Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/z0AYX1Us2XUnbANGT1DHpdNRVkw.mft
File: z0AYX1Us2XUnbANGT1DHpdNRVkw.mft (raw, json)
Hash identifier: Bnrltp/xyzitztDaYEMPWWgblpYYZiMzN+QGGpTiy2w=
Subject key identifier: 88:AF:DE:93:11:C5:12:77:37:30:5C:40:E9:14:B2:8B:93:35:41:0B
Authority key identifier: CF:40:18:5F:55:2C:D9:75:27:6C:03:46:4F:50:C7:A5:D3:51:56:4C
Certificate issuer: /CN=cf40185f552cd975276c03464f50c7a5d351564c
Certificate serial: 019F935B34CF970FCF4A90884A0BBD27141F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z0AYX1Us2XUnbANGT1DHpdNRVkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/z0AYX1Us2XUnbANGT1DHpdNRVkw.mft
Manifest number: 02E4
Signing time: Fri 24 Jul 2026 09:00:55 +0000
Manifest this update: Fri 24 Jul 2026 09:00:55 +0000
Manifest next update: Sat 25 Jul 2026 09:00:55 +0000
Files and hashes: 1: laiDZxmXdgJH8Of-yAuGAFD0Nks.roa (hash: 29mbTdf0w60u4m7lifJIKwS951c2LKKJ0JQHfZ51kdg=)
2: wPJ_bWcqiT5Ryc2PrLz-RlxJFfk.roa (hash: WhlDU2CEPgF/HK0/49CMTEtZOnQc9y/7MprKkJl/+MA=)
3: z0AYX1Us2XUnbANGT1DHpdNRVkw.crl (hash: 6ukRryGkyCrS7PolTBLpUhZub2wCDWeZk8gOBnwLj+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/z0AYX1Us2XUnbANGT1DHpdNRVkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/z0AYX1Us2XUnbANGT1DHpdNRVkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/z0AYX1Us2XUnbANGT1DHpdNRVkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:34:cf:97:0f:cf:4a:90:88:4a:0b:bd:27:14:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf40185f552cd975276c03464f50c7a5d351564c
Validity
Not Before: Jul 24 09:00:55 2026 GMT
Not After : Jul 25 09:00:55 2026 GMT
Subject: CN=88afde9311c5127737305c40e914b28b9335410b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:bd:f4:9b:0d:c4:6a:29:c9:82:54:d1:e0:95:
e6:fe:e1:55:b4:cf:35:75:84:5d:78:36:aa:71:c0:
0e:2a:b7:fa:ba:6a:fc:b7:59:69:28:d9:30:35:32:
70:6b:57:f5:c8:a3:8b:ba:27:61:71:d6:a9:6e:06:
a1:ce:dd:c3:5c:40:76:08:85:cc:4b:a6:a9:f5:d7:
48:81:2b:e9:95:2a:43:41:c1:76:96:88:61:74:7a:
a9:57:6c:2e:ad:b5:3b:6e:0b:1c:86:03:de:71:e1:
cb:da:da:0c:14:83:bf:48:62:02:73:96:d6:a9:70:
7a:42:bc:fd:05:9c:3a:d2:c1:12:a2:d6:9c:b5:63:
4f:42:40:88:ae:aa:18:e1:a2:75:39:1e:27:8e:82:
0a:9f:44:52:70:74:06:54:83:f5:c0:48:01:64:71:
36:3c:67:e4:23:07:7f:ae:e8:b7:19:c3:16:ea:88:
43:35:a0:f0:9c:1f:d3:33:5f:34:5b:46:94:13:96:
9a:e0:2c:c3:98:53:38:a6:29:40:fd:c5:14:19:a4:
ca:07:64:e9:50:6f:c5:65:8a:1e:ce:c9:5e:08:fd:
04:00:f7:6d:7d:45:d3:23:30:f3:da:5d:98:ff:ef:
a8:8a:6b:2d:0e:3a:a5:5d:f9:60:de:e4:bc:89:c5:
c0:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:AF:DE:93:11:C5:12:77:37:30:5C:40:E9:14:B2:8B:93:35:41:0B
X509v3 Authority Key Identifier:
keyid:CF:40:18:5F:55:2C:D9:75:27:6C:03:46:4F:50:C7:A5:D3:51:56:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z0AYX1Us2XUnbANGT1DHpdNRVkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/z0AYX1Us2XUnbANGT1DHpdNRVkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/z0AYX1Us2XUnbANGT1DHpdNRVkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:4b:72:f8:3b:c0:9b:e2:d7:d4:84:0a:15:52:70:41:0c:a9:
1f:60:e6:80:d7:21:07:6c:99:b0:32:35:49:d5:83:40:a1:53:
af:62:45:93:9d:46:7e:54:27:fa:d1:5c:80:28:1c:18:02:18:
2d:82:59:f1:df:51:5f:75:12:a4:e3:f5:f4:3f:26:5f:88:b8:
af:b4:39:68:44:70:30:7c:ec:11:88:4f:82:84:68:1f:9b:ce:
80:17:3a:30:c7:37:ec:b2:18:f9:21:36:4e:a8:38:0d:0c:cd:
1f:d5:de:47:02:bd:f0:4c:98:41:54:11:9f:6d:a6:ba:45:50:
8c:33:12:71:e6:07:52:df:ad:79:b7:f8:f5:7a:80:6f:b8:33:
9e:43:77:b2:1f:c8:13:4d:cd:f7:67:74:3b:9d:8a:47:d0:9e:
1e:36:da:f5:9e:53:d4:bc:7d:3b:a9:c3:09:9b:e5:3d:df:9d:
a7:c5:63:ed:36:e6:71:34:5e:38:e8:ce:3e:4a:f8:e5:39:48:
eb:9f:95:69:ad:04:3e:2a:19:ea:31:05:08:b2:f9:05:e0:fd:
dc:d6:f9:78:ec:55:dd:cc:ea:e0:2e:2d:88:b8:a9:11:ec:24:
cd:97:26:41:ba:36:73:b6:23:5b:be:e3:a7:81:f8:e4:da:51:
07:08:1b:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:15:56 2026 by rpki-client