Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/d79fbe-6132-43be-b8c3-3eea51adbd94/1/Z8ooyF9TcJI3VX3talTbfEODj98.mft
File: Z8ooyF9TcJI3VX3talTbfEODj98.mft (raw, json)
Hash identifier: AlOmchtlkzt2v0hojp/6FZMF7TOqzeVdcAWVboq/Y/Q=
Subject key identifier: F8:D6:B9:73:86:CE:96:5F:D1:68:7C:0A:04:B3:01:86:5A:F5:0F:A1
Authority key identifier: 67:CA:28:C8:5F:53:70:92:37:55:7D:ED:6A:54:DB:7C:43:83:8F:DF
Certificate issuer: /CN=67ca28c85f53709237557ded6a54db7c43838fdf
Certificate serial: 019F8F7FA0E7C9DA1E4D4A54146D60A71F20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8ooyF9TcJI3VX3talTbfEODj98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/d79fbe-6132-43be-b8c3-3eea51adbd94/1/Z8ooyF9TcJI3VX3talTbfEODj98.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 15:02:13 +0000
Manifest this update: Thu 23 Jul 2026 15:02:13 +0000
Manifest next update: Fri 24 Jul 2026 15:02:13 +0000
Files and hashes: 1: 0n7BjsuUtMK9eux3ZPIRhUmMWKU.roa (hash: mtRTQIogdYCGX/FRYcEHTrpW3dJUutGmmUeZceCASwo=)
2: Z8ooyF9TcJI3VX3talTbfEODj98.crl (hash: DOhpScF5WLlAgLkfPSigUEtgXVz+sJ4q7mbZrQAb/OU=)
3: tVnRYYZjjcF8Zb90VZauoKBz0VM.asa (hash: js5NtSgPh808PFkiRkghv7MP7EdL9RD16y2VNGbfdfU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/d79fbe-6132-43be-b8c3-3eea51adbd94/1/Z8ooyF9TcJI3VX3talTbfEODj98.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/d79fbe-6132-43be-b8c3-3eea51adbd94/1/Z8ooyF9TcJI3VX3talTbfEODj98.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z8ooyF9TcJI3VX3talTbfEODj98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7f:a0:e7:c9:da:1e:4d:4a:54:14:6d:60:a7:1f:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67ca28c85f53709237557ded6a54db7c43838fdf
Validity
Not Before: Jul 23 15:02:13 2026 GMT
Not After : Jul 24 15:02:13 2026 GMT
Subject: CN=f8d6b97386ce965fd1687c0a04b301865af50fa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2a:2d:cd:50:09:d0:1a:be:49:bd:42:5a:50:
dd:e7:3f:cd:e2:ed:68:55:da:51:a6:52:6a:a5:d2:
be:b4:54:b2:95:5f:77:d6:13:56:1c:24:38:19:59:
08:c0:ec:09:19:2a:50:72:4e:05:f4:98:60:66:2c:
82:82:3a:58:81:02:27:99:75:a3:55:ae:ed:31:f6:
9e:26:ca:b3:e2:ce:f1:f8:2b:be:b5:b8:d3:c3:68:
0d:81:cc:c2:da:61:7a:fe:c0:8f:72:bd:f2:0b:03:
52:ab:53:1b:d2:b1:8e:a6:70:6f:91:b3:ab:dd:31:
d7:12:ce:69:8b:79:72:a9:0a:ba:26:ae:dd:16:2e:
7d:1f:4b:17:fe:52:9e:cf:c0:20:e1:ae:77:d6:c8:
e0:6a:84:cd:d1:e8:94:de:20:f4:bd:85:01:77:2c:
d9:1e:c6:39:78:9f:1a:35:a8:06:e2:a2:dd:3b:65:
8d:6b:cf:92:a8:0a:ff:7d:33:7c:4a:40:b7:5c:38:
65:b1:72:8d:fb:b5:29:cc:9d:0e:8f:f1:1d:48:97:
6a:9a:e1:39:cb:1a:1b:1c:72:a5:18:1e:9d:d6:3c:
fe:09:f3:52:90:ad:36:c2:f7:18:08:91:4b:b6:b9:
c6:46:b4:e3:1b:c7:3d:84:97:f3:5b:40:2f:e3:da:
3c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:D6:B9:73:86:CE:96:5F:D1:68:7C:0A:04:B3:01:86:5A:F5:0F:A1
X509v3 Authority Key Identifier:
keyid:67:CA:28:C8:5F:53:70:92:37:55:7D:ED:6A:54:DB:7C:43:83:8F:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8ooyF9TcJI3VX3talTbfEODj98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d79fbe-6132-43be-b8c3-3eea51adbd94/1/Z8ooyF9TcJI3VX3talTbfEODj98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d79fbe-6132-43be-b8c3-3eea51adbd94/1/Z8ooyF9TcJI3VX3talTbfEODj98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:af:76:43:10:22:5a:c3:bc:8f:40:f2:28:96:92:b3:d0:e9:
fd:02:05:c1:1b:35:1f:7b:5e:f4:50:45:b6:40:4f:9a:2b:b0:
e3:aa:dc:6d:35:7c:c0:56:d5:4a:cb:1b:51:2e:42:9b:11:2e:
bd:46:ce:7b:fb:c9:f1:82:fa:f9:60:2f:00:0b:a3:ee:18:57:
c8:8d:2b:14:d5:9d:83:fd:98:ee:ad:f7:bd:40:06:2e:61:81:
b1:57:14:41:51:c1:39:f9:25:c7:9b:c7:bd:bc:73:4c:be:59:
81:14:5c:88:a8:13:f9:81:b1:54:c0:15:2c:d7:94:63:a4:c2:
76:31:79:f8:bb:54:f8:e1:93:fb:74:05:0b:f6:cb:42:97:ee:
f3:7e:14:49:51:81:e0:b4:94:c2:29:13:6e:64:ab:29:4f:91:
d8:d8:10:7c:39:c2:0d:46:a7:9d:34:1e:74:be:10:2e:01:67:
65:88:49:8a:c6:f9:27:8c:91:85:78:ce:3f:19:c2:63:38:0c:
6a:ea:54:3c:fc:e5:26:ae:97:ee:fc:e9:d4:63:25:d1:9f:58:
cc:13:01:ff:85:44:79:8d:ac:03:08:81:71:fd:65:15:f0:ea:
89:7c:b1:cb:bd:ab:a8:70:8e:51:53:d7:b8:87:e4:c0:66:d6:
9a:ad:9e:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:56:13 2026 by rpki-client