Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/3f33d8-cceb-4506-a2ef-c0ca80a05e2a/1/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.mft
File: z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.mft (raw, json)
Hash identifier: FT67NIh2ghift1Ma+VOzxRFEg7CGiBk46B57r0p23Qw=
Subject key identifier: 4B:74:AC:16:4E:C3:49:6E:F6:EE:05:3D:C5:64:AC:B6:72:11:55:57
Authority key identifier: CF:BA:04:3E:1C:4B:52:44:7A:8E:36:7B:BC:13:07:51:9F:A5:FA:E0
Certificate issuer: /CN=cfba043e1c4b52447a8e367bbc1307519fa5fae0
Certificate serial: 019D2816D98A33FBD26E2BF986AB647874A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/3f33d8-cceb-4506-a2ef-c0ca80a05e2a/1/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.mft
Manifest number: 135C
Signing time: Thu 26 Mar 2026 03:01:19 +0000
Manifest this update: Thu 26 Mar 2026 03:01:19 +0000
Manifest next update: Fri 27 Mar 2026 03:01:19 +0000
Files and hashes: 1: kvrpde2NkZn_MY5z8yP0kUJPKB0.roa (hash: nyyXOBMDEJmgos3/uP4abipU5IsMQkBb228KURVxjm8=)
2: z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.crl (hash: yu1/WXXte9cMpmN9V/XFz8Li5B7MWO/DFmWiB3PBhL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/3f33d8-cceb-4506-a2ef-c0ca80a05e2a/1/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/3f33d8-cceb-4506-a2ef-c0ca80a05e2a/1/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.mft
rsync://rpki.ripe.net/repository/DEFAULT/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:d9:8a:33:fb:d2:6e:2b:f9:86:ab:64:78:74:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfba043e1c4b52447a8e367bbc1307519fa5fae0
Validity
Not Before: Mar 26 03:01:19 2026 GMT
Not After : Mar 27 03:01:19 2026 GMT
Subject: CN=4b74ac164ec3496ef6ee053dc564acb672115557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c6:74:99:e3:33:8b:9c:f8:94:e8:66:f9:05:
21:8c:6d:af:88:9c:43:53:0e:b1:20:eb:bf:9f:04:
1e:99:f0:98:82:a8:be:35:72:e0:cb:a6:15:05:19:
56:f2:4f:0c:d4:95:8a:cd:6c:f5:a9:2d:9b:ba:65:
ea:16:70:6c:03:28:f9:2c:fa:2e:40:7a:65:27:72:
8c:4f:a9:f4:34:67:16:25:de:ab:9e:aa:10:e2:6f:
77:2a:90:10:bd:d7:f0:1b:a5:b0:64:4a:e6:9e:bb:
1d:82:85:5e:1d:e0:ec:80:b9:60:f1:45:2b:1b:72:
ae:b1:de:0c:1e:a7:24:8b:1e:d2:30:7e:f1:0e:56:
8a:a7:ca:ce:72:16:3d:ee:ad:5d:e8:cc:04:30:97:
23:2d:76:af:34:bb:55:43:8b:fd:f7:50:4e:d5:1e:
5f:fc:0a:c9:1b:56:f5:22:a9:e4:0a:5e:c2:78:75:
46:1f:7b:8d:f3:74:01:30:e7:aa:7a:0e:e2:48:df:
f3:96:f5:d4:76:5c:62:2a:39:96:40:38:45:10:0b:
19:f4:d2:71:dc:ad:cf:3a:44:fc:5a:cb:48:de:9e:
c4:9a:b2:26:7c:a2:e5:79:3b:7d:e8:58:09:0a:83:
0d:33:70:51:a6:e9:59:4b:af:8c:27:26:62:ba:7b:
d1:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:74:AC:16:4E:C3:49:6E:F6:EE:05:3D:C5:64:AC:B6:72:11:55:57
X509v3 Authority Key Identifier:
keyid:CF:BA:04:3E:1C:4B:52:44:7A:8E:36:7B:BC:13:07:51:9F:A5:FA:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3f33d8-cceb-4506-a2ef-c0ca80a05e2a/1/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3f33d8-cceb-4506-a2ef-c0ca80a05e2a/1/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:10:c3:50:0e:1d:0d:b0:8c:f7:c7:9b:57:3c:6e:1d:5e:c8:
56:42:7c:db:4f:cc:a3:7b:d4:b1:20:b8:5e:29:91:7a:a4:cd:
b9:89:00:d7:4b:87:44:ed:45:7c:d8:ad:26:a2:b5:c9:86:e9:
53:f9:7c:7b:3e:78:35:89:39:b3:eb:9b:26:c9:d2:89:83:70:
bf:8a:6c:3e:cd:72:7d:23:4a:ba:a8:f2:a0:10:ec:cd:08:10:
11:8e:2f:6c:1c:ee:10:84:a4:70:42:ed:71:80:5b:0b:97:67:
e1:95:5d:21:97:38:e5:45:cc:ac:d3:c5:a6:5a:ca:16:d4:f1:
c2:d9:c5:49:11:e0:73:74:a4:9d:f0:87:84:a1:a0:2c:12:07:
08:d7:da:b9:d9:96:c7:42:dd:6f:f0:29:f5:6e:ff:d7:3e:22:
99:d7:40:e5:a8:7e:e4:a9:96:df:41:2d:5f:39:e5:d2:a8:63:
0a:a7:d1:f8:e0:66:71:87:c6:b7:3b:d0:52:e4:64:68:2d:c7:
5d:87:17:f3:f9:31:48:79:0d:5a:99:95:69:8a:6f:5e:1f:51:
62:8f:6a:e2:4c:30:d2:8a:c1:5a:83:12:ba:52:15:fb:96:b3:
aa:a7:4f:82:95:64:0f:d4:2a:7f:32:48:9f:a1:c3:06:0f:69:
db:8d:2d:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:54:47 2026 by rpki-client