Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.mft
File: z9s9kEs0RAVGtiQdeJTZMwC8vSg.mft (raw, json)
Hash identifier: yx6IFuQjonVEGPATIIYUl6cZHXgFJ1QLfJO6OR9rtIo=
Subject key identifier: C2:6A:A6:81:BA:F1:83:E8:AE:35:50:05:4B:EB:D0:09:14:B1:5A:54
Authority key identifier: CF:DB:3D:90:4B:34:44:05:46:B6:24:1D:78:94:D9:33:00:BC:BD:28
Certificate issuer: /CN=cfdb3d904b34440546b6241d7894d93300bcbd28
Certificate serial: 019FADF77D3B06FD7991DDFDFF18F5576D25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z9s9kEs0RAVGtiQdeJTZMwC8vSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.mft
Manifest number: 1072
Signing time: Wed 29 Jul 2026 13:01:45 +0000
Manifest this update: Wed 29 Jul 2026 13:01:45 +0000
Manifest next update: Thu 30 Jul 2026 13:01:45 +0000
Files and hashes: 1: BcIjFBUMP6CBeWgUBi0kiP8mMD4.roa (hash: AnrLYQrWg/R3TPt/tXnLy7bKSyCDh8qfOknLsoHKVr0=)
2: tt8_4epx4fUU-t0TnlM9j9Sy8Gc.roa (hash: LFx80Ot89ti4/nAcgN280XkSiewCdAO+iihbkS/s85Y=)
3: z9s9kEs0RAVGtiQdeJTZMwC8vSg.crl (hash: ynG7TvmM3eg0Qp2NNGWA9S6bWZ4KZOidzlirMxMrmGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/z9s9kEs0RAVGtiQdeJTZMwC8vSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 13:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:f7:7d:3b:06:fd:79:91:dd:fd:ff:18:f5:57:6d:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfdb3d904b34440546b6241d7894d93300bcbd28
Validity
Not Before: Jul 29 13:01:45 2026 GMT
Not After : Jul 30 13:01:45 2026 GMT
Subject: CN=c26aa681baf183e8ae3550054bebd00914b15a54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:cf:b6:b1:22:1b:ee:36:f1:18:11:9c:a3:a0:
85:a7:7d:f2:40:97:8c:97:d1:e9:6a:e5:7b:8b:db:
d4:43:01:7d:ac:71:d9:47:7e:72:51:df:1b:45:e3:
1e:f2:fa:a8:4f:16:78:ee:80:41:d7:41:ca:70:57:
13:cc:04:36:2e:28:86:c3:d8:0c:bd:53:50:98:dd:
4a:bc:2b:d9:6a:72:d4:2b:4c:ec:cd:6b:d5:36:fd:
dd:b7:6d:9f:a1:29:e6:e8:08:24:fb:28:10:a8:23:
ea:fa:9b:97:0d:62:65:38:ca:74:e9:37:0d:99:7e:
ad:dd:bf:e0:4b:3b:1a:96:e0:e7:68:67:c9:dc:47:
b2:d5:f1:6a:19:ae:1d:d1:0b:f0:9a:f3:27:55:d9:
e4:a8:10:89:d4:ed:28:a6:8d:79:5e:55:e9:ff:44:
89:6c:42:8c:9b:48:5a:65:02:f6:b2:db:7c:9a:04:
d2:a5:d2:a1:d7:31:81:11:72:3d:3f:7e:2f:51:0f:
fe:50:7e:73:41:ea:7c:08:52:a8:d3:b2:59:6b:f0:
00:7d:ec:4f:2e:09:6e:be:37:45:9e:50:c5:3d:a6:
9b:08:3a:76:95:51:0a:5d:8a:36:6d:02:7b:71:4e:
06:02:27:9e:89:6f:c2:48:96:62:76:1d:2d:a7:f3:
4b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:6A:A6:81:BA:F1:83:E8:AE:35:50:05:4B:EB:D0:09:14:B1:5A:54
X509v3 Authority Key Identifier:
keyid:CF:DB:3D:90:4B:34:44:05:46:B6:24:1D:78:94:D9:33:00:BC:BD:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9s9kEs0RAVGtiQdeJTZMwC8vSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:cf:84:6b:1f:4c:3d:ca:45:89:84:9b:b4:f5:5e:7f:1d:55:
68:6b:f2:f4:1d:50:a1:7b:fb:7f:b8:01:a4:8d:f4:05:5a:03:
52:6a:0d:cf:ab:1e:b7:75:b6:c4:b5:6e:d3:f5:4c:0f:ac:c1:
c2:a4:0a:5a:2c:af:a3:4a:d4:70:77:9f:b9:a7:66:e1:a1:90:
04:03:23:65:df:17:81:f9:0a:4f:c5:47:ad:3c:b7:58:29:dc:
2f:fe:ee:52:7e:0c:93:59:2d:03:71:f1:f9:1d:84:80:bb:0b:
ba:8e:7d:da:97:da:26:29:d6:83:af:42:46:c6:9e:d0:50:68:
cd:4d:b6:06:35:a4:8c:40:ac:8b:90:89:12:41:c0:61:c4:4c:
b7:e1:5d:45:28:70:5a:83:10:78:2b:0c:d5:0c:2c:27:67:00:
da:ea:23:20:a6:26:8d:8e:5c:1c:72:c2:18:45:1c:b2:30:da:
04:1e:5e:b2:82:9a:8d:58:11:f7:3e:25:b4:e5:b7:03:f9:ef:
34:02:04:9f:e4:b3:fc:7c:6e:77:b1:8c:d8:95:ac:e1:11:7e:
4f:8b:3e:cf:f7:a3:7a:9c:61:e4:7a:b6:21:fc:b4:b6:57:f7:
4e:c3:c3:48:e0:42:94:0c:3a:d2:ca:0b:82:64:42:44:7d:20:
f7:47:4d:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 17:41:59 2026 by rpki-client