Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/4168da-e65c-47b6-bb61-36f24ad4a04f/1/z8cAjG-Rci3DsSdSdVjr2rxoDOY.mft
File: z8cAjG-Rci3DsSdSdVjr2rxoDOY.mft (raw, json)
Hash identifier: NXIULgqPMVEYjcTnOBLVUX6hiMRhtTw/IG5QWX6nKZQ=
Subject key identifier: F8:E5:B2:CE:7A:53:51:25:83:70:CF:5D:2E:10:DF:E4:84:EA:48:4B
Authority key identifier: CF:C7:00:8C:6F:91:72:2D:C3:B1:27:52:75:58:EB:DA:BC:68:0C:E6
Certificate issuer: /CN=cfc7008c6f91722dc3b127527558ebdabc680ce6
Certificate serial: 01A0D26E8E5CCE7628DF4571156DD3F33638
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8cAjG-Rci3DsSdSdVjr2rxoDOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/4168da-e65c-47b6-bb61-36f24ad4a04f/1/z8cAjG-Rci3DsSdSdVjr2rxoDOY.mft
Manifest number: 13CD
Signing time: Thu 24 Sep 2026 08:00:55 +0000
Manifest this update: Thu 24 Sep 2026 08:00:55 +0000
Manifest next update: Fri 25 Sep 2026 08:00:55 +0000
Files and hashes: 1: UbxGuXfCPU7PaazgdUkcbZmtVZU.roa (hash: U0sRu1JWMunI3dF2aemA2TfuPLAR6kavSK8Q8KfB14s=)
2: z8cAjG-Rci3DsSdSdVjr2rxoDOY.crl (hash: LLHVz0Z21iDTxR6wMAfxXR+1jinR3UxqeNG1H3NfyQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/4168da-e65c-47b6-bb61-36f24ad4a04f/1/z8cAjG-Rci3DsSdSdVjr2rxoDOY.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/4168da-e65c-47b6-bb61-36f24ad4a04f/1/z8cAjG-Rci3DsSdSdVjr2rxoDOY.mft
rsync://rpki.ripe.net/repository/DEFAULT/z8cAjG-Rci3DsSdSdVjr2rxoDOY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:6e:8e:5c:ce:76:28:df:45:71:15:6d:d3:f3:36:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfc7008c6f91722dc3b127527558ebdabc680ce6
Validity
Not Before: Sep 24 08:00:55 2026 GMT
Not After : Sep 25 08:00:55 2026 GMT
Subject: CN=f8e5b2ce7a5351258370cf5d2e10dfe484ea484b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:75:e5:a8:ab:ab:ac:36:be:54:d5:06:a4:38:
4f:aa:10:cf:03:79:8d:32:f9:49:8c:76:8f:38:63:
73:d2:54:54:73:fd:cb:6c:7f:3a:1c:f4:b7:b0:2b:
7b:3f:d2:58:16:bc:11:a9:69:41:8c:0f:ec:ca:6b:
2c:99:a9:2b:22:6f:a1:f1:bf:1e:c7:11:c6:4a:7d:
18:32:e0:fb:35:05:e8:43:10:d2:39:71:d2:d4:d2:
a9:98:28:b6:ab:56:10:f7:50:00:eb:62:90:6a:dc:
90:34:d8:56:5a:e8:11:9e:9c:ab:24:d3:35:b2:51:
e8:09:e8:32:62:31:ca:e2:de:51:43:02:44:90:df:
39:c4:eb:29:28:3c:75:41:b2:9f:79:e4:c8:93:e8:
5c:68:b2:ab:44:c2:fa:4f:06:a6:a8:f3:6a:26:eb:
20:8d:3a:ad:99:34:9c:f6:ad:7b:04:7a:af:49:23:
3a:9a:0c:72:dc:82:93:bb:17:30:63:ae:ab:86:70:
61:74:50:67:2b:ec:5b:60:b3:00:b7:4c:7e:03:5c:
9e:e7:b4:93:a8:39:c9:73:b1:e3:7f:8f:3a:55:f0:
b0:24:6d:57:fb:ba:dd:72:77:1d:4e:13:67:fd:62:
0e:f9:29:eb:e9:b2:a1:27:cb:02:2a:8e:a9:1d:cb:
09:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:E5:B2:CE:7A:53:51:25:83:70:CF:5D:2E:10:DF:E4:84:EA:48:4B
X509v3 Authority Key Identifier:
keyid:CF:C7:00:8C:6F:91:72:2D:C3:B1:27:52:75:58:EB:DA:BC:68:0C:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8cAjG-Rci3DsSdSdVjr2rxoDOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4168da-e65c-47b6-bb61-36f24ad4a04f/1/z8cAjG-Rci3DsSdSdVjr2rxoDOY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4168da-e65c-47b6-bb61-36f24ad4a04f/1/z8cAjG-Rci3DsSdSdVjr2rxoDOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:a0:67:b1:20:4e:b6:67:2e:e2:a1:4b:1a:08:d5:20:2e:2f:
09:2a:e0:be:11:be:37:25:ac:a5:88:a2:63:b7:2d:b4:39:9e:
7b:90:2b:84:61:cf:b2:45:b8:45:74:c3:93:14:18:38:2d:52:
40:a0:a0:57:b0:95:4e:50:90:b0:79:83:0a:0c:a5:d2:75:f1:
48:23:1b:ef:74:3a:de:ae:d4:52:f7:45:9e:f1:33:31:b4:6d:
59:6c:a8:7d:78:b0:c8:87:3e:1a:92:5e:92:4b:46:d9:a4:98:
e5:d7:ad:97:3a:51:3b:27:39:b5:2b:cf:74:d7:00:51:fe:af:
1e:5f:2e:1e:a8:26:92:cd:9d:2e:9a:f8:74:45:bf:58:fe:b6:
08:15:0a:36:bc:08:b9:b4:58:f8:bb:e2:26:f7:e6:a0:7b:d6:
4b:c2:de:9d:b3:dd:4d:c8:63:90:40:b8:95:02:d2:2f:3e:78:
b6:9f:0c:20:28:b7:89:d7:e3:bb:b3:d8:0c:e1:78:47:08:12:
8a:ec:bc:46:2d:29:ac:7c:27:26:f5:d4:c5:a5:36:e4:29:b2:
a5:95:aa:4f:60:07:f1:43:be:82:13:6e:9e:88:48:d7:0d:ba:
d4:56:fd:62:fa:6c:e4:74:6d:11:a1:8d:a3:b6:77:1c:71:98:
28:04:59:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:52:33 2026 by rpki-client