Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/Z8-tfCTlxrSvWBw97AueL7DBMcQ.mft
File: Z8-tfCTlxrSvWBw97AueL7DBMcQ.mft (raw, json)
Hash identifier: QkiqqHS1KNwt+pBjM+WroQqxp8T6kVWgRjlcOahqCUc=
Subject key identifier: 4E:0A:80:4E:E2:C5:98:B6:4A:A8:C8:BD:32:E7:F3:62:88:10:B4:C9
Authority key identifier: 67:CF:AD:7C:24:E5:C6:B4:AF:58:1C:3D:EC:0B:9E:2F:B0:C1:31:C4
Certificate issuer: /CN=67cfad7c24e5c6b4af581c3dec0b9e2fb0c131c4
Certificate serial: 019F9EF2179B4808EE0B52CF7FE9D6FAC79F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8-tfCTlxrSvWBw97AueL7DBMcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/Z8-tfCTlxrSvWBw97AueL7DBMcQ.mft
Manifest number: 47
Signing time: Sun 26 Jul 2026 15:01:33 +0000
Manifest this update: Sun 26 Jul 2026 15:01:33 +0000
Manifest next update: Mon 27 Jul 2026 15:01:33 +0000
Files and hashes: 1: 6LtQiSb78nDyjbmEiYfBW6K94lQ.roa (hash: J7MI4GNzgAtUYP9XKuJ4vcnnaKJ8K4FoSSPzAm0y+FY=)
2: 7HjQZcnyPGzTBbrXVDpIzGTxTAQ.roa (hash: evgW7hhbeIzJbe2wQVkcrOjUE5xE8nomQXZ1TrKMAc0=)
3: 8yzRL6UTfoY2UAWRhFfcY21aiw8.roa (hash: 9a1PcOeE8ZLKSk+KrqFMb26rK/NZVC1SSfxLpvqFg4A=)
4: PKOV_kT6uGHhTn2-6WDHVB3hpzY.roa (hash: FXsrCUeyVdza65q3avYmUJtFZh5GIUafzTy0U+HiLQE=)
5: TAhJXyuaU-go54rMGjVHPRVQsF8.roa (hash: T2ctTiMfso19o9sCdUv1gT123PCz7JSAkNRApoDkkn8=)
6: Z8-tfCTlxrSvWBw97AueL7DBMcQ.crl (hash: lGUX8BnqeshNh/3YbpL96wgpKfaOItHQvPpCBAzXI5g=)
7: cP1pRSbGF2VydLggt4WcH_Io63k.roa (hash: rej2g9WtxITjbtIMhQNau2HJc/7FPh2+SNTgiY69p1A=)
8: lciHL8Z1BSH4tJKSK6v4VIpHQQQ.roa (hash: n7tikthFcj7M5HJ14fYaGIRaUsjAfU/R0n+U8AFO1ms=)
9: pKcn8ZOkERD-XLZgPeULEQ2qPoY.roa (hash: TDT0jcowVii6rblfICInjysSX3+/qS6/908mLzL3IDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/Z8-tfCTlxrSvWBw97AueL7DBMcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/Z8-tfCTlxrSvWBw97AueL7DBMcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z8-tfCTlxrSvWBw97AueL7DBMcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9e:f2:17:9b:48:08:ee:0b:52:cf:7f:e9:d6:fa:c7:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67cfad7c24e5c6b4af581c3dec0b9e2fb0c131c4
Validity
Not Before: Jul 26 15:01:33 2026 GMT
Not After : Jul 27 15:01:33 2026 GMT
Subject: CN=4e0a804ee2c598b64aa8c8bd32e7f3628810b4c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:2c:68:e6:5f:f8:4c:d8:8a:44:f4:59:d8:95:
a6:71:c2:ab:44:81:af:47:94:e8:dd:68:80:15:14:
8a:a1:18:c2:13:6d:b6:1f:e2:e6:19:70:40:18:a7:
5b:72:de:08:1f:da:a6:31:64:7c:a8:7e:67:54:16:
77:98:a7:ff:d0:1a:3b:a7:44:c2:68:a9:41:f3:e3:
07:2f:e4:05:dd:83:ea:d9:4a:55:b0:c7:76:e7:f8:
8a:2a:d7:fc:b2:c1:9c:c1:ca:79:4d:52:aa:62:f3:
29:e0:cf:2a:67:04:40:52:f4:45:5b:e2:f1:a6:f6:
e5:4a:6c:76:aa:9a:97:ef:5a:ed:8c:b4:cb:c9:8e:
58:a8:8b:8f:61:e9:41:43:59:86:71:40:20:da:09:
e8:a0:a8:7b:9f:1a:8d:39:19:27:7e:39:f4:92:c8:
53:dc:3e:c3:3e:ec:8f:87:9c:a9:d2:e9:3f:db:83:
e4:4b:dd:72:04:8d:f7:40:de:83:3c:f3:10:56:25:
ef:41:85:5c:85:5c:97:b2:7b:72:5a:11:a4:6e:35:
e9:97:7a:21:fb:d2:3f:b6:5f:cf:b5:9c:57:4d:ec:
cd:f0:08:0b:be:22:5c:78:85:d1:ee:e9:b2:bd:2f:
e0:15:59:27:96:0f:d1:1f:52:4f:36:ef:da:b2:0c:
e2:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:0A:80:4E:E2:C5:98:B6:4A:A8:C8:BD:32:E7:F3:62:88:10:B4:C9
X509v3 Authority Key Identifier:
keyid:67:CF:AD:7C:24:E5:C6:B4:AF:58:1C:3D:EC:0B:9E:2F:B0:C1:31:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8-tfCTlxrSvWBw97AueL7DBMcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/Z8-tfCTlxrSvWBw97AueL7DBMcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/Z8-tfCTlxrSvWBw97AueL7DBMcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:32:6f:9b:ca:7a:17:58:85:75:60:78:6b:71:99:33:e7:10:
c8:a5:26:e0:c3:49:8e:0a:f0:af:fd:85:97:a4:1e:c5:5b:cd:
47:5c:0b:02:fa:ea:27:59:83:4e:4f:15:a8:d0:cf:76:d0:3d:
93:09:ba:4a:c3:2a:d8:f5:da:2d:2a:ed:a3:14:fe:c3:61:c6:
5a:a4:20:1f:1d:23:4b:75:6b:7d:80:56:29:fa:06:d5:47:8c:
43:b7:da:75:34:b4:8e:9f:d3:a9:16:40:10:39:7a:83:fb:7f:
a3:59:c5:f1:95:dc:50:db:7d:60:48:30:78:df:76:70:e8:2d:
f0:b5:c4:c6:af:15:a9:ad:c7:a9:e5:5d:d1:71:c7:79:90:07:
95:63:41:b6:c4:d7:89:ba:57:d7:88:0d:25:91:84:28:66:ab:
56:6a:92:ff:0b:a5:21:ae:54:ba:95:2d:23:86:c7:72:f2:0f:
21:bc:cc:6a:05:2c:76:cf:ca:43:77:4a:0e:41:ed:a9:b2:e3:
76:35:84:a2:1c:c7:b9:9d:79:ea:74:a0:2c:6d:86:7b:e8:1c:
d8:1f:42:99:d5:31:83:05:2b:4d:c2:ae:b6:56:94:df:22:70:
fb:55:c9:6c:71:47:e9:3a:86:52:c2:63:db:46:ac:01:63:ae:
72:ea:60:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 18:50:43 2026 by rpki-client