Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/196b71-587e-4099-bdb2-b954c50fdbb0/1/z2YiS8-4uC3qq6yMTKJQNxuXRhE.mft
File: z2YiS8-4uC3qq6yMTKJQNxuXRhE.mft (raw, json)
Hash identifier: NS4OCA7qkatcQiamelJzuDaLpOyNpMYY/wQGEalSojk=
Subject key identifier: 18:C0:E1:E6:26:6F:00:F3:CB:71:41:8C:FC:3E:27:7B:77:E2:F0:D8
Authority key identifier: CF:66:22:4B:CF:B8:B8:2D:EA:AB:AC:8C:4C:A2:50:37:1B:97:46:11
Certificate issuer: /CN=cf66224bcfb8b82deaabac8c4ca250371b974611
Certificate serial: 019F943651737F905603344DE97CE3A59878
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z2YiS8-4uC3qq6yMTKJQNxuXRhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/196b71-587e-4099-bdb2-b954c50fdbb0/1/z2YiS8-4uC3qq6yMTKJQNxuXRhE.mft
Manifest number: 19C9
Signing time: Fri 24 Jul 2026 13:00:15 +0000
Manifest this update: Fri 24 Jul 2026 13:00:15 +0000
Manifest next update: Sat 25 Jul 2026 13:00:15 +0000
Files and hashes: 1: BVCNuyEI8Escb23UOBkojnAQ3uU.roa (hash: TpAVxATDxHC3mnDA/ZCfMM4mNI1Q7807T0lCqaxfnlA=)
2: z2YiS8-4uC3qq6yMTKJQNxuXRhE.crl (hash: 7VqKDdo2u8hLePvWhKpMCENjWAtRx0DWHMUh7+yu6is=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/196b71-587e-4099-bdb2-b954c50fdbb0/1/z2YiS8-4uC3qq6yMTKJQNxuXRhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/196b71-587e-4099-bdb2-b954c50fdbb0/1/z2YiS8-4uC3qq6yMTKJQNxuXRhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/z2YiS8-4uC3qq6yMTKJQNxuXRhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 13:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:36:51:73:7f:90:56:03:34:4d:e9:7c:e3:a5:98:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf66224bcfb8b82deaabac8c4ca250371b974611
Validity
Not Before: Jul 24 13:00:15 2026 GMT
Not After : Jul 25 13:00:15 2026 GMT
Subject: CN=18c0e1e6266f00f3cb71418cfc3e277b77e2f0d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6c:ec:b6:99:1f:7b:90:b1:7d:91:b6:84:47:
2c:01:78:7f:69:94:68:b5:08:33:c4:fe:a0:f4:0c:
11:3a:8e:bd:ac:d8:9b:0a:b6:bf:62:b7:cc:21:50:
0e:4c:1d:3b:bf:e7:79:f8:58:24:2a:6d:7b:75:a0:
26:f6:8b:2f:bf:1b:2d:b3:12:e7:42:87:c4:7a:f4:
cc:08:ce:5c:0b:75:43:46:40:25:ae:ee:0c:bc:f3:
76:4f:85:97:96:88:18:e4:19:c6:7a:38:8d:c1:ea:
71:70:16:48:bc:98:fa:7b:44:79:53:90:9e:80:8e:
e6:7a:61:a1:01:cd:2e:04:81:ae:d2:92:51:2b:9b:
0f:41:f0:53:89:4b:8f:50:50:15:2a:79:b6:f7:23:
14:74:f1:e3:d7:e9:59:89:55:01:69:ac:16:38:be:
f8:65:c6:de:aa:54:6c:54:a7:6a:d2:76:fc:3d:95:
46:4f:f0:ca:17:39:5c:9d:9a:7f:0e:2b:6f:71:b4:
97:9d:63:29:56:05:e0:b4:90:e9:30:04:1b:e3:d2:
56:95:19:9f:25:57:61:e7:f8:53:e1:1d:2a:51:28:
fb:c1:c8:84:c5:ea:86:98:51:d0:9c:3b:e4:64:f2:
6e:bc:28:3a:07:cc:6e:2d:c1:9c:0d:c5:2c:1b:c0:
5f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:C0:E1:E6:26:6F:00:F3:CB:71:41:8C:FC:3E:27:7B:77:E2:F0:D8
X509v3 Authority Key Identifier:
keyid:CF:66:22:4B:CF:B8:B8:2D:EA:AB:AC:8C:4C:A2:50:37:1B:97:46:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z2YiS8-4uC3qq6yMTKJQNxuXRhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/196b71-587e-4099-bdb2-b954c50fdbb0/1/z2YiS8-4uC3qq6yMTKJQNxuXRhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/196b71-587e-4099-bdb2-b954c50fdbb0/1/z2YiS8-4uC3qq6yMTKJQNxuXRhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:3e:7b:0b:f8:5d:ee:ff:9e:de:d5:d5:9a:95:6e:e5:4e:a9:
a3:cc:54:09:31:ea:54:ee:0f:f4:44:33:b2:fb:a2:d3:8f:d7:
77:be:14:0c:a2:03:f6:75:2b:34:ef:bb:a1:32:71:b2:7a:36:
2f:9d:11:9b:2c:42:22:4c:cb:32:1c:ad:f8:51:d1:d1:09:c4:
2e:a1:75:9f:fb:04:86:82:63:e8:9e:9c:98:17:f1:fe:f4:b8:
6f:97:a6:c5:4f:75:17:c1:19:48:18:94:54:62:20:2e:0d:bc:
ba:04:a2:f6:be:93:3b:b9:96:8a:99:e4:44:26:aa:00:63:43:
6a:b7:22:ab:87:1d:58:38:a9:3f:81:9a:32:f5:aa:87:36:08:
fe:7e:41:e5:94:9e:36:af:dc:5d:a9:db:77:5f:9f:90:fd:c9:
ad:53:71:23:c4:9c:d8:8f:8e:79:68:8e:cf:80:13:19:f5:e0:
9f:9d:29:2d:c9:06:b1:75:60:e9:88:63:ec:aa:bb:6b:9a:76:
cb:63:a0:83:de:b5:78:3a:89:82:55:cb:55:d9:57:94:83:a7:
b8:7c:32:fb:d4:0d:56:45:39:5c:a0:4c:87:8d:e1:79:2b:e1:
d6:3d:ff:9d:28:03:91:bb:bb:36:6e:ae:b0:d4:f1:85:81:64:
75:af:88:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:11:23 2026 by rpki-client