Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/z0AYX1Us2XUnbANGT1DHpdNRVkw.mft
File: z0AYX1Us2XUnbANGT1DHpdNRVkw.mft (raw, json)
Hash identifier: kVma+iy+sGMr2Pc5n+pcaybvFlCl8rwH9R34765t5Wc=
Subject key identifier: BF:E0:53:AA:32:AE:2B:7F:BC:03:6A:A8:C2:DA:F8:A8:D6:CD:3A:54
Authority key identifier: CF:40:18:5F:55:2C:D9:75:27:6C:03:46:4F:50:C7:A5:D3:51:56:4C
Certificate issuer: /CN=cf40185f552cd975276c03464f50c7a5d351564c
Certificate serial: 019E4EEA78489AB77F08883CAC9A7AFC739F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z0AYX1Us2XUnbANGT1DHpdNRVkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/z0AYX1Us2XUnbANGT1DHpdNRVkw.mft
Manifest number: 023C
Signing time: Fri 22 May 2026 09:00:49 +0000
Manifest this update: Fri 22 May 2026 09:00:49 +0000
Manifest next update: Sat 23 May 2026 09:00:49 +0000
Files and hashes: 1: laiDZxmXdgJH8Of-yAuGAFD0Nks.roa (hash: 29mbTdf0w60u4m7lifJIKwS951c2LKKJ0JQHfZ51kdg=)
2: wPJ_bWcqiT5Ryc2PrLz-RlxJFfk.roa (hash: WhlDU2CEPgF/HK0/49CMTEtZOnQc9y/7MprKkJl/+MA=)
3: z0AYX1Us2XUnbANGT1DHpdNRVkw.crl (hash: x9STpTOCFcxCXeKxACgG8WYiaUcKNbiISFKelkBhO4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/z0AYX1Us2XUnbANGT1DHpdNRVkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/z0AYX1Us2XUnbANGT1DHpdNRVkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/z0AYX1Us2XUnbANGT1DHpdNRVkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 May 2026 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4e:ea:78:48:9a:b7:7f:08:88:3c:ac:9a:7a:fc:73:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf40185f552cd975276c03464f50c7a5d351564c
Validity
Not Before: May 22 09:00:49 2026 GMT
Not After : May 23 09:00:49 2026 GMT
Subject: CN=bfe053aa32ae2b7fbc036aa8c2daf8a8d6cd3a54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:bf:c7:c0:98:24:c7:77:1c:90:8a:62:d0:27:
b3:65:92:3f:a6:42:3f:d5:9b:16:7c:83:90:da:81:
63:09:77:8f:a0:0c:38:b4:61:c8:4c:e4:2c:e9:0c:
97:2e:6a:35:c7:ce:c8:13:c7:42:72:1f:e7:ee:89:
87:79:b3:c4:f7:39:c3:dc:7f:43:6a:26:a4:5e:31:
16:b6:81:c5:ac:b8:98:9f:56:ad:f2:0b:50:40:dc:
3e:e6:dd:df:d5:c0:8d:0f:0b:47:30:6c:9d:f8:30:
21:c3:1b:fa:a6:b2:d1:36:36:1d:fe:e5:31:35:e4:
29:93:5a:43:0d:1a:5e:e6:c2:42:16:d7:43:0e:5f:
f5:c4:65:5d:4c:4b:a4:51:b3:3e:3d:04:62:a4:cf:
6e:5a:09:d2:af:cc:3d:86:ef:8b:2a:d5:59:33:32:
b9:15:37:87:05:df:63:23:7a:d3:9a:ab:2a:05:6f:
6e:52:58:e3:25:bf:2f:7e:fb:43:68:3a:dd:89:54:
2b:91:49:16:f9:1c:81:88:3e:dd:b5:f2:e8:ca:8e:
d9:9e:97:c1:88:b5:63:ab:ed:f1:71:f9:e3:d7:e6:
33:6f:26:53:63:ba:05:99:49:70:06:7b:7e:97:42:
5c:5b:da:7a:16:10:44:5c:fe:46:da:9e:f9:59:7d:
ad:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:E0:53:AA:32:AE:2B:7F:BC:03:6A:A8:C2:DA:F8:A8:D6:CD:3A:54
X509v3 Authority Key Identifier:
keyid:CF:40:18:5F:55:2C:D9:75:27:6C:03:46:4F:50:C7:A5:D3:51:56:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z0AYX1Us2XUnbANGT1DHpdNRVkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/z0AYX1Us2XUnbANGT1DHpdNRVkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/z0AYX1Us2XUnbANGT1DHpdNRVkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:22:4d:f4:d4:81:35:b4:d2:b9:1b:53:79:04:4d:56:94:f6:
d1:46:48:18:f6:89:e0:db:5b:e1:2a:36:77:cb:35:96:75:86:
e0:d5:ec:83:75:52:5a:a9:ee:0f:12:5f:e0:2a:44:16:2a:8d:
84:77:15:18:3c:36:ea:2f:06:c8:ff:37:07:35:9e:f6:a0:82:
7d:98:b7:bd:21:5e:69:12:92:37:cd:66:05:27:80:dd:5b:11:
b5:b4:01:7c:8b:41:f2:eb:49:07:b7:f1:d5:61:16:7e:f6:15:
5b:6a:b6:18:96:1c:e0:2c:97:87:71:e9:b3:aa:ea:eb:b8:4c:
be:38:cf:75:b6:4b:4e:8a:cb:a1:6f:8d:ff:3f:21:05:90:f0:
cf:58:8a:a5:29:28:d6:11:73:5a:91:ee:ad:e3:46:c1:aa:45:
ab:4d:af:28:36:fe:ad:47:32:00:c2:0b:32:25:0b:92:8b:06:
97:d9:d5:f1:0f:c1:ea:07:ce:0f:06:92:34:71:c8:7e:f0:8b:
ac:3d:a5:f4:8b:04:9e:99:c1:0e:dc:1a:46:22:ae:53:41:74:
f1:60:43:95:ab:6a:9e:11:48:b7:76:48:53:03:1c:d7:b5:4f:
dc:92:61:fa:91:44:04:04:d8:07:2c:c5:a8:4e:2f:33:57:31:
f5:13:86:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 15:07:30 2026 by rpki-client