Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/z7XKpN3_v-PgZ_-Ox34VDJivTzU.mft
File: z7XKpN3_v-PgZ_-Ox34VDJivTzU.mft (raw, json)
Hash identifier: mPsng9z20XD1s/gJarLYAmWif4fOfp+JGuRjoarWwVI=
Subject key identifier: D9:C9:38:81:D3:83:3B:9C:6B:B0:A8:88:39:7A:4A:6E:B4:74:02:F3
Authority key identifier: CF:B5:CA:A4:DD:FF:BF:E3:E0:67:FF:8E:C7:7E:15:0C:98:AF:4F:35
Certificate issuer: /CN=cfb5caa4ddffbfe3e067ff8ec77e150c98af4f35
Certificate serial: 019F935B0102362D1DAFF4FA1B79A73923AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z7XKpN3_v-PgZ_-Ox34VDJivTzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/z7XKpN3_v-PgZ_-Ox34VDJivTzU.mft
Manifest number: 41
Signing time: Fri 24 Jul 2026 09:00:42 +0000
Manifest this update: Fri 24 Jul 2026 09:00:42 +0000
Manifest next update: Sat 25 Jul 2026 09:00:42 +0000
Files and hashes: 1: UpQaalpvFrofiBvJgDzD5ykV4Es.roa (hash: htOEHU0XKcxzfErxMNDU5sKxeT/b4gBnMaIIg36jS6Y=)
2: lvL4hmOHFOaf-c2I-4F7EqTFtJs.roa (hash: RhrM1BRru6RaIuVQmbqOxmE3Nat3kjidvWR1T36n9a8=)
3: z7XKpN3_v-PgZ_-Ox34VDJivTzU.crl (hash: j7w1Hq8A6FFJNge/+MbtbM6ZpufKgr7+bTB0lOyzeeg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/z7XKpN3_v-PgZ_-Ox34VDJivTzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/z7XKpN3_v-PgZ_-Ox34VDJivTzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/z7XKpN3_v-PgZ_-Ox34VDJivTzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:01:02:36:2d:1d:af:f4:fa:1b:79:a7:39:23:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfb5caa4ddffbfe3e067ff8ec77e150c98af4f35
Validity
Not Before: Jul 24 09:00:42 2026 GMT
Not After : Jul 25 09:00:42 2026 GMT
Subject: CN=d9c93881d3833b9c6bb0a888397a4a6eb47402f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:25:00:81:93:dc:67:ba:8d:96:b0:f1:5d:07:
09:89:73:5a:53:79:22:d9:56:15:1b:37:02:69:9c:
48:dd:9c:dc:04:ed:ed:07:3d:54:ab:fd:ef:17:b9:
f8:81:88:b9:61:aa:18:91:32:2f:92:11:27:72:c8:
af:46:eb:9d:98:42:32:14:2e:bc:10:2c:ea:78:f8:
ee:62:4a:d2:ef:2f:d3:44:c0:16:29:a8:31:af:dd:
f5:77:3b:2b:7b:44:20:20:87:67:c9:23:1a:4c:3b:
c4:d7:34:57:48:c7:3b:c9:7d:19:27:25:6f:87:99:
bc:af:3e:bd:dd:94:d5:b3:0d:f6:77:9c:b2:b0:41:
f8:b3:80:94:7e:1c:67:b6:ad:64:83:26:10:6a:ae:
4d:20:6d:63:d6:06:f4:70:2d:25:a6:c1:6f:c3:09:
68:4e:49:56:91:f0:03:f2:2d:d6:85:2a:f1:d3:3f:
2f:bd:46:53:75:e2:70:0b:e7:fd:90:f5:ed:f5:f2:
03:2c:76:76:a3:a9:b9:4f:ff:b6:98:db:cd:1c:2c:
af:a5:50:df:05:d0:c6:73:d0:7c:be:d5:76:57:1d:
6b:61:df:40:37:93:ea:26:26:24:c1:69:14:86:3a:
a7:f4:28:17:8f:3b:d9:cc:d5:a4:45:8e:b0:1c:41:
a3:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:C9:38:81:D3:83:3B:9C:6B:B0:A8:88:39:7A:4A:6E:B4:74:02:F3
X509v3 Authority Key Identifier:
keyid:CF:B5:CA:A4:DD:FF:BF:E3:E0:67:FF:8E:C7:7E:15:0C:98:AF:4F:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z7XKpN3_v-PgZ_-Ox34VDJivTzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/z7XKpN3_v-PgZ_-Ox34VDJivTzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/z7XKpN3_v-PgZ_-Ox34VDJivTzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:9e:54:a5:b0:c0:eb:22:e5:63:48:e0:c9:a8:4e:2c:0b:05:
57:82:4a:ce:80:dc:17:7c:6c:e8:32:12:10:e2:b2:e8:f2:1c:
b4:97:68:ad:9b:ce:69:50:08:7e:2e:be:e8:2f:82:c6:66:3b:
d3:bf:13:bf:b5:7c:08:cd:50:91:7d:3b:8d:bb:90:5f:e1:ce:
16:3e:67:b1:8a:f3:fe:66:81:6d:bd:e0:87:9c:2a:0f:4a:8b:
97:94:46:fd:14:13:7f:df:e5:bc:d9:d4:91:e3:de:e4:d5:65:
9e:36:51:ee:29:a9:31:75:69:d4:e3:4a:53:ce:94:78:21:4d:
11:bb:9a:6c:ae:96:ce:65:c2:c6:d0:3e:77:7e:9a:7e:50:61:
a8:5c:dc:13:9a:53:68:2b:6d:a0:9f:22:7c:78:4c:ee:fe:bb:
00:d1:13:84:47:49:9b:b0:bf:b8:0d:d1:c1:17:f4:77:98:ca:
f1:a1:19:75:83:c0:c6:38:94:61:e5:24:ad:1c:54:34:53:e9:
21:7f:25:57:c8:99:05:fb:35:6b:94:da:7e:59:d4:e8:5b:61:
af:db:0b:fd:6e:9d:df:70:34:a8:b2:53:67:3b:b9:a1:3b:f6:
43:95:e2:00:51:44:22:75:79:88:78:57:9b:b7:af:f6:1c:c1:
de:45:f8:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:16:59 2026 by rpki-client