Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/3f33d8-cceb-4506-a2ef-c0ca80a05e2a/1/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.mft
File: z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.mft (raw, json)
Hash identifier: t5nfnkPswL5r0cutPVtG++bkMNCYyeEhSjXXsLHRU1g=
Subject key identifier: 10:29:42:7C:04:51:17:0D:36:1A:04:22:A2:86:1C:E4:48:66:44:24
Authority key identifier: CF:BA:04:3E:1C:4B:52:44:7A:8E:36:7B:BC:13:07:51:9F:A5:FA:E0
Certificate issuer: /CN=cfba043e1c4b52447a8e367bbc1307519fa5fae0
Certificate serial: 01A0F568C75E66E37F5FBAB951E28C6D262B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/3f33d8-cceb-4506-a2ef-c0ca80a05e2a/1/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.mft
Manifest number: 1554
Signing time: Thu 01 Oct 2026 03:01:19 +0000
Manifest this update: Thu 01 Oct 2026 03:01:19 +0000
Manifest next update: Fri 02 Oct 2026 03:01:19 +0000
Files and hashes: 1: kvrpde2NkZn_MY5z8yP0kUJPKB0.roa (hash: nyyXOBMDEJmgos3/uP4abipU5IsMQkBb228KURVxjm8=)
2: z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.crl (hash: AVtE421NfVSjuZw/btyLhqcKXRStYqo4uS1pmnKDXn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/3f33d8-cceb-4506-a2ef-c0ca80a05e2a/1/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/3f33d8-cceb-4506-a2ef-c0ca80a05e2a/1/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.mft
rsync://rpki.ripe.net/repository/DEFAULT/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 03:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f5:68:c7:5e:66:e3:7f:5f:ba:b9:51:e2:8c:6d:26:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfba043e1c4b52447a8e367bbc1307519fa5fae0
Validity
Not Before: Oct 1 03:01:19 2026 GMT
Not After : Oct 2 03:01:19 2026 GMT
Subject: CN=1029427c0451170d361a0422a2861ce448664424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:00:d0:b0:3b:f5:38:6a:ca:00:04:07:44:f4:
2b:39:d2:d5:ae:60:cb:4c:e7:17:f1:91:4b:2f:47:
2a:06:91:f8:3a:80:a1:ff:ff:5c:7b:cb:54:6b:fa:
32:0e:95:56:b6:57:95:46:20:1a:db:50:1e:77:2a:
f4:b1:32:ef:68:7a:40:7b:03:18:1b:e9:cb:00:9f:
ac:7a:1e:4b:9f:b8:d9:3c:17:87:ad:42:ca:d8:d7:
f4:59:e2:c2:97:bf:43:47:df:7b:2f:b4:46:81:e8:
52:c2:23:1b:4a:11:3b:a7:81:23:79:fc:e1:9e:eb:
0c:0e:94:c4:24:7f:00:bf:9f:5a:39:2d:1e:a8:16:
dc:8f:cf:78:ca:ed:14:d9:07:6c:3c:b3:da:5d:94:
db:62:cb:9c:2f:c4:f0:7a:d8:9f:c8:dd:2e:15:5e:
5e:84:1d:2d:e8:fb:97:d7:26:01:8c:1e:0a:58:74:
e7:30:b6:ac:b1:b1:8d:ba:20:a1:04:39:44:1c:ec:
5f:17:c9:84:1c:45:8b:45:3c:3b:ff:39:f1:71:85:
62:fc:4b:7b:44:44:16:e0:5f:5a:60:2d:38:c9:a4:
fd:92:5f:67:4c:f9:e4:46:f7:3b:2e:9e:69:2c:5e:
29:08:c0:bd:bc:65:42:0a:12:bb:de:36:82:6d:c3:
07:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:29:42:7C:04:51:17:0D:36:1A:04:22:A2:86:1C:E4:48:66:44:24
X509v3 Authority Key Identifier:
keyid:CF:BA:04:3E:1C:4B:52:44:7A:8E:36:7B:BC:13:07:51:9F:A5:FA:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3f33d8-cceb-4506-a2ef-c0ca80a05e2a/1/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3f33d8-cceb-4506-a2ef-c0ca80a05e2a/1/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:e7:bd:40:f3:0e:69:33:4e:9a:f4:fc:14:a6:81:9c:2f:04:
d0:47:b5:9b:ff:0a:e5:bc:58:63:33:bc:2b:94:49:38:ae:f8:
41:bb:0a:d7:d7:d1:78:22:36:b7:d3:c0:ed:2a:74:91:ae:22:
f6:84:c7:80:a6:72:b3:9f:ab:dd:0b:fc:4f:cc:b2:73:0a:ae:
19:c9:b5:46:bf:58:51:eb:f0:8d:1c:3d:1a:3a:36:60:a6:87:
ed:f0:36:c7:cf:c6:03:f3:61:74:b3:d7:d1:4c:5d:67:26:61:
f0:25:d4:8f:90:5a:92:ba:12:40:c3:90:8b:63:72:e9:cc:9f:
08:f0:a6:2d:d7:7f:ab:e0:a4:63:4a:4f:ec:80:f0:d2:0c:3d:
9f:7b:45:ab:d1:c6:6c:12:c0:05:55:98:b7:d3:80:97:89:fd:
1b:e1:06:d7:55:f8:33:df:c5:52:a4:c3:3f:52:32:5e:2b:1f:
b6:60:47:d0:97:d9:3f:9b:9a:08:aa:4a:2b:ea:24:24:02:42:
5e:9c:2b:35:b4:c3:e0:e1:cf:59:c2:40:14:c6:95:81:92:ed:
01:18:a1:94:f5:be:01:8e:cc:f0:6e:48:01:23:2e:54:4e:6e:
b6:e6:b6:4f:9e:72:28:70:d4:1b:14:1b:81:04:45:79:65:27:
69:47:73:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 13:55:36 2026 by rpki-client