Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/761b48-69ea-40e4-8d7c-64cd194f7f4f/1/z2hDzhUimoAj2X-iejflkniyv9c.mft
File: z2hDzhUimoAj2X-iejflkniyv9c.mft (raw, json)
Hash identifier: LdtBcdnncdDObrI55g+6DgzfczNNABVnKXw56CPSblY=
Subject key identifier: 79:CD:20:A6:80:1B:5F:ED:4C:FC:52:2C:C8:27:93:85:8F:8D:1C:73
Authority key identifier: CF:68:43:CE:15:22:9A:80:23:D9:7F:A2:7A:37:E5:92:78:B2:BF:D7
Certificate issuer: /CN=cf6843ce15229a8023d97fa27a37e59278b2bfd7
Certificate serial: 019F8EA22805562BE2B163B7B9289EDD39BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z2hDzhUimoAj2X-iejflkniyv9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/761b48-69ea-40e4-8d7c-64cd194f7f4f/1/z2hDzhUimoAj2X-iejflkniyv9c.mft
Manifest number: 0FB3
Signing time: Thu 23 Jul 2026 11:00:19 +0000
Manifest this update: Thu 23 Jul 2026 11:00:19 +0000
Manifest next update: Fri 24 Jul 2026 11:00:19 +0000
Files and hashes: 1: pKievJotd0Vwu1YJE0cQcf-DltY.roa (hash: h+T203a1jd44mMy05CeC2wpUpgb3MOkiNaLP9bVt08U=)
2: z2hDzhUimoAj2X-iejflkniyv9c.crl (hash: 8G1mJZiSv3DHIFVm+5H9KZU59xy4LB37hZSzY2MpK4o=)
3: zTpF3FSMs_qDjEf4CKvMWuVC_2g.asa (hash: s24/aX3H/IMCq17F9HBTclHDEpfjAqO3H7tgCV+Qz94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/761b48-69ea-40e4-8d7c-64cd194f7f4f/1/z2hDzhUimoAj2X-iejflkniyv9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/761b48-69ea-40e4-8d7c-64cd194f7f4f/1/z2hDzhUimoAj2X-iejflkniyv9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/z2hDzhUimoAj2X-iejflkniyv9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:28:05:56:2b:e2:b1:63:b7:b9:28:9e:dd:39:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf6843ce15229a8023d97fa27a37e59278b2bfd7
Validity
Not Before: Jul 23 11:00:19 2026 GMT
Not After : Jul 24 11:00:19 2026 GMT
Subject: CN=79cd20a6801b5fed4cfc522cc82793858f8d1c73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7f:4a:d2:41:a5:5f:9e:60:8f:f5:49:23:38:
7f:83:79:ab:58:56:da:1d:f6:83:62:18:3a:86:7c:
ea:70:3d:02:21:50:6c:b8:84:c3:3c:e7:6b:e3:c0:
d9:d0:70:b5:c1:08:2b:8f:65:98:ae:d9:a3:52:41:
01:aa:18:aa:7d:d3:90:99:a6:ad:13:fe:33:b7:a4:
4e:96:44:b6:c2:79:70:f0:30:3b:ce:6c:4d:9f:fd:
8b:b9:6a:c5:4d:4d:d5:d1:48:8f:1a:36:70:42:85:
92:a5:90:43:ab:e9:45:ac:f1:a4:96:07:ed:d1:fe:
21:4f:b7:4c:d2:05:2a:34:8f:76:a4:7d:15:da:3a:
85:a4:4e:9e:28:fe:c6:de:41:94:f9:e1:f0:eb:a0:
3e:44:54:d1:bf:28:60:a7:96:41:67:dd:08:cb:3f:
db:60:0d:26:4d:7a:1e:60:b5:7d:73:8e:7b:2e:67:
9b:c2:16:62:dc:8c:9c:30:13:59:59:e2:78:4d:cf:
c6:d6:83:18:d6:79:c4:63:26:c4:10:47:68:75:89:
c2:95:e1:3b:2c:ff:aa:bf:66:08:b0:c2:3c:1d:13:
c9:b6:e4:74:a9:f1:eb:73:1d:0c:42:f7:a6:20:01:
f0:de:c8:50:3f:25:e4:ac:ce:12:fb:eb:cd:bb:6c:
57:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:CD:20:A6:80:1B:5F:ED:4C:FC:52:2C:C8:27:93:85:8F:8D:1C:73
X509v3 Authority Key Identifier:
keyid:CF:68:43:CE:15:22:9A:80:23:D9:7F:A2:7A:37:E5:92:78:B2:BF:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z2hDzhUimoAj2X-iejflkniyv9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/761b48-69ea-40e4-8d7c-64cd194f7f4f/1/z2hDzhUimoAj2X-iejflkniyv9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/761b48-69ea-40e4-8d7c-64cd194f7f4f/1/z2hDzhUimoAj2X-iejflkniyv9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:44:e6:f9:50:ca:5b:f1:3d:08:66:36:a2:3b:15:45:8f:b4:
62:2c:18:40:ab:6a:6c:ec:b6:2a:a2:cc:8b:38:2c:7d:ac:6b:
1b:f4:28:69:89:d2:ba:38:ee:22:b8:f7:5e:82:55:a2:0b:7d:
ac:c9:b9:7e:d6:10:7b:ed:df:d5:d7:5e:c3:be:10:df:e5:de:
67:34:64:69:73:94:d8:0c:90:bb:79:d7:4e:f5:fa:91:5c:77:
8a:1f:02:67:6f:07:cb:7b:99:4b:2b:92:42:fd:2b:a2:48:bd:
a6:66:9e:e4:ee:48:df:47:00:69:6c:e7:8c:25:2f:9f:bc:90:
a1:0e:cb:d1:ed:dd:23:2c:72:40:b5:17:0c:27:6f:77:8a:5b:
4e:4b:65:b9:9b:ae:50:f5:37:44:75:cb:65:0d:1e:fe:1d:44:
75:06:60:27:42:7a:e5:b9:f2:4d:cc:80:27:c2:7a:7f:d3:49:
03:06:ca:a1:17:9d:81:88:7c:ed:f4:41:c4:9e:c1:5c:b2:f2:
08:0a:f5:5a:65:67:93:8a:00:42:40:e8:6f:8b:11:29:93:c8:
19:e9:6a:62:53:9d:17:df:1f:e1:9f:70:31:f8:dc:45:3e:45:
bd:47:22:59:77:6e:04:13:66:22:67:85:6e:ad:77:f6:a0:8b:
f4:04:4b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:02:55 2026 by rpki-client