Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.mft
File: z6loMZ1yqYp1lAAzi3D9xniRLeY.mft (raw, json)
Hash identifier: zQrdwvpWzmKd9ZDV5FmXYdaMAs9Nwkx5V0KDI6zoe+4=
Subject key identifier: 0D:89:B4:57:22:E8:9D:C2:5A:88:E1:40:D4:D1:B7:DF:0D:35:06:0C
Authority key identifier: CF:A9:68:31:9D:72:A9:8A:75:94:00:33:8B:70:FD:C6:78:91:2D:E6
Certificate issuer: /CN=cfa968319d72a98a759400338b70fdc678912de6
Certificate serial: 019F946DF220AF2F2BA633F07E93CC097E3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z6loMZ1yqYp1lAAzi3D9xniRLeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.mft
Manifest number: 19CD
Signing time: Fri 24 Jul 2026 14:01:01 +0000
Manifest this update: Fri 24 Jul 2026 14:01:01 +0000
Manifest next update: Sat 25 Jul 2026 14:01:01 +0000
Files and hashes: 1: 6Ep4JB6joSkE2HYaEIb1LFsZbgY.roa (hash: SqDePBtTD8XjhS8RPU2gNtHpu8bEH14qQE6MxK5aj78=)
2: z6loMZ1yqYp1lAAzi3D9xniRLeY.crl (hash: RPZ9w1HDf4b9NLfyKumcLA2sYqUEe/7qwU4N/X2itO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/z6loMZ1yqYp1lAAzi3D9xniRLeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:6d:f2:20:af:2f:2b:a6:33:f0:7e:93:cc:09:7e:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfa968319d72a98a759400338b70fdc678912de6
Validity
Not Before: Jul 24 14:01:01 2026 GMT
Not After : Jul 25 14:01:01 2026 GMT
Subject: CN=0d89b45722e89dc25a88e140d4d1b7df0d35060c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8c:1b:5e:a8:b4:4f:ba:91:8f:c6:ee:ab:07:
b3:c9:83:4d:42:d7:48:d6:f5:36:b0:29:da:95:8b:
8d:08:20:2e:e8:50:8c:8f:a3:df:06:9e:29:68:07:
f3:1c:e1:dc:cf:bc:a4:3b:f3:d4:21:7a:67:25:49:
af:6b:46:4e:9f:99:9c:40:3a:36:e1:53:1b:f1:95:
7c:f5:48:b7:85:5e:83:0c:43:d8:15:f7:eb:66:e7:
aa:c9:e3:7a:2e:47:d0:08:94:c0:6d:90:3c:eb:6a:
87:74:f2:c7:4b:48:80:e8:29:23:a3:4d:d6:af:62:
34:01:b1:c0:9b:2c:35:41:c3:c9:82:99:91:48:47:
ce:c5:5d:2d:7d:77:5e:c1:41:41:f6:3e:f6:54:e0:
c9:ca:89:b8:62:94:43:59:14:1c:f5:d9:fa:ee:b0:
bf:96:e2:cb:f0:95:b2:f9:af:c3:e2:2b:44:50:bf:
04:1f:09:90:6f:44:af:03:0b:6b:e3:8b:b2:48:fd:
57:97:5d:ac:69:0a:7f:45:71:2c:59:31:32:a0:cb:
7c:03:fd:2a:bb:f9:18:66:8d:f9:11:21:3a:ea:74:
bd:86:bf:25:b8:a1:ce:cf:4f:68:44:ac:5a:a8:1c:
d9:39:fb:ee:f4:6f:16:64:e8:89:72:b8:d6:cc:2c:
20:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:89:B4:57:22:E8:9D:C2:5A:88:E1:40:D4:D1:B7:DF:0D:35:06:0C
X509v3 Authority Key Identifier:
keyid:CF:A9:68:31:9D:72:A9:8A:75:94:00:33:8B:70:FD:C6:78:91:2D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z6loMZ1yqYp1lAAzi3D9xniRLeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:6e:dc:ac:0b:ee:e3:87:9f:84:f2:02:4d:48:e8:56:be:39:
8d:62:4d:81:fa:89:d4:ba:d2:98:5e:cb:37:dd:56:8d:ba:74:
c1:6d:f8:7f:12:13:48:ca:36:3e:0e:1f:02:e1:a1:35:0a:52:
44:26:ec:ba:0f:bf:07:ce:f7:14:bf:4f:0b:0d:f0:cc:1f:68:
dc:be:63:59:05:c5:a8:cb:85:62:c4:7f:6b:55:8b:3e:69:57:
48:14:ad:a1:e6:d4:b2:58:cb:c5:12:e2:a8:2f:d5:f4:65:24:
f4:d7:a7:a7:ab:5f:71:f7:b5:76:b8:c9:c2:8e:bd:5c:37:b5:
a4:0d:7c:3b:06:d3:a0:eb:f2:3c:b5:64:48:d3:b4:98:c1:9c:
82:56:d0:b7:8a:9b:94:53:61:a9:73:78:7a:29:91:d7:0f:16:
d3:9e:1d:9c:02:76:d0:9f:39:20:ff:06:27:2d:9e:3a:28:a6:
71:7f:8a:7b:69:c2:da:9e:45:df:64:1d:20:6f:73:af:61:52:
00:4f:7f:6d:93:52:07:44:67:be:2b:01:1b:74:45:4a:64:a1:
3b:4e:dd:63:a1:b0:8c:0d:14:9b:5e:61:70:2c:b7:02:d0:4c:
86:4c:24:50:34:87:02:0b:25:ca:4c:86:33:da:72:23:ae:19:
0d:fa:57:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:49:29 2026 by rpki-client