Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/z0AYX1Us2XUnbANGT1DHpdNRVkw.mft
File: z0AYX1Us2XUnbANGT1DHpdNRVkw.mft (raw, json)
Hash identifier: Bcn0bHQ/DqFEuDuU8rzAFdXj1FhNuOTQrZ7YhRoYDuU=
Subject key identifier: 0B:C3:CA:2B:21:20:41:96:73:14:A0:F4:8E:23:66:E6:6B:5A:68:CB
Authority key identifier: CF:40:18:5F:55:2C:D9:75:27:6C:03:46:4F:50:C7:A5:D3:51:56:4C
Certificate issuer: /CN=cf40185f552cd975276c03464f50c7a5d351564c
Certificate serial: 019F38983A09DE32600BD2C17FD58DCE0F85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z0AYX1Us2XUnbANGT1DHpdNRVkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/z0AYX1Us2XUnbANGT1DHpdNRVkw.mft
Manifest number: 02B5
Signing time: Mon 06 Jul 2026 18:02:08 +0000
Manifest this update: Mon 06 Jul 2026 18:02:08 +0000
Manifest next update: Tue 07 Jul 2026 18:02:08 +0000
Files and hashes: 1: laiDZxmXdgJH8Of-yAuGAFD0Nks.roa (hash: 29mbTdf0w60u4m7lifJIKwS951c2LKKJ0JQHfZ51kdg=)
2: wPJ_bWcqiT5Ryc2PrLz-RlxJFfk.roa (hash: WhlDU2CEPgF/HK0/49CMTEtZOnQc9y/7MprKkJl/+MA=)
3: z0AYX1Us2XUnbANGT1DHpdNRVkw.crl (hash: NeoEbzrOt3xH+ky7AKApV48KXTyDU+T6NpGLmp0VWRA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/z0AYX1Us2XUnbANGT1DHpdNRVkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/z0AYX1Us2XUnbANGT1DHpdNRVkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/z0AYX1Us2XUnbANGT1DHpdNRVkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:38:98:3a:09:de:32:60:0b:d2:c1:7f:d5:8d:ce:0f:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf40185f552cd975276c03464f50c7a5d351564c
Validity
Not Before: Jul 6 18:02:08 2026 GMT
Not After : Jul 7 18:02:08 2026 GMT
Subject: CN=0bc3ca2b212041967314a0f48e2366e66b5a68cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:09:c4:be:87:8a:6b:be:4b:dd:8a:3c:31:e6:
da:79:65:bc:51:6d:bb:b4:fb:8e:4c:de:bd:b0:c5:
9c:33:64:10:81:70:c2:67:76:f1:d0:7d:88:65:08:
bb:f7:f7:42:9f:a6:f9:1b:19:ed:7c:2e:33:fd:0c:
0d:94:74:46:0f:95:07:0d:b3:c0:60:cf:83:a1:ec:
c4:fe:83:61:31:63:f8:44:df:d8:e5:94:2f:7f:21:
92:fe:24:c7:8a:4e:71:b8:fb:d1:ae:ba:97:01:e9:
d2:46:9d:d0:97:7c:f3:bd:19:39:3d:61:ab:1a:59:
da:ee:aa:be:0c:bc:08:03:ea:97:03:d5:27:7f:59:
2b:da:34:d1:1c:ff:8a:b4:db:09:3f:14:9e:54:a6:
fb:87:42:6d:50:ec:38:f1:d3:97:1d:09:fa:d9:45:
2f:72:bf:06:f9:f9:97:8e:d1:21:79:5f:28:ce:04:
73:35:c1:2e:2c:86:21:19:35:a9:8f:70:b3:3f:9d:
72:38:fd:4a:96:b5:50:85:09:75:f8:8d:7f:07:54:
3b:d7:6f:f3:a3:bb:a3:41:69:ea:29:e5:64:6c:11:
4d:c1:e5:ce:9c:c8:b3:59:ff:0f:a3:e3:f5:bb:34:
65:bf:9d:da:5d:e9:e0:ab:c1:b0:c4:4d:59:0f:29:
ed:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:C3:CA:2B:21:20:41:96:73:14:A0:F4:8E:23:66:E6:6B:5A:68:CB
X509v3 Authority Key Identifier:
keyid:CF:40:18:5F:55:2C:D9:75:27:6C:03:46:4F:50:C7:A5:D3:51:56:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z0AYX1Us2XUnbANGT1DHpdNRVkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/z0AYX1Us2XUnbANGT1DHpdNRVkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/z0AYX1Us2XUnbANGT1DHpdNRVkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:c1:07:d4:a3:84:9f:da:94:6f:50:14:c4:4b:2a:51:13:b5:
1d:a3:53:c3:f9:03:32:f0:3d:54:2e:0c:09:cb:2c:ab:f4:81:
4e:89:ee:b7:07:99:16:47:e2:61:00:2e:60:49:23:48:71:18:
3d:36:7e:ce:53:58:cd:7d:19:d5:7f:e7:a4:ce:8a:dc:f8:25:
85:7f:52:51:3a:a7:c2:90:fc:98:94:a1:1a:32:48:24:70:d2:
1f:24:1d:98:ca:75:55:37:9e:1d:de:2e:09:41:5f:f4:d3:9a:
3f:9d:b1:f4:d2:0c:38:e6:01:28:27:5d:7f:85:67:c6:25:61:
28:7a:75:55:60:dd:83:ab:5c:5c:87:10:04:b5:76:ea:97:f7:
9b:76:76:f1:16:28:5c:af:d3:39:12:73:35:d5:87:81:40:3c:
bc:8c:73:48:71:ea:b2:ca:2a:a6:86:d4:66:ab:4a:c0:5e:22:
0f:74:c8:80:38:b1:9e:77:9f:3d:3e:fc:ed:fc:57:1f:2a:be:
e7:c4:ab:bf:f5:e8:c5:82:ea:88:db:cb:86:1c:d8:35:e6:9b:
bf:89:2c:56:c4:d1:1d:9c:ac:be:89:72:4f:d1:49:3d:3f:3e:
e2:de:87:6f:f2:ed:8f:6c:4a:66:33:9d:40:ef:96:f6:cb:a3:
83:d5:ff:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 20:06:41 2026 by rpki-client