bb:2e:11:4f:8b:e8:2b:d7:52:66:81:6c:9c:a3:
31:c1:2f:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:07:03 2026 by rpki-client