Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/3f33d8-cceb-4506-a2ef-c0ca80a05e2a/1/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.mft
File: z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.mft (raw, json)
Hash identifier: 6X+h2krqoDG50s28DNvGgXEDhNbju3CausotSVwd0rU=
Subject key identifier: B9:66:4A:3A:B9:63:BA:0A:AD:15:C0:D8:06:37:2A:F4:E5:8C:0F:15
Authority key identifier: CF:BA:04:3E:1C:4B:52:44:7A:8E:36:7B:BC:13:07:51:9F:A5:FA:E0
Certificate issuer: /CN=cfba043e1c4b52447a8e367bbc1307519fa5fae0
Certificate serial: 019E1F47AF9B640310F9498B852CFC237912
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/3f33d8-cceb-4506-a2ef-c0ca80a05e2a/1/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.mft
Manifest number: 13DC
Signing time: Wed 13 May 2026 03:00:52 +0000
Manifest this update: Wed 13 May 2026 03:00:52 +0000
Manifest next update: Thu 14 May 2026 03:00:52 +0000
Files and hashes: 1: kvrpde2NkZn_MY5z8yP0kUJPKB0.roa (hash: nyyXOBMDEJmgos3/uP4abipU5IsMQkBb228KURVxjm8=)
2: z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.crl (hash: 8FpaKuEs5Uawo3AAl0k0yUFxPOEzoCF0XvzHrsSNTwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/3f33d8-cceb-4506-a2ef-c0ca80a05e2a/1/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/3f33d8-cceb-4506-a2ef-c0ca80a05e2a/1/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.mft
rsync://rpki.ripe.net/repository/DEFAULT/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:47:af:9b:64:03:10:f9:49:8b:85:2c:fc:23:79:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfba043e1c4b52447a8e367bbc1307519fa5fae0
Validity
Not Before: May 13 03:00:52 2026 GMT
Not After : May 14 03:00:52 2026 GMT
Subject: CN=b9664a3ab963ba0aad15c0d806372af4e58c0f15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4d:d8:e7:f1:d5:9a:86:3b:94:c9:73:68:fe:
be:f8:2f:f5:72:c2:c9:f0:52:3c:60:25:ee:67:b2:
d3:9f:97:bf:fb:5c:1c:36:2d:60:eb:a8:96:7a:3c:
e0:65:4c:1b:12:bc:77:c7:76:4d:74:77:12:74:4f:
d2:f7:a4:39:ce:09:c5:a3:99:46:26:30:5f:cf:4a:
f9:e8:2c:55:5a:e1:a2:78:cf:25:dc:16:76:f8:87:
35:c8:c1:20:d0:4c:22:d8:7c:15:18:18:ff:68:d8:
81:ef:67:0d:44:3f:7c:ca:bc:f9:1e:d1:fc:8b:14:
74:11:13:aa:82:40:dc:e5:75:50:cb:28:27:9f:a6:
01:40:bc:17:4a:59:89:66:82:82:ea:df:82:5b:f4:
d2:ad:d9:fb:e9:6b:91:de:99:71:a3:31:1e:19:c5:
41:d1:28:24:20:cc:db:b4:32:48:f3:f9:38:56:1e:
c4:fe:11:ef:13:52:7d:78:ab:f5:88:e1:9a:2f:9e:
9d:0d:a6:90:81:f6:57:23:13:33:62:a0:50:1f:75:
6f:8c:b0:e9:00:21:17:9b:8d:e9:e1:71:7a:f1:a6:
2c:0d:c2:d3:5e:42:bd:b9:14:7a:1b:f6:0a:ab:fa:
68:0c:d8:25:be:ca:61:44:ee:19:69:5f:6e:6d:da:
b1:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:66:4A:3A:B9:63:BA:0A:AD:15:C0:D8:06:37:2A:F4:E5:8C:0F:15
X509v3 Authority Key Identifier:
keyid:CF:BA:04:3E:1C:4B:52:44:7A:8E:36:7B:BC:13:07:51:9F:A5:FA:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3f33d8-cceb-4506-a2ef-c0ca80a05e2a/1/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3f33d8-cceb-4506-a2ef-c0ca80a05e2a/1/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:54:68:61:93:b9:b4:47:18:83:d3:22:b9:d3:6a:e0:08:37:
c1:d8:58:61:50:91:1a:21:e0:4d:c8:f2:c8:df:af:f1:1c:59:
67:42:8d:bc:98:6e:8a:6f:72:cd:1e:d5:d6:e6:e5:8e:78:02:
a1:31:9a:d6:1a:35:eb:48:70:26:8a:48:ca:df:a9:d0:89:d9:
74:0f:2b:4a:a7:4e:dc:9a:62:21:73:cc:65:ba:3e:41:18:12:
bb:6f:e5:78:87:12:e8:19:22:5d:85:3c:91:41:55:a2:0d:99:
f3:74:d1:dd:4e:51:83:8a:bd:4f:a8:7c:46:1f:ef:27:5b:a2:
e9:4a:07:4d:5d:87:27:40:b0:be:14:50:9c:aa:5e:05:13:f0:
dc:30:4d:d8:09:e2:e8:f4:4e:e5:9a:6e:1a:5d:20:b9:8d:2b:
7a:96:1c:aa:c1:eb:68:e5:81:ab:f4:c7:a2:ef:9d:ed:b2:25:
74:7d:b0:be:30:77:d2:dc:3d:aa:2d:23:ca:7c:70:0a:7c:ce:
ee:f1:2b:47:ed:56:8c:5e:2f:26:7c:51:fc:9f:a4:f5:6f:5f:
8c:a0:99:80:a9:9b:87:87:3c:3e:6e:79:14:70:95:c6:22:32:
77:bd:d5:be:a5:cd:2c:cb:d4:12:6f:1c:ea:38:51:25:30:9d:
c9:36:43:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:25:52 2026 by rpki-client