Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/34471f-0baf-433b-b86a-acd742fe0986/1/z6jgKeXx6FsRFss9M8haObsslNE.mft
File: z6jgKeXx6FsRFss9M8haObsslNE.mft (raw, json)
Hash identifier: 5opuLilxvYBOelrS7hFbkD0srDXvwgD7QK8GhVgZCpg=
Subject key identifier: F1:7A:10:6A:3E:F6:47:DA:F1:9B:23:89:E2:65:3F:E1:0F:68:9F:FB
Authority key identifier: CF:A8:E0:29:E5:F1:E8:5B:11:16:CB:3D:33:C8:5A:39:BB:2C:94:D1
Certificate issuer: /CN=cfa8e029e5f1e85b1116cb3d33c85a39bb2c94d1
Certificate serial: 019F935B8D85F6FC1C3298B2419B699F73F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z6jgKeXx6FsRFss9M8haObsslNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/34471f-0baf-433b-b86a-acd742fe0986/1/z6jgKeXx6FsRFss9M8haObsslNE.mft
Manifest number: 41
Signing time: Fri 24 Jul 2026 09:01:18 +0000
Manifest this update: Fri 24 Jul 2026 09:01:18 +0000
Manifest next update: Sat 25 Jul 2026 09:01:18 +0000
Files and hashes: 1: O-XgWvQ8KfMzfm8gFlpAQg2Xmkk.roa (hash: +cSVPrrZGE0RG6ua3kDeP5fHxWhOEOv6pgh3gSfnwNo=)
2: lUVl9Benklpiw6Ylck0dSuxSo-Q.roa (hash: p2ACt84JdaKlgpHAL/YLec1OeIXMp63TXCMnSlAEvAw=)
3: oaqhAz8r6QOEtVOyS7uoPCODlHc.roa (hash: c6tnbsMZPWMkjfAiaVIbYOOTReRqsQcVwvFXobf5RrI=)
4: z6jgKeXx6FsRFss9M8haObsslNE.crl (hash: 0qptZnfFmGfVjTb+tbj+o/fFVtM9DbQEOC7FJcCYjFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/34471f-0baf-433b-b86a-acd742fe0986/1/z6jgKeXx6FsRFss9M8haObsslNE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/34471f-0baf-433b-b86a-acd742fe0986/1/z6jgKeXx6FsRFss9M8haObsslNE.mft
rsync://rpki.ripe.net/repository/DEFAULT/z6jgKeXx6FsRFss9M8haObsslNE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:8d:85:f6:fc:1c:32:98:b2:41:9b:69:9f:73:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfa8e029e5f1e85b1116cb3d33c85a39bb2c94d1
Validity
Not Before: Jul 24 09:01:18 2026 GMT
Not After : Jul 25 09:01:18 2026 GMT
Subject: CN=f17a106a3ef647daf19b2389e2653fe10f689ffb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:96:63:b7:ca:31:e3:6f:54:54:8c:ad:fb:d6:
5f:10:66:8c:d0:27:4c:6b:a2:8f:df:a8:d5:8c:54:
3c:b9:cd:fa:66:06:84:2c:fe:5f:ca:a7:92:40:47:
b2:4e:64:af:5a:5a:92:2c:9b:c2:3f:6e:61:a7:a6:
7b:e3:90:6b:23:6b:58:c9:5f:bc:bb:6b:d0:c0:d3:
15:20:5a:17:31:a3:8c:97:7c:67:0d:02:5b:9d:ad:
ca:73:4b:d4:d1:aa:b6:48:fe:b6:58:e7:b3:0f:c2:
83:14:3d:e3:40:78:db:0d:4f:c8:7b:2c:ae:f9:8b:
b9:b7:45:8b:96:90:c1:2b:79:55:4b:99:00:c1:85:
ab:17:07:c1:3a:45:f5:27:54:e3:0c:9a:1e:b8:bd:
92:c5:56:22:6a:2a:f4:2c:75:b8:cc:c3:d5:76:11:
c2:40:60:3c:59:86:bf:a1:c4:f0:98:06:94:34:1e:
6d:0c:af:21:b8:d3:f1:c7:b9:57:e1:3b:ea:24:f5:
4f:92:1a:71:5e:91:a1:d4:2e:de:27:47:08:4f:79:
0d:59:fb:43:15:7e:fb:44:71:e3:fd:e2:9b:a3:ee:
1d:04:c1:93:b9:49:61:d8:e0:8d:5a:6f:96:a5:26:
7f:d7:59:55:e4:14:57:aa:6e:72:54:09:58:71:c7:
49:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:7A:10:6A:3E:F6:47:DA:F1:9B:23:89:E2:65:3F:E1:0F:68:9F:FB
X509v3 Authority Key Identifier:
keyid:CF:A8:E0:29:E5:F1:E8:5B:11:16:CB:3D:33:C8:5A:39:BB:2C:94:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z6jgKeXx6FsRFss9M8haObsslNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/34471f-0baf-433b-b86a-acd742fe0986/1/z6jgKeXx6FsRFss9M8haObsslNE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/34471f-0baf-433b-b86a-acd742fe0986/1/z6jgKeXx6FsRFss9M8haObsslNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:36:ea:5c:a2:64:b4:40:6b:3d:92:2a:51:f7:bd:1f:a2:39:
e5:78:84:a7:52:65:98:c5:b7:96:a9:a2:80:9d:27:e2:f9:fc:
35:06:c5:cc:5f:77:87:2e:20:52:f7:fc:c9:e7:d9:0a:0a:8e:
92:65:ff:38:28:15:28:f7:9d:86:37:32:9f:12:51:e9:ff:97:
9f:de:78:5d:87:32:7a:10:f1:42:5b:1e:f5:1a:14:cd:9a:a9:
c0:e9:a3:43:36:08:0d:b3:67:e5:e5:0f:04:d5:46:ed:09:13:
32:89:57:07:03:2b:50:73:53:72:1a:8f:32:83:a9:45:f1:6a:
cb:f3:4e:ab:0e:b3:9e:e2:c3:9e:d3:d7:8b:e0:04:7f:1a:de:
0a:67:b7:d6:57:5d:34:78:a5:48:53:ef:92:f2:8b:0a:ec:ae:
1b:f2:59:f2:f4:b5:a7:d4:86:83:77:ad:40:e5:01:83:e1:fd:
41:99:cd:34:f8:c9:2d:0c:1a:42:e2:89:6e:9d:40:d7:ad:58:
62:7f:51:56:ca:c7:49:b7:d7:43:29:41:38:ff:67:b0:e5:0f:
59:21:46:01:23:d8:0c:ae:74:b0:ba:05:1a:ae:7d:37:c9:79:
4c:bb:61:5b:34:17:5c:ff:a5:5c:39:0c:64:8a:2b:c5:e0:68:
6c:4b:31:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:48:34 2026 by rpki-client