Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.mft
File: z9s9kEs0RAVGtiQdeJTZMwC8vSg.mft (raw, json)
Hash identifier: LGlTEPB2I1mtV4qE4Ztl3MVW9xUEcxbDxXBP001jgZU=
Subject key identifier: 74:94:0D:80:EA:B9:16:59:E6:CC:E8:AE:C0:31:DA:24:78:E2:9F:4E
Authority key identifier: CF:DB:3D:90:4B:34:44:05:46:B6:24:1D:78:94:D9:33:00:BC:BD:28
Certificate issuer: /CN=cfdb3d904b34440546b6241d7894d93300bcbd28
Certificate serial: 019F92EE059F693DD928215559FC70C16652
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z9s9kEs0RAVGtiQdeJTZMwC8vSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.mft
Manifest number: 1064
Signing time: Fri 24 Jul 2026 07:01:40 +0000
Manifest this update: Fri 24 Jul 2026 07:01:40 +0000
Manifest next update: Sat 25 Jul 2026 07:01:40 +0000
Files and hashes: 1: BcIjFBUMP6CBeWgUBi0kiP8mMD4.roa (hash: AnrLYQrWg/R3TPt/tXnLy7bKSyCDh8qfOknLsoHKVr0=)
2: tt8_4epx4fUU-t0TnlM9j9Sy8Gc.roa (hash: LFx80Ot89ti4/nAcgN280XkSiewCdAO+iihbkS/s85Y=)
3: z9s9kEs0RAVGtiQdeJTZMwC8vSg.crl (hash: Th3xe25a8Z29u9tRLh+X71VfXUX5HyGtnDHoy3Hr31M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/z9s9kEs0RAVGtiQdeJTZMwC8vSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ee:05:9f:69:3d:d9:28:21:55:59:fc:70:c1:66:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfdb3d904b34440546b6241d7894d93300bcbd28
Validity
Not Before: Jul 24 07:01:40 2026 GMT
Not After : Jul 25 07:01:40 2026 GMT
Subject: CN=74940d80eab91659e6cce8aec031da2478e29f4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:fb:ee:44:4b:e3:73:76:ca:20:2a:4b:26:44:
b6:81:c1:5f:90:2f:18:8e:38:ba:6c:04:ad:f2:6f:
d4:c2:66:68:72:f4:67:91:f9:0e:f8:72:c6:3a:d3:
69:f5:44:58:c6:91:1d:e9:95:91:20:2d:48:44:6c:
82:05:b3:f6:5d:85:1c:61:fb:7e:e0:77:a3:c7:29:
86:73:49:d0:27:fd:5f:b4:a7:f3:57:62:25:8d:e6:
3a:d9:0b:30:6c:39:6e:a5:72:63:b2:60:b4:96:03:
97:d1:93:63:10:90:40:4e:15:28:20:55:23:5f:8e:
47:f4:ef:8b:aa:2b:51:bb:aa:a8:03:91:47:d7:62:
f9:74:cd:66:a2:22:56:4b:a3:7a:b4:8f:52:7b:5d:
ea:56:2a:9e:73:0b:ab:d3:bb:a0:65:0b:8b:21:69:
d5:8d:5a:26:9c:e7:a4:38:05:c4:d6:6d:8f:da:d6:
f6:5f:83:61:16:1d:75:f8:e6:a8:bd:f2:2c:62:5a:
48:78:45:7b:3f:0a:51:93:5f:b0:0e:4f:9c:43:e7:
af:4d:71:d2:fa:10:07:7f:14:79:dd:98:27:79:ce:
e2:2b:95:11:12:f8:1d:af:b2:0c:1a:10:03:32:73:
45:51:48:84:94:81:f9:a8:0a:37:51:82:fd:74:1f:
73:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:94:0D:80:EA:B9:16:59:E6:CC:E8:AE:C0:31:DA:24:78:E2:9F:4E
X509v3 Authority Key Identifier:
keyid:CF:DB:3D:90:4B:34:44:05:46:B6:24:1D:78:94:D9:33:00:BC:BD:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9s9kEs0RAVGtiQdeJTZMwC8vSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:23:51:57:a1:01:d2:39:9e:01:56:f3:5d:c3:bc:d2:bf:5a:
65:a9:a5:73:31:11:2f:f3:a3:9b:26:4f:ed:7f:08:60:5a:94:
ee:1c:2b:a2:e4:35:4e:4f:79:cc:9f:1a:ba:c2:f2:19:74:7e:
a6:ee:b5:50:c2:97:76:82:64:6d:a1:81:eb:28:ef:ea:25:eb:
ed:d6:eb:2d:c0:c5:ae:a3:b0:14:fe:02:51:55:42:09:6d:69:
c4:c8:78:5d:76:a1:4d:04:74:63:70:70:1a:a8:b0:a6:3b:cf:
91:d2:ad:b8:1a:27:52:02:7c:32:17:5f:0b:09:82:98:4b:31:
94:f0:27:8d:c0:60:fe:19:80:d7:6d:12:c6:8a:8e:46:d7:8c:
ab:14:7f:74:1a:99:4c:e9:0b:14:72:f3:4c:90:83:96:6b:ec:
9b:70:9e:9a:a8:1a:7d:9b:ea:f0:d4:c4:e6:f3:b1:f4:37:4f:
40:eb:20:9b:7c:3a:63:fc:e5:88:1b:a8:d1:11:62:eb:ae:aa:
0d:80:a1:1a:84:67:80:7a:4b:54:6b:5c:c8:9c:ee:8e:32:f2:
ca:0d:07:7c:92:33:00:af:5e:e3:95:11:97:18:4e:1f:83:a1:
97:a3:ca:31:03:a9:87:f1:f8:c9:1c:aa:10:02:e8:67:c6:03:
3a:ea:49:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:56:02 2026 by rpki-client