Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft
File: z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft (raw, json)
Hash identifier: iJmAzOkXEoR5KZtut/ewaGmsG4MxC0k4GWIjV4Qr6Hc=
Subject key identifier: 07:AB:93:4C:48:E4:DB:6C:BD:3A:A3:51:66:EC:9E:FF:4E:00:57:0E
Authority key identifier: CF:5B:F0:F1:9A:99:4C:7F:68:6D:55:AB:FC:16:87:5D:39:E5:D4:E2
Certificate issuer: /CN=cf5bf0f19a994c7f686d55abfc16875d39e5d4e2
Certificate serial: 019F145386E9DDBE44CCDED3E8146726C252
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z1vw8ZqZTH9obVWr_BaHXTnl1OI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft
Manifest number: 06A7
Signing time: Mon 29 Jun 2026 17:00:46 +0000
Manifest this update: Mon 29 Jun 2026 17:00:46 +0000
Manifest next update: Tue 30 Jun 2026 17:00:46 +0000
Files and hashes: 1: VBl0vhkZ0p5h13VJMHzt2wrsQ7A.roa (hash: VVaZ8MZsUSIufXGhoXhGO0V1DGyl/LodpDCAxeW4mZ0=)
2: voKmqzxnpt1_Etyi16YW_6f_LiA.roa (hash: FSyRyjfIYpd8tAuhdZ0kMGNXftsQsnkKkGGZLUK2+XE=)
3: z1vw8ZqZTH9obVWr_BaHXTnl1OI.crl (hash: V7VDlNHwQ3fj4nYfbRuh72klIDh5NRAFbKaf9jVOOw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft
rsync://rpki.ripe.net/repository/DEFAULT/z1vw8ZqZTH9obVWr_BaHXTnl1OI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 14:12:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:14:53:86:e9:dd:be:44:cc:de:d3:e8:14:67:26:c2:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf5bf0f19a994c7f686d55abfc16875d39e5d4e2
Validity
Not Before: Jun 29 17:00:46 2026 GMT
Not After : Jun 30 17:00:46 2026 GMT
Subject: CN=07ab934c48e4db6cbd3aa35166ec9eff4e00570e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6f:5e:60:52:fa:5e:ec:7e:01:ba:ee:e8:ce:
53:34:71:43:93:ff:8b:53:d0:5e:a7:44:bd:0c:93:
bc:e2:14:b3:c7:bd:04:5d:4c:49:60:61:e1:ac:6a:
93:53:38:28:5b:da:64:06:eb:7c:ee:bf:45:59:e8:
8b:48:66:39:9a:a5:55:01:68:e3:b0:ee:1c:ea:6b:
59:91:39:57:26:7b:52:2d:47:97:c0:24:58:23:65:
1b:28:aa:ce:dc:d3:57:f8:77:c2:01:aa:fc:af:e9:
9a:4f:9f:f9:cc:d4:06:92:77:af:a2:91:1c:be:db:
a9:61:91:c3:9c:ff:d7:45:83:95:15:6d:c5:aa:f2:
8a:cd:56:83:b5:e2:75:51:48:cc:89:c3:81:26:01:
03:a7:6b:ad:a1:dd:7c:aa:2e:2d:8f:6a:33:52:1e:
65:57:ec:46:6e:51:32:79:dc:fb:76:1a:8b:0f:27:
d5:3c:21:f9:13:26:ee:69:6e:e8:43:45:37:ff:a4:
6e:1d:b6:4c:19:0a:e2:d8:67:69:39:03:33:0c:36:
b4:e1:19:1d:b2:7b:ab:0b:1c:ed:0b:69:ad:dc:c3:
32:77:93:97:84:53:3f:2b:dc:7f:fc:b5:ca:6c:f5:
86:7d:1d:20:46:0e:d5:f0:52:9d:52:3a:33:68:de:
77:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:AB:93:4C:48:E4:DB:6C:BD:3A:A3:51:66:EC:9E:FF:4E:00:57:0E
X509v3 Authority Key Identifier:
keyid:CF:5B:F0:F1:9A:99:4C:7F:68:6D:55:AB:FC:16:87:5D:39:E5:D4:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z1vw8ZqZTH9obVWr_BaHXTnl1OI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:36:d1:4b:4d:99:f6:76:6f:87:e8:c1:c5:50:71:e3:4d:d7:
4c:a2:a9:c3:4c:67:b7:61:a6:d4:28:1a:50:d2:f8:a5:7c:29:
42:be:3f:ff:02:53:06:71:03:7d:d1:fa:b6:a4:9b:20:2c:5a:
90:ad:88:84:32:c4:e8:0c:01:be:fa:cc:6b:ce:3a:de:33:1a:
d2:53:89:ea:96:d0:d5:ba:1c:2b:65:82:19:f9:b6:05:18:8f:
24:84:ac:df:0e:fd:bd:ed:b6:54:3f:d7:48:c1:57:27:4f:ad:
a3:d8:75:46:5a:34:c9:bc:13:ae:06:d2:9f:42:e7:0c:eb:b6:
24:67:d5:49:7a:e0:79:5e:57:44:92:28:c8:45:d0:d7:6b:a8:
3c:ce:f0:e9:db:08:f0:9f:d5:15:ee:d6:3e:02:9a:0e:4b:8a:
34:13:88:96:b5:24:dd:e3:f2:f2:7f:18:c7:96:a2:1e:3d:c3:
7a:9d:09:71:e7:1c:ab:8d:43:06:85:1a:f0:80:07:36:af:24:
6a:34:48:05:bb:cc:f7:9b:f0:2f:e9:17:92:aa:8f:18:46:01:
01:b0:70:14:3b:15:23:ef:39:64:9b:65:58:b9:4e:42:d3:12:
1e:71:e5:00:49:b8:3f:72:03:bf:52:cd:b4:37:a7:27:75:b1:
c3:ef:25:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 22:38:43 2026 by rpki-client