Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/Z_TjgP46-q_fnIL8auXjPOAyirI.mft
File: Z_TjgP46-q_fnIL8auXjPOAyirI.mft (raw, json)
Hash identifier: FSlhzektXkUR5xnDCbmSS+8Kx8r0e5g+psssMFmftHs=
Subject key identifier: 89:E6:F8:EA:75:C3:FB:02:17:D9:11:C3:8B:11:CF:38:79:25:C6:B3
Authority key identifier: 67:F4:E3:80:FE:3A:FA:AF:DF:9C:82:FC:6A:E5:E3:3C:E0:32:8A:B2
Certificate issuer: /CN=67f4e380fe3afaafdf9c82fc6ae5e33ce0328ab2
Certificate serial: 019F8F7F38D3DA303026C698000C3BF1EDB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_TjgP46-q_fnIL8auXjPOAyirI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/Z_TjgP46-q_fnIL8auXjPOAyirI.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 15:01:47 +0000
Manifest this update: Thu 23 Jul 2026 15:01:47 +0000
Manifest next update: Fri 24 Jul 2026 15:01:47 +0000
Files and hashes: 1: 81dpJBDy9Dao5ZscfFbdcGEGKx8.roa (hash: xYZWmARqztzpL9bYvU/vnFuYMaN1rzIszkHOfUaA5hw=)
2: JDNYiM5cTQvYl86g2PlIXooszc4.roa (hash: k41osz+0Jqv0dxjQFYhX5kFK2fQdrK1p+ItLN6xOXqI=)
3: Z_TjgP46-q_fnIL8auXjPOAyirI.crl (hash: i8I6I9s16QXs9fM+aBEXSOU3Ru4WFpd1awPrbIniGnE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/Z_TjgP46-q_fnIL8auXjPOAyirI.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/Z_TjgP46-q_fnIL8auXjPOAyirI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z_TjgP46-q_fnIL8auXjPOAyirI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7f:38:d3:da:30:30:26:c6:98:00:0c:3b:f1:ed:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67f4e380fe3afaafdf9c82fc6ae5e33ce0328ab2
Validity
Not Before: Jul 23 15:01:47 2026 GMT
Not After : Jul 24 15:01:47 2026 GMT
Subject: CN=89e6f8ea75c3fb0217d911c38b11cf387925c6b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9b:bf:6b:57:f2:8a:44:8d:8b:f2:be:4d:bc:
48:9e:33:2e:a0:44:92:81:19:cd:09:db:e8:d4:8e:
1a:8f:dc:36:a9:1b:af:9b:db:4e:5f:cf:b2:b7:a1:
92:c4:a6:8a:22:03:7e:81:cc:d3:fd:e1:54:ef:cf:
02:21:96:44:45:c7:a4:23:34:45:b2:f9:74:50:6c:
31:58:a0:34:be:d8:72:18:7a:1a:8f:4d:c1:7b:34:
6e:8c:35:46:1b:ea:0b:12:df:b3:94:3f:82:87:36:
ae:16:00:2b:3c:c3:51:2d:bb:da:51:37:0f:61:bb:
ed:17:19:a3:58:1a:da:3a:d2:44:75:ee:b1:21:cc:
3e:15:f1:cd:47:a8:46:fd:5c:bf:8f:2c:da:7f:79:
a3:62:57:19:dd:b7:d0:43:e7:cb:51:72:7f:a0:33:
45:89:ec:08:12:e5:13:55:c6:f7:34:22:1a:69:51:
be:73:1d:f2:ec:f7:ac:d4:b5:c4:5e:c4:60:ab:b9:
43:92:f3:2f:c3:9c:cc:1c:91:e2:fa:29:ea:51:e2:
6c:e0:1d:a4:b4:46:bf:29:a9:fb:6c:6d:a9:57:b3:
01:f8:83:82:78:14:55:d0:c3:42:79:9d:0d:6a:a8:
d8:bc:59:50:3c:53:e1:7d:53:04:f1:e7:65:78:34:
84:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:E6:F8:EA:75:C3:FB:02:17:D9:11:C3:8B:11:CF:38:79:25:C6:B3
X509v3 Authority Key Identifier:
keyid:67:F4:E3:80:FE:3A:FA:AF:DF:9C:82:FC:6A:E5:E3:3C:E0:32:8A:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_TjgP46-q_fnIL8auXjPOAyirI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/Z_TjgP46-q_fnIL8auXjPOAyirI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/Z_TjgP46-q_fnIL8auXjPOAyirI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:49:84:f2:1a:fa:b5:b7:96:62:fb:77:9c:7f:07:0a:af:7e:
f5:14:cf:b0:f9:91:3d:4a:f5:8f:d5:a0:4c:27:7c:0f:4d:21:
d3:90:f1:2c:72:29:85:16:62:51:bd:ce:6a:08:1a:9e:0b:6d:
0f:65:00:e3:83:07:35:72:a2:10:e1:9e:97:31:2e:2c:dc:2d:
3c:37:8f:6e:7f:cc:32:af:81:e6:6b:8b:98:6f:65:2d:95:12:
00:e6:16:6e:73:e4:74:83:5c:18:2a:66:fd:99:db:01:76:62:
4b:ba:83:85:bb:a6:18:30:11:ac:08:4c:a9:e8:ee:50:1f:ea:
aa:3e:2b:17:de:a5:09:39:52:b2:1c:fc:c1:26:74:b2:53:26:
78:29:22:29:f4:43:66:26:72:75:bb:61:20:0b:3b:14:28:21:
10:39:37:78:83:74:ba:eb:67:0d:9f:19:4d:e3:13:1b:59:d4:
31:a8:bc:13:ae:0e:5d:44:5e:cf:05:fa:e2:34:d7:76:d9:c6:
af:5b:f9:c9:e6:f2:7b:9b:c8:3f:81:84:b8:bb:39:9a:7d:5e:
b0:a3:62:cb:0c:52:2d:86:fd:0a:d0:37:58:a0:0f:29:22:6d:
aa:dd:b2:68:39:83:da:7e:db:d1:49:20:fc:87:d5:58:68:9f:
86:e6:ab:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:18:06 2026 by rpki-client