Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/3f33d8-cceb-4506-a2ef-c0ca80a05e2a/1/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.mft
File: z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.mft (raw, json)
Hash identifier: 80VB+1Jm39+dFjbb7XrmHZeQB3gwLtSm5y+lu5vjEG8=
Subject key identifier: 43:23:9D:58:24:19:5E:1D:82:87:1B:CB:4C:CA:2C:84:4A:CC:22:0F
Authority key identifier: CF:BA:04:3E:1C:4B:52:44:7A:8E:36:7B:BC:13:07:51:9F:A5:FA:E0
Certificate issuer: /CN=cfba043e1c4b52447a8e367bbc1307519fa5fae0
Certificate serial: 01A18DF902BADA6D10FF0F378FB5B7F56CFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/3f33d8-cceb-4506-a2ef-c0ca80a05e2a/1/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.mft
Manifest number: 15A3
Signing time: Fri 30 Oct 2026 18:01:08 +0000
Manifest this update: Fri 30 Oct 2026 18:01:08 +0000
Manifest next update: Sat 31 Oct 2026 18:01:08 +0000
Files and hashes: 1: kvrpde2NkZn_MY5z8yP0kUJPKB0.roa (hash: nyyXOBMDEJmgos3/uP4abipU5IsMQkBb228KURVxjm8=)
2: z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.crl (hash: bJf7xIwOhVp47z6Fhalg+FOFxPHY4Upj+FHZw3RcEI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/3f33d8-cceb-4506-a2ef-c0ca80a05e2a/1/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/3f33d8-cceb-4506-a2ef-c0ca80a05e2a/1/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.mft
rsync://rpki.ripe.net/repository/DEFAULT/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8d:f9:02:ba:da:6d:10:ff:0f:37:8f:b5:b7:f5:6c:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfba043e1c4b52447a8e367bbc1307519fa5fae0
Validity
Not Before: Oct 30 18:01:08 2026 GMT
Not After : Oct 31 18:01:08 2026 GMT
Subject: CN=43239d5824195e1d82871bcb4cca2c844acc220f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:75:4e:09:ba:0b:b6:e4:67:7a:75:60:7b:23:
61:b3:09:0c:28:e7:a0:56:aa:f9:d3:34:31:43:82:
6e:9f:ab:86:51:c6:55:fc:cb:f6:ed:15:38:af:05:
3e:3f:a0:3b:7a:bb:31:d6:3b:70:8f:ba:5e:9c:f2:
e9:4b:a3:9b:8d:a4:a9:11:27:cb:b8:f4:dd:bb:1b:
7b:a5:d5:13:30:ae:c6:6b:31:a8:a3:67:00:fd:22:
9f:33:80:a7:1d:99:18:4d:8a:c4:47:8b:98:d1:59:
45:c5:0a:59:1b:d7:9d:3b:3d:06:90:90:06:00:f7:
23:62:06:3d:29:63:32:96:1b:a4:5b:09:a4:7f:bc:
28:0c:de:65:c8:14:88:e3:8e:1a:77:85:84:7a:e1:
ff:21:f7:5a:80:8c:5e:ca:bf:6e:a0:89:3a:ac:f2:
f8:a4:cc:34:18:84:63:1e:5d:47:86:fa:67:09:92:
42:cd:3f:a2:5f:e7:85:8a:aa:ff:ee:cc:63:45:48:
b0:65:ff:5e:01:6d:dc:3b:db:d1:32:13:c7:21:68:
bc:26:7c:a4:4a:a9:6f:6b:b7:a0:84:a5:e0:02:8c:
3c:ae:d8:f6:4e:ec:a6:75:ba:07:ab:81:0e:cd:e8:
21:b5:34:11:d1:5e:61:58:43:8b:2a:82:28:c2:5a:
c4:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:23:9D:58:24:19:5E:1D:82:87:1B:CB:4C:CA:2C:84:4A:CC:22:0F
X509v3 Authority Key Identifier:
keyid:CF:BA:04:3E:1C:4B:52:44:7A:8E:36:7B:BC:13:07:51:9F:A5:FA:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3f33d8-cceb-4506-a2ef-c0ca80a05e2a/1/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3f33d8-cceb-4506-a2ef-c0ca80a05e2a/1/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:10:c5:37:eb:72:da:08:e8:ee:b2:9c:ab:f4:5a:22:61:4d:
11:ee:ae:c0:72:e5:33:f6:a0:f3:55:56:a2:bb:1e:35:91:d8:
7d:3e:09:2b:c7:30:98:79:fc:7e:bb:57:9c:ff:8a:16:19:ae:
c7:cf:45:78:36:16:b9:5e:a8:cf:88:2b:0d:b1:21:cd:48:ef:
5b:2a:93:c6:9f:df:3b:76:29:aa:95:02:10:ba:b1:58:8e:f5:
62:fa:fe:8e:5c:9f:1c:60:ab:f6:9f:2f:66:34:fd:42:0b:3a:
6d:1e:d5:11:0b:12:cf:d3:b0:eb:78:05:a9:81:99:d6:39:4d:
26:85:c5:2f:85:61:f2:bd:cc:72:cf:74:02:a2:a9:6b:34:fb:
cc:2b:1a:2e:9a:f0:22:6c:70:fc:00:dc:b8:19:98:73:92:72:
8f:ba:26:a0:9f:7b:47:f4:6a:6a:6d:63:3f:4b:9a:59:04:20:
d8:07:dc:03:4b:4d:f6:08:53:54:5f:78:ed:5a:94:f9:71:ff:
f2:dc:32:82:1d:5a:0f:11:a1:ad:25:45:a0:68:35:1a:de:a2:
24:37:60:bc:bd:5e:f4:bb:ef:f0:df:54:ae:d8:2a:83:3f:4f:
f4:f7:85:ef:b5:fc:13:6e:fd:78:9b:0b:21:80:19:63:af:87:
7e:bd:19:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 02:18:01 2026 by rpki-client