Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/z0AYX1Us2XUnbANGT1DHpdNRVkw.mft
File: z0AYX1Us2XUnbANGT1DHpdNRVkw.mft (raw, json)
Hash identifier: WZaeawgKujjFkmDppYnKS8tbj+RSkIocBZc2HmeY9p0=
Subject key identifier: E3:A6:52:47:F0:D2:D1:70:19:05:49:EE:F9:77:01:FD:2B:23:25:1C
Authority key identifier: CF:40:18:5F:55:2C:D9:75:27:6C:03:46:4F:50:C7:A5:D3:51:56:4C
Certificate issuer: /CN=cf40185f552cd975276c03464f50c7a5d351564c
Certificate serial: 01A020565412433F2031D74F4BE465055A91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z0AYX1Us2XUnbANGT1DHpdNRVkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/z0AYX1Us2XUnbANGT1DHpdNRVkw.mft
Manifest number: 032D
Signing time: Thu 20 Aug 2026 18:02:03 +0000
Manifest this update: Thu 20 Aug 2026 18:02:03 +0000
Manifest next update: Fri 21 Aug 2026 18:02:03 +0000
Files and hashes: 1: laiDZxmXdgJH8Of-yAuGAFD0Nks.roa (hash: 29mbTdf0w60u4m7lifJIKwS951c2LKKJ0JQHfZ51kdg=)
2: wPJ_bWcqiT5Ryc2PrLz-RlxJFfk.roa (hash: WhlDU2CEPgF/HK0/49CMTEtZOnQc9y/7MprKkJl/+MA=)
3: z0AYX1Us2XUnbANGT1DHpdNRVkw.crl (hash: JeszUbtzSvl6Vxi1eXY5n9dNVOy16fDlMHJEjg4+iKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/z0AYX1Us2XUnbANGT1DHpdNRVkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/z0AYX1Us2XUnbANGT1DHpdNRVkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/z0AYX1Us2XUnbANGT1DHpdNRVkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 13:32:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:20:56:54:12:43:3f:20:31:d7:4f:4b:e4:65:05:5a:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf40185f552cd975276c03464f50c7a5d351564c
Validity
Not Before: Aug 20 18:02:03 2026 GMT
Not After : Aug 21 18:02:03 2026 GMT
Subject: CN=e3a65247f0d2d170190549eef97701fd2b23251c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:6f:33:d6:b6:0f:81:ba:24:cd:8a:ef:0d:3a:
8c:f9:02:84:64:8a:7d:50:41:e4:a5:93:d3:38:b4:
a4:9f:a6:48:4b:f4:82:9e:37:47:cb:c9:1a:c4:5f:
90:2b:1c:97:87:77:62:2d:b3:bb:5a:2e:66:8d:34:
45:c8:80:2b:2a:19:4e:f2:71:14:8a:92:8e:60:63:
f7:3e:9e:8b:22:dc:32:66:aa:42:ea:d6:49:0e:f2:
79:7d:8c:f3:b9:4a:46:81:78:e9:33:e6:c3:73:15:
10:d0:4d:36:be:71:6d:75:97:fd:0e:01:37:48:ff:
80:31:45:b9:f1:fa:ff:c6:4d:9f:9e:61:94:f8:ce:
aa:d5:b9:b3:27:95:c0:44:5d:f3:07:1c:75:a5:5c:
82:f7:60:03:52:0d:9e:ed:d0:c2:ae:46:d2:9b:ea:
c5:4d:83:31:e6:53:8f:2d:f1:2a:d9:bb:ea:85:6c:
6a:61:5d:a6:a9:55:33:09:17:3a:f2:de:02:d4:51:
ed:18:9d:05:54:51:00:9a:1e:26:4b:5d:bb:fc:0e:
63:d2:0a:78:76:b2:cf:e9:53:cb:a4:d9:b2:be:09:
78:3b:b2:95:eb:0b:73:a4:50:76:5f:43:36:05:a8:
35:3b:61:9f:1b:cd:06:27:92:f8:17:e0:c8:a4:c0:
8a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:A6:52:47:F0:D2:D1:70:19:05:49:EE:F9:77:01:FD:2B:23:25:1C
X509v3 Authority Key Identifier:
keyid:CF:40:18:5F:55:2C:D9:75:27:6C:03:46:4F:50:C7:A5:D3:51:56:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z0AYX1Us2XUnbANGT1DHpdNRVkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/z0AYX1Us2XUnbANGT1DHpdNRVkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/z0AYX1Us2XUnbANGT1DHpdNRVkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:89:ac:08:a0:f2:0f:71:06:bb:e9:e5:08:66:42:15:3a:e2:
3c:be:99:01:53:90:c1:f0:ba:32:c0:a1:28:99:44:d8:76:b1:
c4:87:16:f1:f2:44:c2:27:bf:3d:30:78:ec:18:69:f1:2a:4c:
90:88:96:dd:e4:51:91:71:91:d8:4d:4d:7d:37:77:23:8d:2f:
e0:74:14:58:b7:a6:27:48:68:06:9d:4a:9c:b6:1a:06:7e:d4:
37:55:a9:83:2f:e9:84:08:cc:dd:4e:f2:c8:00:9e:97:32:97:
e3:a2:25:52:22:ee:dc:c3:7f:16:eb:43:6a:c3:f5:1c:b8:f0:
a4:3e:c0:c7:54:70:2e:fd:df:50:9e:3c:ac:9c:17:ee:7a:7d:
fd:34:67:90:28:b1:c6:da:63:02:0c:08:73:b7:de:f8:cc:e2:
3d:b6:59:b3:88:c2:1f:2d:a0:a8:b7:d8:86:d5:5e:65:98:86:
00:52:e2:7a:13:7d:3c:39:6b:64:c8:e5:37:ed:a3:06:90:3b:
99:53:ed:db:50:77:fb:cf:7d:1b:08:1a:b0:9b:35:76:4b:68:
66:b3:85:60:b3:f5:6b:b4:82:47:0d:31:98:39:39:87:27:8d:
9e:fc:2c:26:b1:0f:01:33:47:0f:63:cb:28:28:91:52:9a:79:
12:4d:fe:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 23:32:49 2026 by rpki-client