Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/081b84-4ece-4005-b28d-9f293172bb6b/1/Z_0-GfWDNh_l2QpBKxKA98_7gB8.mft
File: Z_0-GfWDNh_l2QpBKxKA98_7gB8.mft (raw, json)
Hash identifier: B0f2h6445cYIYqMmnL3FFEFKyTrpVxT4txgUCkyO1zY=
Subject key identifier: A9:09:A6:30:21:28:A5:AD:7F:4E:61:6A:49:A5:95:2E:44:1C:9A:5F
Authority key identifier: 67:FD:3E:19:F5:83:36:1F:E5:D9:0A:41:2B:12:80:F7:CF:FB:80:1F
Certificate issuer: /CN=67fd3e19f583361fe5d90a412b1280f7cffb801f
Certificate serial: 019F9211C5B44C1FEE11E5A5F70398F18738
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_0-GfWDNh_l2QpBKxKA98_7gB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/081b84-4ece-4005-b28d-9f293172bb6b/1/Z_0-GfWDNh_l2QpBKxKA98_7gB8.mft
Manifest number: 195A
Signing time: Fri 24 Jul 2026 03:01:05 +0000
Manifest this update: Fri 24 Jul 2026 03:01:05 +0000
Manifest next update: Sat 25 Jul 2026 03:01:05 +0000
Files and hashes: 1: EO1xuq0TyBN7jL2nsBNR6LuDlQo.roa (hash: 0YddX8lcftncrD+VCEJL3eDzYZ6fCFEVTyRED0oHXFA=)
2: Z_0-GfWDNh_l2QpBKxKA98_7gB8.crl (hash: X3QtahGZr81fkjtHYFA2AAjJv1OyDxIM7Qo85JdzJyE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/081b84-4ece-4005-b28d-9f293172bb6b/1/Z_0-GfWDNh_l2QpBKxKA98_7gB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/081b84-4ece-4005-b28d-9f293172bb6b/1/Z_0-GfWDNh_l2QpBKxKA98_7gB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z_0-GfWDNh_l2QpBKxKA98_7gB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:c5:b4:4c:1f:ee:11:e5:a5:f7:03:98:f1:87:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67fd3e19f583361fe5d90a412b1280f7cffb801f
Validity
Not Before: Jul 24 03:01:05 2026 GMT
Not After : Jul 25 03:01:05 2026 GMT
Subject: CN=a909a6302128a5ad7f4e616a49a5952e441c9a5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:90:32:fc:5b:25:4e:b2:83:2d:ce:9e:12:8f:
5f:a5:2b:6c:20:f2:fa:88:1c:df:7a:9f:97:b3:a8:
25:6f:a9:63:9e:eb:36:1c:88:b7:60:f5:cd:cf:7e:
c5:76:ae:20:e9:b6:74:1a:5a:d5:f7:f8:03:cd:ed:
c5:5d:30:34:05:57:6d:34:7b:1c:c2:51:f8:a9:84:
06:c0:61:ee:8e:87:96:cd:b0:c5:1f:b3:b5:87:cb:
f9:a1:e9:1b:29:3f:3c:af:ae:d9:d3:89:2e:3c:02:
ab:91:b0:23:d8:fc:87:db:e4:34:18:35:17:50:fe:
59:29:e4:e7:ca:c0:f7:c6:1c:30:39:87:bc:e5:9e:
aa:a5:0f:c3:68:5f:8a:21:9c:7e:69:da:1b:61:3a:
c6:7f:53:b1:68:18:94:e9:5c:df:ab:ae:f0:72:11:
38:0c:17:f6:44:4d:ce:e5:bd:22:a0:2b:4a:96:53:
65:ac:64:ac:97:57:19:d0:46:4a:b2:84:3e:73:b8:
cd:5e:f5:2b:a3:d2:d2:03:6f:05:a0:93:34:7f:13:
ec:81:a1:2b:1a:27:24:c7:0e:57:eb:75:f1:c8:29:
ee:97:70:46:49:81:a9:a1:20:c2:1f:b1:fa:e1:0b:
a3:f1:08:d2:a7:8e:86:f8:3b:1b:b3:b7:83:f7:d6:
5c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:09:A6:30:21:28:A5:AD:7F:4E:61:6A:49:A5:95:2E:44:1C:9A:5F
X509v3 Authority Key Identifier:
keyid:67:FD:3E:19:F5:83:36:1F:E5:D9:0A:41:2B:12:80:F7:CF:FB:80:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_0-GfWDNh_l2QpBKxKA98_7gB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/081b84-4ece-4005-b28d-9f293172bb6b/1/Z_0-GfWDNh_l2QpBKxKA98_7gB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/081b84-4ece-4005-b28d-9f293172bb6b/1/Z_0-GfWDNh_l2QpBKxKA98_7gB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:3a:be:78:e8:f3:1a:db:d9:c9:13:1a:51:71:1a:9e:79:3a:
ee:29:bf:fd:99:a2:6e:b0:fe:75:57:dc:31:e7:39:0a:f6:64:
62:65:ee:77:64:a7:90:44:ba:9a:6f:0d:b9:9e:60:fa:73:da:
0b:8c:44:32:33:f2:15:c0:5d:c0:b4:d2:4f:ef:bd:98:1f:b7:
88:52:b0:5c:3d:3e:cb:d8:6c:a0:a7:59:69:31:57:77:6b:33:
7f:59:aa:8b:24:3c:b1:37:1f:ee:31:f9:4e:7d:5c:ca:ca:16:
1c:24:38:a7:bc:d7:88:19:88:bf:f6:02:45:2e:1e:61:dd:11:
78:a5:c3:8c:64:36:83:0f:f5:bb:28:24:62:5a:9e:2b:a0:c7:
5b:6d:6d:27:35:8f:b0:ab:7d:32:bc:69:16:7c:b1:65:b9:a4:
43:03:f4:63:9f:84:8b:c1:ca:e5:97:1c:87:38:18:e4:45:24:
52:8c:e5:7e:5b:fb:68:ad:94:71:ee:f5:b5:19:dc:db:64:de:
f9:66:36:dc:81:97:15:b7:11:d4:74:26:c2:4a:9a:a4:f8:d5:
a6:1e:cb:bf:5a:c4:fe:29:d7:05:9b:0a:02:94:a0:cc:9f:4c:
50:b4:67:0b:9b:ae:d2:45:f2:42:2e:b3:f7:e1:69:bd:7a:85:
9d:72:2a:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:25:24 2026 by rpki-client