Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/z8fvK3ZllIkteJKMvngXef3OZ9A.mft
File: z8fvK3ZllIkteJKMvngXef3OZ9A.mft (raw, json)
Hash identifier: Lth/B7vzMdn5v0A5NZhcLRrg+aM4UoYuTJMBhUBYGoY=
Subject key identifier: EE:95:0F:94:FE:45:0C:F7:8F:D0:87:00:4C:27:E3:0E:47:07:14:DF
Authority key identifier: CF:C7:EF:2B:76:65:94:89:2D:78:92:8C:BE:78:17:79:FD:CE:67:D0
Certificate issuer: /CN=cfc7ef2b766594892d78928cbe781779fdce67d0
Certificate serial: 019D27DFAFA77D192094978A43798153CE64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8fvK3ZllIkteJKMvngXef3OZ9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/z8fvK3ZllIkteJKMvngXef3OZ9A.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 02:01:04 +0000
Manifest this update: Thu 26 Mar 2026 02:01:04 +0000
Manifest next update: Fri 27 Mar 2026 02:01:04 +0000
Files and hashes: 1: 5w8L1o2xDu1EgnFPzhAl4Dxiiuk.roa (hash: N7gwY/QH2RLdT3WqeakNq3TDez5YAW9J33gsQvciQVk=)
2: MGbK18crReeycP3hT0y5D69KHDg.roa (hash: bJ5cOxmt243LIA6o4KZp7HyiaUla0ibwqPSbCU8ga5Y=)
3: r3Gj28qxCmsCd0VMfNKOdxAgbOI.roa (hash: rVagaCAlGM1dBitdjHx7SnwM1EWU8ftBiG82vwvCY6g=)
4: tGgYc8esx93FIuv6qVdvLrrfYjA.roa (hash: NqmOiovtc0twyj4G/0azepimZEOqE1VqYTbbiNKPooI=)
5: z8fvK3ZllIkteJKMvngXef3OZ9A.crl (hash: wO414jrspfVc3rrIRDy1Sl9wwy8R1Qur8sEgmVdnDEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/z8fvK3ZllIkteJKMvngXef3OZ9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/z8fvK3ZllIkteJKMvngXef3OZ9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/z8fvK3ZllIkteJKMvngXef3OZ9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:af:a7:7d:19:20:94:97:8a:43:79:81:53:ce:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfc7ef2b766594892d78928cbe781779fdce67d0
Validity
Not Before: Mar 26 02:01:04 2026 GMT
Not After : Mar 27 02:01:04 2026 GMT
Subject: CN=ee950f94fe450cf78fd087004c27e30e470714df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:11:22:6d:93:a5:fe:5a:97:14:83:7e:bf:20:
65:f6:0e:05:ac:a4:8e:15:5c:6c:30:60:a6:29:dc:
05:e6:bb:ab:9a:83:bd:4f:cc:d5:fd:4c:83:b8:4e:
92:cc:48:c3:9a:16:ee:60:4a:c1:38:fc:51:3a:ff:
f4:82:d5:d5:b5:d3:bb:07:58:95:f0:31:ca:1f:3c:
2e:42:ca:8a:06:ce:21:21:98:62:1b:eb:ee:39:d2:
e8:bd:62:06:36:22:1a:ab:69:2a:31:0e:d3:07:8c:
43:6f:31:e1:3b:90:50:91:25:9d:0a:64:2a:68:8b:
68:21:82:81:f8:5f:c4:aa:0d:19:87:37:22:fe:df:
c6:95:f9:a2:17:7f:ef:1e:d6:15:27:62:35:98:fa:
80:f2:e9:9f:87:3e:6c:16:df:07:9a:f5:52:ba:48:
e2:04:56:9f:d4:66:1a:64:94:70:ac:ea:21:7f:34:
30:e7:c7:55:e5:15:ba:70:b5:13:e2:de:65:25:18:
ef:5e:b9:d1:80:6d:da:bd:99:a5:51:2e:db:61:1d:
ca:fd:ac:67:62:67:64:9b:e6:dd:aa:95:4d:31:dc:
44:1f:ab:dd:ec:a2:38:8c:ee:36:db:ba:96:c3:fa:
df:ad:33:ca:28:4d:ea:b6:f4:1b:e0:cb:0b:a6:0c:
cc:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:95:0F:94:FE:45:0C:F7:8F:D0:87:00:4C:27:E3:0E:47:07:14:DF
X509v3 Authority Key Identifier:
keyid:CF:C7:EF:2B:76:65:94:89:2D:78:92:8C:BE:78:17:79:FD:CE:67:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8fvK3ZllIkteJKMvngXef3OZ9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/z8fvK3ZllIkteJKMvngXef3OZ9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/z8fvK3ZllIkteJKMvngXef3OZ9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:14:39:25:bd:6d:28:71:6e:83:30:98:ce:27:c3:20:b4:b4:
d1:ea:8f:9a:56:23:13:47:5c:70:25:3b:aa:f8:bb:72:63:d8:
30:b4:a1:46:2f:ba:f5:8c:af:a8:e8:fe:dc:6b:f8:09:97:97:
04:7a:25:63:c3:1f:1c:4d:74:a7:81:35:73:f8:a8:54:43:b4:
37:a1:e3:fd:f2:8a:54:e4:72:81:33:b5:38:7a:cc:c4:9a:e8:
99:4c:d9:f3:b9:c5:ae:e7:d5:82:cf:57:55:e8:30:19:b5:d3:
9d:28:5b:ab:3f:bf:b4:0b:f1:c6:b3:36:fb:f3:7c:03:49:cb:
ed:4d:ac:4f:8d:ba:a6:6d:9f:89:8c:01:78:9f:fe:ad:60:ea:
a7:82:90:52:4e:44:0a:dd:f5:04:c5:84:c0:22:ef:97:e7:3f:
86:f1:36:82:7c:bb:e2:1e:02:09:7b:56:cf:4d:c5:92:b3:88:
cc:b3:01:b2:e2:c8:f4:14:1d:f0:6f:e7:df:36:ed:30:92:f2:
22:68:3c:fc:19:20:89:b5:dd:fc:a8:39:32:29:3a:30:17:1e:
4e:8f:ab:77:98:0a:bf:e7:58:fa:60:f0:49:4e:04:a2:ee:d9:
3c:07:da:16:b4:8c:3b:2f:f0:c5:76:ab:a7:03:b2:9c:23:26:
be:7a:61:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:58:54 2026 by rpki-client