Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft
File: z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft (raw, json)
Hash identifier: cOfiLq6Muywj0mQUtr/1N8JjTOR93EgYGnK5pPYvHPQ=
Subject key identifier: D8:D2:7E:2D:F1:5F:16:71:9F:F5:20:BB:49:38:D5:1F:DA:7E:80:B6
Authority key identifier: CF:5B:F0:F1:9A:99:4C:7F:68:6D:55:AB:FC:16:87:5D:39:E5:D4:E2
Certificate issuer: /CN=cf5bf0f19a994c7f686d55abfc16875d39e5d4e2
Certificate serial: 019F91DA1B6F9BF68D6F81AB5B363937E030
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z1vw8ZqZTH9obVWr_BaHXTnl1OI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft
Manifest number: 06E8
Signing time: Fri 24 Jul 2026 02:00:17 +0000
Manifest this update: Fri 24 Jul 2026 02:00:17 +0000
Manifest next update: Sat 25 Jul 2026 02:00:17 +0000
Files and hashes: 1: VBl0vhkZ0p5h13VJMHzt2wrsQ7A.roa (hash: VVaZ8MZsUSIufXGhoXhGO0V1DGyl/LodpDCAxeW4mZ0=)
2: voKmqzxnpt1_Etyi16YW_6f_LiA.roa (hash: FSyRyjfIYpd8tAuhdZ0kMGNXftsQsnkKkGGZLUK2+XE=)
3: z1vw8ZqZTH9obVWr_BaHXTnl1OI.crl (hash: qPqFUZ8AAVf3s5VoODAYc/JBTSErB+nUvq90T49p7PE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft
rsync://rpki.ripe.net/repository/DEFAULT/z1vw8ZqZTH9obVWr_BaHXTnl1OI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:1b:6f:9b:f6:8d:6f:81:ab:5b:36:39:37:e0:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf5bf0f19a994c7f686d55abfc16875d39e5d4e2
Validity
Not Before: Jul 24 02:00:17 2026 GMT
Not After : Jul 25 02:00:17 2026 GMT
Subject: CN=d8d27e2df15f16719ff520bb4938d51fda7e80b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3f:c6:f2:21:0e:6d:a7:ea:34:39:dc:2d:32:
b6:04:d5:08:25:7f:5d:70:8f:0e:ba:45:b0:90:5e:
58:d1:77:90:b0:07:d9:f8:75:2b:1e:fe:1e:42:3c:
1a:bc:2e:28:da:51:c9:04:93:1e:4e:aa:56:92:d0:
ec:71:14:d7:47:07:98:dd:79:e2:f4:95:1b:f1:41:
ed:d4:c2:76:56:bc:e2:a3:3c:71:a8:30:09:5f:9f:
9a:59:f1:70:fe:d1:cd:9f:03:4a:4d:d7:93:96:63:
be:61:86:8f:78:1c:bc:00:59:f1:87:ba:3e:30:4f:
ca:d0:ea:d4:a0:9b:a9:e0:f7:05:22:55:a7:5f:8a:
90:e6:77:c1:9b:f0:34:e1:e5:92:f0:6d:81:15:81:
6a:98:a6:c7:27:da:5f:78:1b:fd:9b:cf:ca:b3:7b:
2b:f7:a5:36:c3:fc:fa:ad:5f:a8:3c:72:ae:ed:40:
ce:1e:49:08:51:78:11:21:07:d3:9a:4e:57:8b:8f:
c5:ee:82:99:ca:fe:23:10:49:af:71:31:fc:91:16:
d6:97:e4:a4:59:7c:0c:6d:ff:6f:eb:2e:81:24:01:
77:b3:c2:d6:fd:87:03:b4:60:c8:be:ec:05:ee:da:
68:a0:73:10:52:1a:b0:c2:cf:ee:a1:c7:73:9b:b1:
65:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:D2:7E:2D:F1:5F:16:71:9F:F5:20:BB:49:38:D5:1F:DA:7E:80:B6
X509v3 Authority Key Identifier:
keyid:CF:5B:F0:F1:9A:99:4C:7F:68:6D:55:AB:FC:16:87:5D:39:E5:D4:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z1vw8ZqZTH9obVWr_BaHXTnl1OI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:04:bd:73:50:e4:e9:f3:48:c8:cc:1f:9b:11:d0:15:fd:10:
f4:25:d1:8d:11:39:41:5a:41:d7:c2:f3:8e:99:3f:4f:47:0a:
57:59:97:8d:0d:25:c2:01:47:b4:cf:5f:da:eb:0e:d2:57:d9:
8b:74:a4:d1:b3:d9:c1:27:65:57:3f:3e:b4:73:6f:81:ea:cc:
41:b2:0c:17:54:d0:19:ec:db:90:5f:4c:ce:c5:d9:5e:5b:88:
3b:db:57:e2:72:c2:8b:7a:05:e0:2c:a6:24:78:04:f4:1e:80:
76:3b:30:e2:bd:fb:1c:ef:be:6d:28:03:0c:6d:19:e1:b0:66:
21:8a:6f:f5:29:05:77:2b:e4:da:c5:20:a9:45:8c:0f:89:65:
24:b3:79:c1:b1:05:a2:7b:46:fa:49:b8:68:2c:2b:e3:f3:98:
28:0f:67:9f:4b:63:fd:b8:b7:cb:0b:2a:bb:e8:27:24:ed:47:
3a:4e:43:fe:c2:4b:a8:d7:33:8b:eb:a6:6f:31:6f:b8:af:f5:
a2:94:06:da:92:99:8c:82:f9:8a:2c:dd:b2:bc:35:14:a7:b5:
a0:9e:fc:9a:17:18:4a:3e:54:7e:9c:90:a2:03:37:42:51:73:
25:8c:3f:48:80:10:48:4d:f2:51:36:27:4a:75:7c:79:58:18:
bd:1c:e8:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:12:47 2026 by rpki-client