Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/a8237d-1307-4dfb-aad6-f90b3e5493d4/1/z9LUeU5busDjTJ0BibJu8UcViiM.mft
File: z9LUeU5busDjTJ0BibJu8UcViiM.mft (raw, json)
Hash identifier: QebMUM6lv4USr1aTMYWoqZm1Z+Jl1W5FFY8ZqWjeKNg=
Subject key identifier: 3D:C4:FB:EB:36:A3:C5:D4:3D:53:E1:BC:36:4A:5A:8E:38:B6:7F:1F
Authority key identifier: CF:D2:D4:79:4E:5B:BA:C0:E3:4C:9D:01:89:B2:6E:F1:47:15:8A:23
Certificate issuer: /CN=cfd2d4794e5bbac0e34c9d0189b26ef147158a23
Certificate serial: 019F8ED9070913DCDB2CEE4D71735138A448
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z9LUeU5busDjTJ0BibJu8UcViiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/a8237d-1307-4dfb-aad6-f90b3e5493d4/1/z9LUeU5busDjTJ0BibJu8UcViiM.mft
Manifest number: 0198
Signing time: Thu 23 Jul 2026 12:00:15 +0000
Manifest this update: Thu 23 Jul 2026 12:00:15 +0000
Manifest next update: Fri 24 Jul 2026 12:00:15 +0000
Files and hashes: 1: e9ESBbCpXLampxKyfROKHhSNrlQ.roa (hash: tD7v+u/DQGlM+A9s6n4BBi5LAYT9sFcm9HvPxsWUOOU=)
2: pUcV2CDMwVfdHgvxvC-AB5Vhfog.asa (hash: /YYL6jpXO8Tk4JIAMqivU9OX7v7luqvFgZ3LC4roaSQ=)
3: z9LUeU5busDjTJ0BibJu8UcViiM.crl (hash: TFCMeO1wsjxqlpWtLrGSXx5mslm6ibtBY61gEtO/EJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/a8237d-1307-4dfb-aad6-f90b3e5493d4/1/z9LUeU5busDjTJ0BibJu8UcViiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/a8237d-1307-4dfb-aad6-f90b3e5493d4/1/z9LUeU5busDjTJ0BibJu8UcViiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/z9LUeU5busDjTJ0BibJu8UcViiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 12:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:d9:07:09:13:dc:db:2c:ee:4d:71:73:51:38:a4:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfd2d4794e5bbac0e34c9d0189b26ef147158a23
Validity
Not Before: Jul 23 12:00:15 2026 GMT
Not After : Jul 24 12:00:15 2026 GMT
Subject: CN=3dc4fbeb36a3c5d43d53e1bc364a5a8e38b67f1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:55:31:3e:ca:f4:bf:3b:b7:c6:4a:f3:15:51:
62:f1:75:a5:fa:5b:21:17:1a:4d:ed:f7:86:09:34:
69:9a:49:d8:e0:79:ef:0c:fb:c7:46:64:0f:ec:2d:
0f:a6:f1:18:f1:4e:26:c5:ec:24:b6:fe:15:3f:b4:
b4:5b:f2:2d:02:90:37:42:c6:7f:47:f0:aa:97:2d:
88:4a:a3:98:bf:b6:b8:3e:5a:f9:00:19:00:7a:73:
ba:b7:2f:16:60:76:1d:72:1f:0b:48:10:02:ab:80:
d4:a4:59:39:89:4c:ed:2d:8e:a9:fc:21:53:39:65:
71:d6:02:d0:05:f1:3e:5b:a9:ac:db:57:fd:57:4c:
8e:1e:58:bf:cb:6a:fa:78:8d:09:f4:83:23:3c:e8:
43:38:ca:db:27:24:65:91:44:48:b3:99:ed:e1:20:
f6:5d:30:b6:21:3b:ab:42:29:6a:66:7a:62:88:b9:
2f:6a:4a:b4:73:c2:28:75:9b:76:48:5f:ac:91:5f:
69:0a:48:60:8c:52:db:24:9a:e6:7b:8e:8e:17:42:
98:ad:62:3d:14:7e:9c:ba:2e:06:78:94:38:6a:62:
5f:9e:ed:fc:1c:d0:cc:16:fa:8c:b7:5b:b1:fc:31:
c0:38:8f:0d:e6:73:5f:64:bc:8f:d4:3c:f2:8b:ae:
06:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:C4:FB:EB:36:A3:C5:D4:3D:53:E1:BC:36:4A:5A:8E:38:B6:7F:1F
X509v3 Authority Key Identifier:
keyid:CF:D2:D4:79:4E:5B:BA:C0:E3:4C:9D:01:89:B2:6E:F1:47:15:8A:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9LUeU5busDjTJ0BibJu8UcViiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/a8237d-1307-4dfb-aad6-f90b3e5493d4/1/z9LUeU5busDjTJ0BibJu8UcViiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/a8237d-1307-4dfb-aad6-f90b3e5493d4/1/z9LUeU5busDjTJ0BibJu8UcViiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:a8:5c:19:76:f0:fb:8c:7b:bf:6b:04:8e:85:34:7c:4e:b8:
33:3e:a3:71:17:8b:6a:ea:be:0a:d4:d1:bc:3c:fc:c0:5b:61:
ba:b5:06:36:b0:3b:a4:28:21:d9:bd:26:f2:79:01:5b:96:af:
e8:5f:d1:98:b9:82:c7:53:41:3d:ce:83:ed:07:c6:4a:36:f7:
5b:de:7b:05:72:8a:05:bc:6d:a9:5d:cc:1b:b9:d5:53:84:5d:
c2:a7:bf:3e:73:24:d2:bf:07:ab:76:f5:b2:d6:e9:9c:3f:9b:
16:58:f9:17:55:9d:3d:6c:63:4e:6e:86:e0:6f:9a:be:dc:3f:
5e:bf:68:62:fd:88:36:e9:58:dd:2a:52:8b:93:62:9c:c9:be:
e2:5e:c1:59:c2:2d:a0:2e:61:61:3f:c2:4c:e3:1e:71:a7:d4:
5f:e7:c9:ca:6e:f8:98:2a:18:c8:15:14:e7:f8:47:d4:1f:3c:
63:84:ba:33:b8:21:0c:3d:cf:cf:74:dd:69:14:3a:3d:6d:28:
51:43:72:5c:12:36:10:da:60:3a:97:4e:0e:8d:9c:55:8f:56:
37:e4:1b:7f:5d:0d:f2:b3:ea:85:b7:41:9c:fe:94:c8:77:51:
29:e2:61:ab:ad:44:83:bc:05:d7:4f:b2:0c:20:f7:d0:51:e5:
e8:a9:58:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:04:07 2026 by rpki-client