Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/Z8Os-SmiIzjys4AYDMhS20d5qtA.mft
File: Z8Os-SmiIzjys4AYDMhS20d5qtA.mft (raw, json)
Hash identifier: 4bwMdbIVg3woVPn7J9vpTOLQyNUB3Q4bjZPDELv1Ldo=
Subject key identifier: 50:69:C3:4A:DF:35:F1:73:9B:B3:9A:40:29:AD:02:BC:65:73:B5:FE
Authority key identifier: 67:C3:AC:F9:29:A2:23:38:F2:B3:80:18:0C:C8:52:DB:47:79:AA:D0
Certificate issuer: /CN=67c3acf929a22338f2b380180cc852db4779aad0
Certificate serial: 019F93923C1C188F5314061977A09CB64EAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8Os-SmiIzjys4AYDMhS20d5qtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/Z8Os-SmiIzjys4AYDMhS20d5qtA.mft
Manifest number: 14BA
Signing time: Fri 24 Jul 2026 10:01:02 +0000
Manifest this update: Fri 24 Jul 2026 10:01:02 +0000
Manifest next update: Sat 25 Jul 2026 10:01:02 +0000
Files and hashes: 1: TfIi7I3WgDvXNjupkEjxzP8GxkI.roa (hash: Qym68UnT2HiOSpZ3+9brbjDLO7IA/zFl9AhYdT/LiLQ=)
2: Z8Os-SmiIzjys4AYDMhS20d5qtA.crl (hash: 0bQuaTIiyvGylUMLlC6LmRwEEdBTBSr/8g+hqMiXJuo=)
3: zBxBTpibLrslxHWch5H0k9kNNd0.roa (hash: kLIKoJKwnkX2C7p3Y1VY7at5dd/MwDeXCZmhRXuoHg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/Z8Os-SmiIzjys4AYDMhS20d5qtA.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/Z8Os-SmiIzjys4AYDMhS20d5qtA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z8Os-SmiIzjys4AYDMhS20d5qtA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:92:3c:1c:18:8f:53:14:06:19:77:a0:9c:b6:4e:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67c3acf929a22338f2b380180cc852db4779aad0
Validity
Not Before: Jul 24 10:01:02 2026 GMT
Not After : Jul 25 10:01:02 2026 GMT
Subject: CN=5069c34adf35f1739bb39a4029ad02bc6573b5fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:f7:40:82:af:16:4f:9c:82:94:32:ef:45:04:
53:04:d1:07:dc:6a:bf:8f:a4:5c:e1:b4:3a:93:7c:
22:33:d0:73:f9:55:cc:6d:a8:1c:92:84:3f:9d:b9:
8f:b4:fb:b4:03:1a:44:b5:60:a1:e3:15:91:09:17:
eb:c7:dc:34:c6:26:83:bc:dd:ba:62:15:c6:c3:8d:
75:42:e3:a4:97:66:87:6c:b2:2b:32:7c:d9:9d:ac:
c2:92:48:e3:a8:3f:f2:79:c2:93:5f:d9:ff:39:d3:
4b:a5:b8:44:b4:1c:3f:c7:2a:d3:4f:25:0b:33:a8:
0c:d8:8c:a7:2b:83:65:f9:29:36:7e:63:11:4e:ae:
4a:da:6b:29:24:2c:ce:ab:95:a9:1d:d7:94:7e:0c:
4f:5c:73:80:57:c3:29:27:eb:79:c8:1c:d9:e4:97:
13:ae:1a:db:c3:0d:b8:2a:80:7c:b3:e4:62:5e:cf:
df:d9:df:3e:bb:2a:64:f4:3a:cb:06:a3:2a:ee:c9:
45:05:4e:ae:f6:04:0c:f3:ba:6a:78:b4:ef:d9:09:
98:db:70:5a:33:dd:87:2b:39:42:d8:2e:6c:50:1e:
35:3e:ef:73:c4:0f:79:e2:c2:0e:7b:14:0f:40:06:
89:c3:c0:fc:8e:26:85:b0:31:d6:39:4e:1f:72:cc:
77:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:69:C3:4A:DF:35:F1:73:9B:B3:9A:40:29:AD:02:BC:65:73:B5:FE
X509v3 Authority Key Identifier:
keyid:67:C3:AC:F9:29:A2:23:38:F2:B3:80:18:0C:C8:52:DB:47:79:AA:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8Os-SmiIzjys4AYDMhS20d5qtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/Z8Os-SmiIzjys4AYDMhS20d5qtA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/Z8Os-SmiIzjys4AYDMhS20d5qtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:07:62:ae:ee:92:8f:d1:95:90:2c:fb:87:bc:05:8a:24:b7:
29:a0:8f:98:55:05:6b:fe:b7:4c:0e:94:31:15:3e:61:e6:e6:
15:a2:b7:b4:fe:cb:94:9a:15:38:68:75:88:10:45:27:2c:c9:
a3:4c:ac:8b:e1:a7:59:4d:a2:28:a7:95:f3:98:6c:42:0b:af:
45:e5:ea:30:78:57:9b:e5:b4:3d:9b:14:c3:e0:9d:0f:38:6a:
99:70:a5:27:bd:37:e6:09:05:39:82:3f:1f:33:40:51:d7:84:
fc:33:7b:f2:b5:8f:f3:a8:95:f5:33:11:4c:07:14:53:ba:2a:
29:d3:4a:a6:b7:4e:67:68:55:9f:44:3f:c4:52:dc:97:b9:d8:
6e:d2:ef:f4:d1:9b:55:81:f2:45:7d:0d:b0:56:75:9f:b8:05:
a2:43:03:2c:c3:b7:a2:99:1b:f1:e3:f5:69:12:5c:34:97:12:
7b:57:b2:c1:a6:f8:d0:ed:36:de:5f:3c:d3:6c:c6:a0:a2:3c:
5f:f8:e1:74:3c:8b:35:6e:be:2a:f3:4c:99:a5:a2:6b:ff:63:
31:c0:8e:3c:a1:29:51:7a:f8:ed:30:9b:3e:3d:ba:54:29:60:
75:66:72:af:6b:06:7e:97:4a:79:0c:03:5e:f0:e5:0c:20:d4:
b6:c7:9f:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:07:03 2026 by rpki-client