Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/631521-d4b7-4f10-8c06-87aa285f807c/1/z173qHDUsUjrHU9P5mbtUFSt6uw.mft
File: z173qHDUsUjrHU9P5mbtUFSt6uw.mft (raw, json)
Hash identifier: wKIGMNJnKNuk17JKkgZhpNPfDEZsaNJa/tQ/lT1ME8M=
Subject key identifier: C8:55:62:21:E1:5C:56:84:5E:76:49:4B:E9:F5:8C:10:D8:88:FF:39
Authority key identifier: CF:5E:F7:A8:70:D4:B1:48:EB:1D:4F:4F:E6:66:ED:50:54:AD:EA:EC
Certificate issuer: /CN=cf5ef7a870d4b148eb1d4f4fe666ed5054adeaec
Certificate serial: 019F9738996BDDC26133795D72D0DB9C2FBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z173qHDUsUjrHU9P5mbtUFSt6uw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/631521-d4b7-4f10-8c06-87aa285f807c/1/z173qHDUsUjrHU9P5mbtUFSt6uw.mft
Manifest number: 1140
Signing time: Sat 25 Jul 2026 03:01:36 +0000
Manifest this update: Sat 25 Jul 2026 03:01:36 +0000
Manifest next update: Sun 26 Jul 2026 03:01:36 +0000
Files and hashes: 1: WcEXb1FwWuq7CmZIR_j833VQVLg.roa (hash: YwtVclxxnke6RUqR5TUDz5Eu+w+6DwiJjWOIUuWJONU=)
2: bfREzEwR-EXPjAe3wBGoI04LV-k.roa (hash: 769fYTMFcVF5MUU/DGKAsF33sj2AY85ZIEX4Env7vD8=)
3: z173qHDUsUjrHU9P5mbtUFSt6uw.crl (hash: l0XFItsDSjafoLTJBmzKWV3quaHiIy9FYw4Cz4CBJvs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/631521-d4b7-4f10-8c06-87aa285f807c/1/z173qHDUsUjrHU9P5mbtUFSt6uw.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/631521-d4b7-4f10-8c06-87aa285f807c/1/z173qHDUsUjrHU9P5mbtUFSt6uw.mft
rsync://rpki.ripe.net/repository/DEFAULT/z173qHDUsUjrHU9P5mbtUFSt6uw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 20:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:97:38:99:6b:dd:c2:61:33:79:5d:72:d0:db:9c:2f:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf5ef7a870d4b148eb1d4f4fe666ed5054adeaec
Validity
Not Before: Jul 25 03:01:36 2026 GMT
Not After : Jul 26 03:01:36 2026 GMT
Subject: CN=c8556221e15c56845e76494be9f58c10d888ff39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ef:e5:71:5e:60:d0:cd:02:f2:b5:90:85:b1:
94:a8:95:5d:24:e8:1e:f4:65:22:e7:f3:78:51:7a:
0b:b7:93:2c:b9:bf:52:7a:86:cd:4a:a3:22:33:89:
38:a5:37:8a:52:5d:54:46:5c:64:d6:e5:ad:f0:19:
4d:21:2d:34:04:7e:d2:e1:73:76:d7:f3:db:70:60:
73:22:ac:6f:66:23:f9:e4:e3:86:97:7a:e5:7f:ff:
cf:3d:94:77:8f:f0:38:99:58:f6:32:d3:0e:78:c4:
e9:ef:71:2b:69:45:b0:34:ef:40:58:a9:09:da:28:
63:3a:32:28:62:b8:58:d0:f8:7e:d8:c6:59:b1:8d:
5a:fd:ae:d3:bc:29:ee:c1:98:20:f6:fe:03:05:e3:
e4:b7:58:53:bb:41:61:e8:12:17:ac:bc:9f:e1:e7:
39:f3:54:65:39:72:c2:23:9d:4b:06:53:bb:1c:bd:
b8:49:78:16:c4:ce:48:ea:86:9d:e8:ef:22:e1:8e:
fc:d6:f5:60:61:3a:e5:75:79:0b:f8:cd:05:c5:a8:
03:18:6d:ee:b1:09:d1:64:64:9e:23:1f:47:59:d7:
a2:58:5b:80:4d:f5:cb:92:e8:e7:cb:a4:99:9e:0f:
12:ef:09:e2:ee:db:5e:55:e4:dc:f9:ca:9d:94:10:
e1:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:55:62:21:E1:5C:56:84:5E:76:49:4B:E9:F5:8C:10:D8:88:FF:39
X509v3 Authority Key Identifier:
keyid:CF:5E:F7:A8:70:D4:B1:48:EB:1D:4F:4F:E6:66:ED:50:54:AD:EA:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z173qHDUsUjrHU9P5mbtUFSt6uw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/631521-d4b7-4f10-8c06-87aa285f807c/1/z173qHDUsUjrHU9P5mbtUFSt6uw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/631521-d4b7-4f10-8c06-87aa285f807c/1/z173qHDUsUjrHU9P5mbtUFSt6uw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:7b:04:86:e7:6f:e7:91:74:26:15:a4:76:18:9d:72:92:e8:
ba:71:87:39:ba:b3:db:ea:2f:d7:d2:5c:36:05:9b:6c:55:aa:
48:7b:5d:b7:10:01:a9:81:75:43:87:50:b7:19:82:03:ee:55:
cf:ac:95:94:a8:7c:74:f7:53:5c:0d:b1:8b:6a:33:5a:1b:e0:
90:a0:88:de:11:16:1f:82:8f:2e:a7:aa:ff:dd:0b:b4:f0:5b:
a1:b3:49:04:49:6f:46:c3:25:79:9c:a3:8f:63:e4:c4:5b:9a:
fc:da:96:f8:3f:40:a7:5e:d5:62:79:d6:6a:fd:88:6b:a2:72:
a7:c0:72:af:f7:e4:eb:1d:59:82:d0:3d:00:ba:7d:37:e6:e2:
88:c3:25:be:83:cf:d9:a8:82:b5:5e:0c:bc:78:8e:5c:5e:59:
36:40:4b:bb:21:14:54:19:7d:82:2a:cc:fc:2e:27:fc:44:c4:
8c:81:d4:b0:dd:da:d5:7f:75:9a:0b:30:c8:8b:80:e7:f7:7a:
eb:32:16:2a:d9:d7:e9:4f:f9:6d:0a:73:cc:3d:2b:f9:ff:71:
3a:1b:00:3b:98:18:5d:05:36:b3:99:53:d6:a6:07:ff:24:21:
aa:15:bb:67:a0:b0:45:5f:26:fc:85:8a:c6:eb:1e:c4:cd:a6:
79:b1:d1:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 05:18:54 2026 by rpki-client