Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/3f33d8-cceb-4506-a2ef-c0ca80a05e2a/1/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.mft
File: z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.mft (raw, json)
Hash identifier: oMFcD+LDdv0f1Xk482lEEhjQkT9XFFZoSmtI65ufqoI=
Subject key identifier: 2C:D4:0A:4E:BF:11:E8:9B:98:57:B0:45:27:B5:2D:FD:75:B5:43:77
Authority key identifier: CF:BA:04:3E:1C:4B:52:44:7A:8E:36:7B:BC:13:07:51:9F:A5:FA:E0
Certificate issuer: /CN=cfba043e1c4b52447a8e367bbc1307519fa5fae0
Certificate serial: 019FA372D52D650E8EFFC53E2DD1BC556BAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/3f33d8-cceb-4506-a2ef-c0ca80a05e2a/1/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.mft
Manifest number: 14A5
Signing time: Mon 27 Jul 2026 12:00:39 +0000
Manifest this update: Mon 27 Jul 2026 12:00:39 +0000
Manifest next update: Tue 28 Jul 2026 12:00:39 +0000
Files and hashes: 1: kvrpde2NkZn_MY5z8yP0kUJPKB0.roa (hash: nyyXOBMDEJmgos3/uP4abipU5IsMQkBb228KURVxjm8=)
2: z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.crl (hash: jOLJh1KoX/pMBC3cziqAIMRmWVi0KIuFX8JgmJAjQ7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/3f33d8-cceb-4506-a2ef-c0ca80a05e2a/1/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/3f33d8-cceb-4506-a2ef-c0ca80a05e2a/1/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.mft
rsync://rpki.ripe.net/repository/DEFAULT/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 12:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:72:d5:2d:65:0e:8e:ff:c5:3e:2d:d1:bc:55:6b:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfba043e1c4b52447a8e367bbc1307519fa5fae0
Validity
Not Before: Jul 27 12:00:39 2026 GMT
Not After : Jul 28 12:00:39 2026 GMT
Subject: CN=2cd40a4ebf11e89b9857b04527b52dfd75b54377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:45:09:af:79:27:43:73:d1:6f:f3:80:71:20:
5c:76:10:32:11:a0:48:f6:86:78:4c:59:78:6a:6f:
e8:b9:b8:73:4c:00:a8:a7:86:b1:a8:fb:42:0e:f0:
0d:b4:18:00:9f:59:a6:04:1d:eb:9f:f1:3a:9c:f5:
24:c4:50:99:93:14:1b:d1:9a:dd:16:97:08:88:f7:
00:5d:d5:f1:38:c6:bf:31:09:cc:52:c0:0b:72:32:
a6:f7:51:94:a5:de:6b:c2:59:01:42:bb:15:9d:55:
a6:75:40:63:8e:e5:a8:4b:ad:a0:95:1d:b6:0f:0c:
05:c4:df:40:c6:01:6b:34:ca:55:b2:84:cf:81:6c:
63:2f:19:cb:32:be:3c:eb:08:d5:4e:71:36:3c:86:
d9:5e:96:55:94:1b:e2:3e:63:5b:ed:c7:ec:ab:32:
6f:a6:1d:8c:ae:e8:54:72:d5:91:54:7e:8a:95:09:
e8:6e:71:d1:e5:80:e0:a2:2b:ca:35:f1:71:ce:aa:
d5:35:0d:75:04:9f:d2:6c:fc:94:b7:ea:8e:98:ff:
88:0d:f3:42:ac:cb:4f:95:59:0d:ae:34:bd:2c:03:
3b:5a:f0:bd:f7:90:72:2d:16:4f:59:ae:18:72:cb:
f1:c1:49:dd:05:3a:c9:9f:40:47:57:24:ce:1b:41:
94:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:D4:0A:4E:BF:11:E8:9B:98:57:B0:45:27:B5:2D:FD:75:B5:43:77
X509v3 Authority Key Identifier:
keyid:CF:BA:04:3E:1C:4B:52:44:7A:8E:36:7B:BC:13:07:51:9F:A5:FA:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3f33d8-cceb-4506-a2ef-c0ca80a05e2a/1/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3f33d8-cceb-4506-a2ef-c0ca80a05e2a/1/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:6a:8c:94:87:00:a1:88:ab:7d:10:b7:80:67:9f:42:cf:44:
b6:36:41:46:31:79:37:cf:6d:d9:82:fe:3c:ee:c0:48:73:e1:
38:ad:42:dc:30:b6:f5:3e:51:d7:31:11:33:b1:f9:45:5b:94:
1b:93:bd:80:74:16:14:c2:fc:08:4f:6d:9b:84:46:43:9c:38:
d3:ed:4d:bb:cb:10:30:8c:2b:78:76:45:65:61:d9:1e:3b:0b:
7c:45:e0:ee:65:e2:f1:92:a2:65:58:ad:e5:3e:1d:cb:85:71:
11:15:1c:07:2c:ab:5c:b9:3e:9a:10:a1:35:ae:1f:ef:7e:b5:
91:a7:b4:8d:86:5f:78:f7:66:e0:c6:e8:fc:36:c0:ef:be:da:
b2:15:12:d7:6a:41:06:ef:aa:c1:da:a3:3f:68:77:cd:f4:8b:
e3:a9:50:d2:4d:13:5e:36:74:2d:9f:23:67:4f:ab:c0:23:43:
6c:76:bd:04:4a:67:ed:54:71:40:fc:cd:58:07:8a:76:53:0c:
25:dd:5a:af:80:42:07:cf:03:04:65:a0:25:3e:d9:0e:84:9f:
04:b3:ae:19:c3:85:f8:94:1d:7a:93:b3:6e:09:b3:30:4c:63:
53:3c:4d:c4:4e:44:92:b3:db:1f:72:5d:d5:b7:63:59:f0:d2:
ce:39:56:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 15:07:40 2026 by rpki-client