Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/66c029-68de-4334-b92c-5e17a62231b5/1/z9tEWe8iRa2EkR7v4IdafZM1xdg.mft
File: z9tEWe8iRa2EkR7v4IdafZM1xdg.mft (raw, json)
Hash identifier: sAxUQNjoc2RPWjxkdscyuzY6r4NkD3zNwQB0c2geZ0w=
Subject key identifier: 29:DB:EE:E2:89:7C:AC:AD:84:39:FF:2B:F0:A4:0A:75:6E:E6:58:0E
Authority key identifier: CF:DB:44:59:EF:22:45:AD:84:91:1E:EF:E0:87:5A:7D:93:35:C5:D8
Certificate issuer: /CN=cfdb4459ef2245ad84911eefe0875a7d9335c5d8
Certificate serial: 019F8F7DD77AAF69F7DA9E17651884E6661B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z9tEWe8iRa2EkR7v4IdafZM1xdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/66c029-68de-4334-b92c-5e17a62231b5/1/z9tEWe8iRa2EkR7v4IdafZM1xdg.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 15:00:16 +0000
Manifest this update: Thu 23 Jul 2026 15:00:16 +0000
Manifest next update: Fri 24 Jul 2026 15:00:16 +0000
Files and hashes: 1: 5Ne0J2AnsBb3KqrsSaZmYRS_sJ8.asa (hash: tSOxg/159dhYNU00jXQeCM0SgZ81uaakuIVv4gHhNvQ=)
2: z9tEWe8iRa2EkR7v4IdafZM1xdg.crl (hash: Sy5dwkEr2vLnowMSTpJ+QBli3QPTPWf1pH5yNyf0p88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/66c029-68de-4334-b92c-5e17a62231b5/1/z9tEWe8iRa2EkR7v4IdafZM1xdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/66c029-68de-4334-b92c-5e17a62231b5/1/z9tEWe8iRa2EkR7v4IdafZM1xdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/z9tEWe8iRa2EkR7v4IdafZM1xdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7d:d7:7a:af:69:f7:da:9e:17:65:18:84:e6:66:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfdb4459ef2245ad84911eefe0875a7d9335c5d8
Validity
Not Before: Jul 23 15:00:16 2026 GMT
Not After : Jul 24 15:00:16 2026 GMT
Subject: CN=29dbeee2897cacad8439ff2bf0a40a756ee6580e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:34:45:f3:78:3e:91:50:1b:73:a7:ce:b2:a0:
c4:d6:88:01:92:fe:25:37:a8:2d:b5:f8:10:18:61:
a4:7b:95:56:f6:de:60:aa:0e:ec:8a:dd:e7:23:62:
79:60:4c:a9:0d:13:cf:ed:04:60:5b:55:05:d8:48:
c5:11:41:1c:1f:92:16:ef:e3:3d:d3:12:80:89:90:
d4:de:bd:86:90:ae:77:d5:06:16:b0:bb:ca:cb:46:
e1:6f:dc:2e:2f:29:e7:f0:3a:31:c8:8f:7b:d6:fc:
98:f2:ea:47:66:de:7e:0a:b0:cf:75:fd:71:6e:b5:
32:51:4a:79:d4:80:95:73:5a:5b:9b:17:50:ea:53:
92:fa:1b:84:84:3f:d6:1d:45:43:24:95:82:c0:ed:
8b:42:25:54:e7:34:20:8c:31:36:ba:1a:62:a4:eb:
50:70:54:ab:24:c8:c1:c0:81:cc:58:48:b3:ce:63:
01:ac:13:b3:3a:c3:a3:ed:a3:5e:2e:b1:fc:4d:70:
97:ac:4e:66:4e:df:4e:6b:21:b9:ee:3c:5e:e9:7f:
3b:99:52:ef:ea:dc:b0:ae:75:b1:bd:71:e4:7a:c0:
58:08:e7:8c:7c:7e:8b:45:49:4f:12:6f:1d:75:b8:
a0:e4:36:a1:38:53:19:9e:2f:b2:ae:2d:fd:8e:ee:
20:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:DB:EE:E2:89:7C:AC:AD:84:39:FF:2B:F0:A4:0A:75:6E:E6:58:0E
X509v3 Authority Key Identifier:
keyid:CF:DB:44:59:EF:22:45:AD:84:91:1E:EF:E0:87:5A:7D:93:35:C5:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9tEWe8iRa2EkR7v4IdafZM1xdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/66c029-68de-4334-b92c-5e17a62231b5/1/z9tEWe8iRa2EkR7v4IdafZM1xdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/66c029-68de-4334-b92c-5e17a62231b5/1/z9tEWe8iRa2EkR7v4IdafZM1xdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:ad:44:74:a8:64:7e:0d:dc:03:25:e6:d9:26:67:85:e6:12:
3c:e9:54:81:c8:cf:8b:6a:28:fa:48:13:e0:fe:f4:7b:8c:15:
30:cd:84:be:ed:52:6e:e3:21:db:bd:2d:61:d5:8e:53:34:1d:
24:36:f0:ce:86:83:96:f2:16:65:67:8b:73:61:57:e9:d1:56:
95:a7:0a:75:95:e1:16:38:92:8d:f7:2d:75:9b:2b:08:44:70:
9b:4b:46:d2:0b:63:a5:9a:51:5c:80:07:94:ca:d1:b6:22:8c:
d8:6c:ed:6b:aa:76:58:86:82:51:8d:b1:a8:8d:ae:12:1c:ac:
44:14:5b:16:1b:d9:8e:5a:c5:12:31:88:db:c8:25:db:96:cd:
2e:0f:92:dd:4c:06:39:e6:60:31:c9:64:d8:10:c7:ce:b8:53:
0e:09:0b:12:43:5b:c5:bb:b0:0a:0f:c3:29:29:5b:3f:f0:a3:
d3:99:18:6b:25:c9:06:3a:cd:49:3e:ef:70:21:5c:91:45:07:
36:59:4d:e6:62:66:45:e4:41:3a:06:15:5d:f5:e4:6c:fc:82:
62:ca:3a:72:e3:98:7b:ce:00:73:51:be:a4:85:89:b4:d4:92:
9e:f8:27:c9:9f:27:f5:c7:bd:08:d3:1e:fe:a0:49:35:0a:14:
b1:ee:5a:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:58:49 2026 by rpki-client