Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.mft
File: z_N0ZX9XB488oscRCdNZJ8IkhoE.mft (raw, json)
Hash identifier: azMs3p5v2yVM6sub+WOhMrBoqi724pgfOqP0Im1u+PY=
Subject key identifier: E7:BC:A7:00:99:F5:7B:27:E4:A7:E5:51:3C:66:6C:85:29:DB:DC:1D
Authority key identifier: CF:F3:74:65:7F:57:07:8F:3C:A2:C7:11:09:D3:59:27:C2:24:86:81
Certificate issuer: /CN=cff374657f57078f3ca2c71109d35927c2248681
Certificate serial: 019F9391B14F608E65287654F5B27BA2635E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z_N0ZX9XB488oscRCdNZJ8IkhoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.mft
Manifest number: 130A
Signing time: Fri 24 Jul 2026 10:00:26 +0000
Manifest this update: Fri 24 Jul 2026 10:00:26 +0000
Manifest next update: Sat 25 Jul 2026 10:00:26 +0000
Files and hashes: 1: 0m2Q39AVzMvmJbXvZVeAp5BUqHM.roa (hash: 4ENNyihBFdH7BC6Hukkp0FP8JTMdCiKInQ5i0yx7kBg=)
2: ld2nVBzkdbNeG0PFY_dUC7B6WIs.roa (hash: Jqk77Lv//XRofZ2i9r4w2rfiDp6DOlIJobQS/uFZtSA=)
3: z_N0ZX9XB488oscRCdNZJ8IkhoE.crl (hash: zWnMK3m6a9z8tihZSNUIFcNd9D3J5+lWg2yGYDCIBsw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/z_N0ZX9XB488oscRCdNZJ8IkhoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:91:b1:4f:60:8e:65:28:76:54:f5:b2:7b:a2:63:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cff374657f57078f3ca2c71109d35927c2248681
Validity
Not Before: Jul 24 10:00:26 2026 GMT
Not After : Jul 25 10:00:26 2026 GMT
Subject: CN=e7bca70099f57b27e4a7e5513c666c8529dbdc1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:af:2e:93:aa:53:c0:ae:c2:59:4e:14:3a:29:
01:99:cb:aa:91:40:cf:ac:40:c7:c1:4e:dc:c5:c3:
47:9a:06:24:2d:5a:01:d3:44:80:64:da:06:db:29:
15:ff:12:c4:c7:ab:88:77:6f:f3:19:15:87:df:91:
37:cd:ad:0a:43:22:33:ef:3c:bc:da:53:ec:08:c4:
06:0a:28:03:77:a0:d8:c2:d2:a7:ba:36:a6:cf:eb:
a1:13:9f:8e:a5:ca:70:4d:3d:f4:73:2d:3d:8b:3b:
5f:c6:05:0d:58:8c:73:41:4d:68:45:90:fe:1f:ed:
fa:e3:8b:c5:e5:68:c1:f1:24:39:2f:37:90:fc:e1:
4a:30:4e:fd:54:2f:23:e8:28:c0:ed:30:1e:fd:53:
19:3a:d4:5d:b4:04:25:9a:5b:77:3d:c6:30:14:f5:
bc:07:9e:a9:3c:21:4b:b1:eb:a9:6c:27:b8:35:50:
8a:66:61:66:f3:ce:f0:d4:39:0f:94:e2:f7:82:a0:
0c:3a:f0:81:b3:84:89:b3:b2:fe:fb:50:cc:13:10:
d5:7a:7b:48:c6:61:e4:e7:7c:22:5c:5e:bc:e0:fd:
c7:c1:b8:cf:6e:38:b2:e0:96:5d:79:a0:67:47:8a:
32:83:df:3e:1b:08:87:f5:11:3b:43:f4:f6:a1:5b:
d6:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:BC:A7:00:99:F5:7B:27:E4:A7:E5:51:3C:66:6C:85:29:DB:DC:1D
X509v3 Authority Key Identifier:
keyid:CF:F3:74:65:7F:57:07:8F:3C:A2:C7:11:09:D3:59:27:C2:24:86:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z_N0ZX9XB488oscRCdNZJ8IkhoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:50:21:1d:3c:7e:7d:f4:1b:85:eb:63:5f:35:f2:17:ee:bc:
e8:81:b8:e6:58:50:1f:79:a4:a2:70:30:61:1c:b6:c4:ee:3b:
f6:70:43:fb:b6:30:43:43:aa:3a:06:ce:f1:d0:e8:56:51:8c:
4c:bf:17:a0:cf:6f:21:6d:67:6a:b8:25:cf:6a:16:9e:94:70:
93:a4:08:a4:03:44:cd:49:09:82:96:22:25:2d:f4:01:62:52:
5a:6c:db:a6:37:24:94:b1:91:74:86:ea:5d:bf:e9:b1:7d:13:
f6:93:9b:5f:44:cd:e6:28:e8:bc:38:81:65:d6:d5:90:6f:23:
b8:ec:49:7c:04:14:fb:4c:e0:72:d9:7b:56:66:37:fe:06:26:
6a:98:ca:a3:1b:fc:52:4e:3e:c7:00:11:f1:0d:4b:c3:fd:8e:
0c:47:50:50:93:ef:04:4f:ab:20:e8:5d:cb:fe:cc:a6:ca:d5:
6c:3e:5d:96:62:af:86:50:09:d2:85:0b:be:e9:18:17:2d:fe:
9b:a2:da:ac:11:b8:00:c4:8c:1f:e1:68:d2:16:85:f3:04:69:
e1:9e:0f:80:3e:75:a7:e7:c8:55:0d:f8:d9:1f:99:0e:73:8f:
70:f7:bf:9c:79:d9:89:ac:9b:13:75:5f:96:2f:c9:80:49:3c:
7c:62:58:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:01:49 2026 by rpki-client