Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.mft
File: z7dRkZeIZvH8l_Ujx92kCoj353c.mft (raw, json)
Hash identifier: QWX7i3vhHJCRAJNUyACUQay8npEnvIYeeNjfkny/OK8=
Subject key identifier: B8:32:F8:5F:DB:48:63:E2:15:68:43:A0:51:F0:AD:A5:07:5F:85:79
Authority key identifier: CF:B7:51:91:97:88:66:F1:FC:97:F5:23:C7:DD:A4:0A:88:F7:E7:77
Certificate issuer: /CN=cfb75191978866f1fc97f523c7dda40a88f7e777
Certificate serial: 019D29CE38C4EEC3AD43315C30457C26EC8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z7dRkZeIZvH8l_Ujx92kCoj353c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.mft
Manifest number: 10FD
Signing time: Thu 26 Mar 2026 11:01:13 +0000
Manifest this update: Thu 26 Mar 2026 11:01:13 +0000
Manifest next update: Fri 27 Mar 2026 11:01:13 +0000
Files and hashes: 1: 0qRIj8FpE8X1N6x5GSHkeAwZpXQ.roa (hash: S2EFxoimo0CCE2MEzDNtzpx1Z0cgiW5Og80JDexN1gg=)
2: z7dRkZeIZvH8l_Ujx92kCoj353c.crl (hash: 6KBWo6ZTCaFSpHodHKDuQlsTTcJCUz8n0d7kChnDAQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.mft
rsync://rpki.ripe.net/repository/DEFAULT/z7dRkZeIZvH8l_Ujx92kCoj353c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:38:c4:ee:c3:ad:43:31:5c:30:45:7c:26:ec:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfb75191978866f1fc97f523c7dda40a88f7e777
Validity
Not Before: Mar 26 11:01:13 2026 GMT
Not After : Mar 27 11:01:13 2026 GMT
Subject: CN=b832f85fdb4863e2156843a051f0ada5075f8579
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b0:db:11:4c:0c:c6:43:72:a6:77:28:ab:bc:
b8:e8:d5:e4:a5:47:d9:ca:ba:01:67:d0:4f:55:7e:
43:bf:1d:87:fb:aa:17:e8:87:8d:fd:22:57:75:b6:
25:1b:03:90:b8:1c:b0:21:9e:b9:c1:98:f7:91:4f:
f9:12:c9:94:6f:d6:ca:06:17:2d:1c:a6:47:35:86:
0c:5d:62:1f:6d:94:b2:b7:ec:bb:f2:8d:6a:a3:14:
a1:a3:c9:39:1c:a1:4f:86:04:26:7a:64:b2:d7:a4:
d1:6f:37:c5:6d:3c:55:a6:d9:f8:14:2a:ee:64:b9:
2a:37:a0:7d:44:58:50:ad:8a:fe:a9:b3:8b:32:63:
f1:78:f1:d4:c0:34:1d:58:34:5c:0f:8c:7e:e9:38:
2c:97:cd:1a:fc:37:2e:de:15:ed:51:35:7a:50:85:
ce:26:08:ce:38:30:93:7f:2a:36:dd:e8:30:8e:ff:
e5:2f:5d:8b:fe:b8:97:ed:8a:63:ee:bc:42:21:01:
aa:e3:e4:11:1d:69:24:13:fb:ab:cb:b8:7b:a7:34:
8e:50:de:a3:da:19:6a:a9:0e:90:d6:63:05:21:fd:
0d:a5:3c:3e:1e:33:9e:e1:05:7a:f9:69:ef:90:fd:
73:e5:64:1e:b9:99:3f:fd:8f:57:cf:8c:3f:3d:73:
08:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:32:F8:5F:DB:48:63:E2:15:68:43:A0:51:F0:AD:A5:07:5F:85:79
X509v3 Authority Key Identifier:
keyid:CF:B7:51:91:97:88:66:F1:FC:97:F5:23:C7:DD:A4:0A:88:F7:E7:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z7dRkZeIZvH8l_Ujx92kCoj353c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:ef:23:66:88:2a:9a:0c:7a:a4:c4:f1:5d:c8:0d:be:f9:ad:
64:7a:f9:af:f3:e9:e9:dc:4b:5b:10:58:d1:0e:d3:93:03:3c:
e5:e0:34:07:0a:49:69:97:df:bd:2a:d8:18:b8:37:f5:65:00:
47:ad:c9:7e:84:62:98:9d:24:e9:91:22:d0:d5:f9:f5:99:68:
4b:bf:a9:9e:c6:a2:9f:04:62:d2:a2:e1:7b:2e:f9:9c:0e:24:
52:5d:c3:f5:66:8f:54:39:cc:83:30:20:d1:72:74:3e:13:45:
83:44:d9:51:88:e0:b8:a1:39:5a:ee:c4:a7:45:73:17:82:fb:
d0:85:37:a4:29:9a:7c:34:e8:3c:65:dc:f5:db:bd:e9:82:31:
18:35:8f:0a:22:4a:53:69:5a:94:4d:73:d5:cb:8b:e7:02:a1:
d8:06:ca:95:a8:44:18:0d:d4:4f:dc:65:d7:09:1d:98:75:72:
2f:3c:a9:f1:5c:69:7d:54:be:9f:e9:a9:df:b7:d0:30:d9:20:
3b:9f:d4:09:66:13:56:5c:b2:12:80:f9:87:66:3e:fb:3b:17:
00:6d:65:a9:9e:da:8e:e1:10:62:23:71:3b:3a:36:a3:04:f8:
34:58:0d:ce:99:ce:87:90:a4:22:c0:49:5f:c6:e9:0a:89:24:
27:05:f9:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:03:51 2026 by rpki-client