Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/976925-2551-4b2b-900a-e111f322636a/1/z8TCrjOIRe_ngC3uwjTq4_e5XzE.mft
File: z8TCrjOIRe_ngC3uwjTq4_e5XzE.mft (raw, json)
Hash identifier: YUD4wUGrq+ZAVadudxuzZz+x0KSrV7pUfczYh6oaYaA=
Subject key identifier: B6:B7:A5:F8:1D:9B:E5:76:E6:F9:72:86:26:75:FC:CA:83:F6:78:6F
Authority key identifier: CF:C4:C2:AE:33:88:45:EF:E7:80:2D:EE:C2:34:EA:E3:F7:B9:5F:31
Certificate issuer: /CN=cfc4c2ae338845efe7802deec234eae3f7b95f31
Certificate serial: 019F9136048C51ECB3BC5D0761EC95DB86E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8TCrjOIRe_ngC3uwjTq4_e5XzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/976925-2551-4b2b-900a-e111f322636a/1/z8TCrjOIRe_ngC3uwjTq4_e5XzE.mft
Manifest number: 03BF
Signing time: Thu 23 Jul 2026 23:01:04 +0000
Manifest this update: Thu 23 Jul 2026 23:01:04 +0000
Manifest next update: Fri 24 Jul 2026 23:01:04 +0000
Files and hashes: 1: HfBJ2Nut_YAQuWjhDmP8H2eMvJ8.roa (hash: qlvHpaLVzXcUtxyLFD8U+1k01vVLX6TwfsOJYC4Ocds=)
2: z8TCrjOIRe_ngC3uwjTq4_e5XzE.crl (hash: CZtHoWAifO54FJikdw7EhDCMOkavAp/vV7A/yEk57RI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/976925-2551-4b2b-900a-e111f322636a/1/z8TCrjOIRe_ngC3uwjTq4_e5XzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/976925-2551-4b2b-900a-e111f322636a/1/z8TCrjOIRe_ngC3uwjTq4_e5XzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/z8TCrjOIRe_ngC3uwjTq4_e5XzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:36:04:8c:51:ec:b3:bc:5d:07:61:ec:95:db:86:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfc4c2ae338845efe7802deec234eae3f7b95f31
Validity
Not Before: Jul 23 23:01:04 2026 GMT
Not After : Jul 24 23:01:04 2026 GMT
Subject: CN=b6b7a5f81d9be576e6f972862675fcca83f6786f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ab:6d:c1:36:30:34:57:36:be:2f:db:0f:11:
9c:46:00:e7:06:f6:6f:f2:bb:82:28:1f:ac:f2:eb:
45:4c:96:9a:69:7c:d0:cb:22:c0:ab:4e:06:12:ee:
4d:67:9f:43:70:7b:e1:10:2b:66:e6:e9:a0:85:ff:
8e:95:4b:ec:1c:c2:bf:53:89:ae:0b:f1:e0:3c:a1:
23:41:3a:d7:b2:a5:d2:76:9f:57:19:b3:6a:dc:dd:
66:e8:06:ff:ca:8b:4f:73:6b:20:30:42:bf:4d:ff:
73:a1:51:d8:c6:f0:89:f2:87:c5:19:c9:06:e7:1c:
12:79:d1:16:7c:00:53:23:8e:ee:81:e4:07:d0:8b:
0c:26:b7:46:aa:77:3d:0c:aa:4a:25:cb:60:6c:5b:
99:56:e7:d3:34:77:01:0c:26:bb:19:79:a7:b7:cd:
82:2d:65:85:02:05:7f:e9:64:59:06:76:ad:fe:09:
ee:7b:56:6d:cc:66:3c:dd:5b:7e:02:1d:53:c1:ca:
95:28:6d:ee:8b:85:c0:90:7e:58:70:7b:ad:ec:d9:
71:be:d5:e2:ba:3e:c7:fc:3c:94:2a:6f:60:94:bf:
ad:be:8b:12:a6:c4:d5:1c:40:c0:d1:42:2e:df:41:
9e:a7:c5:35:29:ae:a1:8a:62:f5:89:c7:90:e2:38:
08:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:B7:A5:F8:1D:9B:E5:76:E6:F9:72:86:26:75:FC:CA:83:F6:78:6F
X509v3 Authority Key Identifier:
keyid:CF:C4:C2:AE:33:88:45:EF:E7:80:2D:EE:C2:34:EA:E3:F7:B9:5F:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8TCrjOIRe_ngC3uwjTq4_e5XzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/976925-2551-4b2b-900a-e111f322636a/1/z8TCrjOIRe_ngC3uwjTq4_e5XzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/976925-2551-4b2b-900a-e111f322636a/1/z8TCrjOIRe_ngC3uwjTq4_e5XzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:da:ba:16:57:23:15:43:e5:c9:ed:fa:e2:73:84:f9:49:52:
d3:52:8a:67:ee:32:b2:1e:19:47:f2:b5:4d:23:00:d2:d8:44:
c3:75:a5:5f:af:bc:b9:ba:90:93:5d:cd:b1:ea:da:db:9d:12:
46:14:f1:05:58:8d:25:6e:c4:8f:eb:3c:9c:69:89:8b:6d:57:
50:02:12:0c:b4:61:48:cd:37:be:23:d4:24:a3:06:3b:1a:28:
ea:06:c6:2e:bb:b8:56:02:2a:90:db:27:0b:8b:dd:5f:67:25:
fe:08:a1:e6:65:51:cd:93:bd:fc:2c:f5:31:13:1d:cf:28:86:
36:a3:f6:16:e8:11:96:3c:37:7a:97:52:7b:bb:50:9c:0f:f7:
71:9c:d8:c9:18:eb:76:f8:d7:b2:2b:d8:ad:b2:e1:ca:7f:75:
b9:8f:e0:c7:f1:d5:40:d7:08:ef:2c:47:80:39:7f:7a:d8:11:
4b:aa:bf:eb:7f:8c:67:21:96:2d:46:6d:22:3b:97:f8:56:bf:
cd:ac:1b:bd:1a:05:86:2f:ee:d8:a7:1a:36:5b:39:3a:2f:7c:
64:fc:ca:74:a0:92:4e:5c:05:86:13:b9:bd:a1:ea:e1:e6:f9:
22:e1:67:15:29:07:c6:da:a2:97:73:35:36:dc:3e:7c:93:03:
81:42:e7:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:20:05 2026 by rpki-client