Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft
File: z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft (raw, json)
Hash identifier: iKzBLfxqaJhmhpImHDNMdgCSArrC2ruL064mW0j/pJ8=
Subject key identifier: 18:08:8E:B2:EB:55:BA:82:3B:8D:2F:6F:ED:31:93:50:82:C5:70:17
Authority key identifier: CF:5B:F0:F1:9A:99:4C:7F:68:6D:55:AB:FC:16:87:5D:39:E5:D4:E2
Certificate issuer: /CN=cf5bf0f19a994c7f686d55abfc16875d39e5d4e2
Certificate serial: 01A11417EB1CD9D09E08578AE878F533641A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z1vw8ZqZTH9obVWr_BaHXTnl1OI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft
Manifest number: 07B0
Signing time: Wed 07 Oct 2026 02:01:14 +0000
Manifest this update: Wed 07 Oct 2026 02:01:14 +0000
Manifest next update: Thu 08 Oct 2026 02:01:14 +0000
Files and hashes: 1: VBl0vhkZ0p5h13VJMHzt2wrsQ7A.roa (hash: VVaZ8MZsUSIufXGhoXhGO0V1DGyl/LodpDCAxeW4mZ0=)
2: voKmqzxnpt1_Etyi16YW_6f_LiA.roa (hash: FSyRyjfIYpd8tAuhdZ0kMGNXftsQsnkKkGGZLUK2+XE=)
3: z1vw8ZqZTH9obVWr_BaHXTnl1OI.crl (hash: iIJAT7pcV+7WZq6eRV65fvjdcnoHf26zfilW5ko4PHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft
rsync://rpki.ripe.net/repository/DEFAULT/z1vw8ZqZTH9obVWr_BaHXTnl1OI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 02:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:14:17:eb:1c:d9:d0:9e:08:57:8a:e8:78:f5:33:64:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf5bf0f19a994c7f686d55abfc16875d39e5d4e2
Validity
Not Before: Oct 7 02:01:14 2026 GMT
Not After : Oct 8 02:01:14 2026 GMT
Subject: CN=18088eb2eb55ba823b8d2f6fed31935082c57017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ff:06:6a:cd:d4:40:e2:59:c6:b3:37:04:47:
32:d9:21:f3:cf:83:3a:81:0e:5c:b8:95:00:34:47:
25:49:b5:e7:4f:17:e8:f3:38:36:e6:dd:37:35:51:
5b:aa:c6:6e:39:bd:32:9f:39:bf:c6:c7:28:26:31:
6f:48:1f:29:e4:85:bb:c3:9e:ec:85:37:fa:10:6e:
08:7c:e5:bd:ab:5e:52:42:e2:6b:d7:37:d7:7d:b5:
f9:69:05:af:69:b3:57:97:ce:5b:1c:26:6f:30:f5:
26:e5:1c:31:fb:da:55:84:a4:09:e2:dd:a8:a3:54:
5c:ee:69:dc:f5:95:f9:1a:e1:9d:f8:c0:5e:c2:fa:
c1:15:06:78:95:15:94:7f:5a:52:2e:0d:04:e9:38:
87:8e:54:d2:d4:44:8d:c2:28:41:39:1a:15:5b:47:
cd:25:81:af:49:36:75:f3:0c:bd:95:b1:b5:ca:2b:
7f:27:23:a4:33:36:e1:69:18:45:c7:f2:60:dc:3d:
2d:33:96:13:e1:bf:90:40:e6:aa:30:6a:24:ba:a7:
05:de:4e:76:b8:a9:40:f9:b6:3b:64:03:9d:d5:52:
7e:ae:0c:9f:2b:a6:94:68:2a:15:3a:6f:d9:50:c0:
e3:64:e4:4e:c5:cc:4c:6e:22:1d:b4:48:b3:eb:a1:
8f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:08:8E:B2:EB:55:BA:82:3B:8D:2F:6F:ED:31:93:50:82:C5:70:17
X509v3 Authority Key Identifier:
keyid:CF:5B:F0:F1:9A:99:4C:7F:68:6D:55:AB:FC:16:87:5D:39:E5:D4:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z1vw8ZqZTH9obVWr_BaHXTnl1OI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:dc:f1:14:5c:90:97:1e:53:8f:8b:2f:a6:05:d8:c3:8d:41:
30:74:19:82:7f:5c:a3:ab:5b:41:52:31:35:11:5b:e9:b0:f5:
64:57:dc:f8:34:e6:21:48:f7:4d:c5:5e:71:fc:6b:93:8f:82:
e1:df:3c:bd:b5:8c:8e:f3:dd:17:26:82:3b:dd:ac:a6:f5:a3:
4f:b4:c6:be:54:be:f2:ee:aa:90:a8:28:61:9c:b8:f7:c2:6b:
e8:63:0f:b8:57:8e:7f:93:23:e6:fb:ea:e5:1d:1c:b8:50:87:
99:6f:96:bd:d3:d3:d6:c0:f2:54:4e:bf:97:7c:c0:27:ea:2d:
bd:6f:b6:0b:fb:77:65:fe:88:74:f1:5a:d1:a9:0c:05:9d:f4:
3d:e0:0f:8a:e5:75:7e:02:cc:3a:db:62:72:32:11:99:3f:cf:
41:82:75:1d:0a:bf:f4:df:c3:15:bc:4d:4f:c9:ff:58:fa:47:
87:d8:65:92:80:7e:e6:28:b1:23:9b:7d:ee:50:38:40:18:44:
c9:2d:62:be:0c:37:0e:53:fe:61:1f:57:39:88:7c:f0:fd:da:
04:2c:21:58:f3:04:5a:50:9e:3f:91:91:70:7b:b0:e6:c3:22:
82:e9:9b:60:56:fb:61:c3:7d:3b:f0:65:2d:0c:3b:f7:59:e7:
3f:a5:34:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 09:35:34 2026 by rpki-client