Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft
File: z1VnEiqIypiJoXmLbJQtzAy8dTs.mft (raw, json)
Hash identifier: IMBh+fUh4E0x6pqtZhdzqJ5JVO5IW29pwXwmqafCcPA=
Subject key identifier: B5:2E:A1:93:E6:E4:4D:B4:1A:23:70:F1:97:CE:DF:DD:38:EF:61:7D
Authority key identifier: CF:55:67:12:2A:88:CA:98:89:A1:79:8B:6C:94:2D:CC:0C:BC:75:3B
Certificate issuer: /CN=cf5567122a88ca9889a1798b6c942dcc0cbc753b
Certificate serial: 019F9090FDFAF6C251395D780D0BDBBD2409
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z1VnEiqIypiJoXmLbJQtzAy8dTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft
Manifest number: 1A12
Signing time: Thu 23 Jul 2026 20:00:48 +0000
Manifest this update: Thu 23 Jul 2026 20:00:48 +0000
Manifest next update: Fri 24 Jul 2026 20:00:48 +0000
Files and hashes: 1: LZY-PqyJIZbUMaW5LyxkZu3B0ME.roa (hash: n7XhC8EKYYjZlJRLiTzAC3ZXaalwMOd93SyUZUX87f0=)
2: ZRWcaFP2lNAESYX_mW0VBxZBTAc.asa (hash: 3/7iwA3UKTDGkjOa2IbhOlBaTEtOKBbyoubltpbAgRk=)
3: tw9opvf0Dc5mqTovtjfu2Csg6vo.roa (hash: /sxGcP7rnMogpd9PU079PAunh+PKIDCxrO0qaczcWVs=)
4: z1VnEiqIypiJoXmLbJQtzAy8dTs.crl (hash: HvYWzMP/984hCXq1XHnwH1DMkeuDDNN3jBqBmuMOVjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/z1VnEiqIypiJoXmLbJQtzAy8dTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 20:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:90:fd:fa:f6:c2:51:39:5d:78:0d:0b:db:bd:24:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf5567122a88ca9889a1798b6c942dcc0cbc753b
Validity
Not Before: Jul 23 20:00:48 2026 GMT
Not After : Jul 24 20:00:48 2026 GMT
Subject: CN=b52ea193e6e44db41a2370f197cedfdd38ef617d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:78:fa:c6:c8:bb:1b:f3:b1:d9:f6:c2:ff:6b:
6b:6f:f1:f3:70:18:39:00:6f:af:59:21:07:b4:4c:
17:bd:4c:82:f5:38:7b:eb:95:e7:b0:dd:60:17:c0:
8d:59:e7:35:06:6c:fa:4e:a6:4f:7d:e1:98:1a:93:
bb:80:f7:67:8b:78:46:34:b4:01:24:6a:a3:7e:f6:
ad:a9:f6:cf:c4:52:5f:dd:b4:72:02:f2:16:44:b8:
89:80:01:37:d1:b0:fb:e9:75:d1:31:71:b0:8c:eb:
88:d1:4e:41:54:21:8c:9d:d1:35:d1:0f:c1:48:0e:
77:05:60:e1:8f:6b:ad:3d:55:68:7c:a2:db:f7:63:
2d:0b:28:06:4e:11:cd:46:22:8b:eb:a7:bc:de:d0:
89:be:b8:54:66:74:51:10:ff:6d:07:2d:cc:8f:cf:
bc:42:65:44:d6:2d:62:d7:89:63:24:a2:16:11:65:
d7:ca:0f:c1:34:2b:6c:87:ac:7a:d5:ca:f2:f9:8c:
d1:c0:dc:e1:66:0a:02:33:0d:80:8e:b8:fe:a5:26:
5c:6b:5a:4a:c1:81:aa:da:cc:d0:25:9d:98:af:59:
2d:05:8f:97:f3:f9:a1:26:8e:8c:59:f6:a2:df:81:
45:3d:c4:29:1d:bb:97:82:d5:b7:63:cd:b7:6b:10:
de:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:2E:A1:93:E6:E4:4D:B4:1A:23:70:F1:97:CE:DF:DD:38:EF:61:7D
X509v3 Authority Key Identifier:
keyid:CF:55:67:12:2A:88:CA:98:89:A1:79:8B:6C:94:2D:CC:0C:BC:75:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z1VnEiqIypiJoXmLbJQtzAy8dTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:b4:b3:14:db:43:c0:cc:e6:dc:df:a1:0f:31:73:e9:cf:ed:
5a:cf:08:c9:0c:cf:f0:8c:e2:b0:5f:0b:6b:1e:e0:46:d0:d8:
38:38:5e:99:ba:f8:ac:d8:dc:5f:a7:d4:58:9e:1c:83:ed:a2:
82:3b:77:c1:b4:f8:e1:36:c7:2b:56:5a:da:ce:98:15:b5:36:
6f:23:19:17:cf:a8:4f:d3:88:d2:3e:5f:fe:47:bb:9b:e5:9e:
f9:6e:78:42:bf:77:4e:6f:fc:81:49:0a:be:c9:12:c5:74:2b:
b6:23:47:c6:f3:fa:4b:73:f7:54:24:77:4b:6d:ea:91:3d:c0:
ef:bd:31:7f:a3:72:41:5c:82:45:53:c5:0e:8a:10:5b:5c:ce:
d6:8b:f4:86:58:8e:08:16:04:b7:94:7c:a6:68:4e:9f:75:fc:
53:16:f1:a7:d7:21:55:6e:a5:6b:93:fe:85:89:ac:af:24:66:
59:14:94:83:65:84:97:a0:b5:dc:0b:0e:bc:f0:51:31:1d:39:
45:15:94:6d:39:ca:3c:87:84:6f:ce:6f:dc:41:dd:42:36:1a:
3b:d2:33:ee:09:50:38:c7:78:c0:37:8a:ab:8d:d9:24:32:7c:
cc:1c:11:85:21:8e:6c:c9:00:22:29:f4:b3:36:35:c1:b5:14:
0f:97:f6:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:11:46 2026 by rpki-client