Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/ef9479-2994-449c-9d9c-e1dc69e333df/1/z39cWYBZ4a5ZdsgeorgmaX7hmQY.mft
File: z39cWYBZ4a5ZdsgeorgmaX7hmQY.mft (raw, json)
Hash identifier: phqlSpp5xhSGCW3l8ZA6fk5Rg8AoN7/i3/dLb80dAV4=
Subject key identifier: 84:A9:C9:A3:8A:D1:C6:F8:D9:52:D9:2A:73:5E:BE:87:90:B0:FC:6F
Authority key identifier: CF:7F:5C:59:80:59:E1:AE:59:76:C8:1E:A2:B8:26:69:7E:E1:99:06
Certificate issuer: /CN=cf7f5c598059e1ae5976c81ea2b826697ee19906
Certificate serial: 019D3940EF3A374BD431BB4F417CD9605F26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z39cWYBZ4a5ZdsgeorgmaX7hmQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/ef9479-2994-449c-9d9c-e1dc69e333df/1/z39cWYBZ4a5ZdsgeorgmaX7hmQY.mft
Manifest number: 072E
Signing time: Sun 29 Mar 2026 11:00:49 +0000
Manifest this update: Sun 29 Mar 2026 11:00:49 +0000
Manifest next update: Mon 30 Mar 2026 11:00:49 +0000
Files and hashes: 1: z39cWYBZ4a5ZdsgeorgmaX7hmQY.crl (hash: XeOuxTyRjG1AwFdC5S4INzhdV6bqeqn2KkEIhIQvGC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/ef9479-2994-449c-9d9c-e1dc69e333df/1/z39cWYBZ4a5ZdsgeorgmaX7hmQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/ef9479-2994-449c-9d9c-e1dc69e333df/1/z39cWYBZ4a5ZdsgeorgmaX7hmQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/z39cWYBZ4a5ZdsgeorgmaX7hmQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 11:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:ef:3a:37:4b:d4:31:bb:4f:41:7c:d9:60:5f:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf7f5c598059e1ae5976c81ea2b826697ee19906
Validity
Not Before: Mar 29 11:00:49 2026 GMT
Not After : Mar 30 11:00:49 2026 GMT
Subject: CN=84a9c9a38ad1c6f8d952d92a735ebe8790b0fc6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:04:3b:e3:b2:d1:b5:41:70:04:20:67:c0:a8:
76:7b:fb:c4:47:77:93:16:80:9a:a7:d1:35:ab:94:
c5:7c:42:3f:af:26:d7:82:54:d4:06:03:c5:f6:29:
b2:9c:e8:4b:4a:12:f5:d9:a8:6a:94:25:03:90:38:
04:1f:cc:c4:67:2c:63:ec:00:cf:ce:ba:57:f1:93:
12:3c:84:95:c5:43:3c:d0:ca:59:b4:8c:88:f4:e8:
3f:45:0e:1e:56:43:90:71:3c:ae:af:60:3e:c0:05:
7c:20:17:d5:b3:7f:e8:55:32:32:2b:7b:5c:6c:ee:
9e:6d:cf:8b:47:93:45:98:b0:4f:9c:bf:04:96:23:
bd:b2:45:a4:38:43:fb:bf:2a:98:5d:3c:1e:73:0b:
c7:38:95:a4:4e:37:2b:a7:51:8f:b1:f8:40:e3:e6:
4d:19:85:cc:12:bf:ab:bd:1b:9e:49:95:54:4c:36:
2e:e9:c7:fa:c2:66:c3:fe:84:c9:ff:8f:cf:99:fc:
2b:fe:c5:6a:2c:15:8c:18:b7:45:34:f7:d4:e7:38:
92:64:99:48:80:dc:07:9f:1b:24:99:cd:f0:63:3f:
f5:c0:d1:31:4a:42:0d:68:dc:19:e7:f2:2b:a9:dd:
47:9a:9e:e1:74:02:f5:6e:fe:bb:69:2b:8a:c1:ce:
bb:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:A9:C9:A3:8A:D1:C6:F8:D9:52:D9:2A:73:5E:BE:87:90:B0:FC:6F
X509v3 Authority Key Identifier:
keyid:CF:7F:5C:59:80:59:E1:AE:59:76:C8:1E:A2:B8:26:69:7E:E1:99:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z39cWYBZ4a5ZdsgeorgmaX7hmQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ef9479-2994-449c-9d9c-e1dc69e333df/1/z39cWYBZ4a5ZdsgeorgmaX7hmQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ef9479-2994-449c-9d9c-e1dc69e333df/1/z39cWYBZ4a5ZdsgeorgmaX7hmQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:a6:55:9e:ca:41:5a:3b:ae:d0:ae:21:b7:ec:14:e1:6f:e2:
42:d4:b3:26:fd:09:3f:84:b5:6b:65:90:c5:7e:91:9b:10:88:
a4:e1:8c:b7:2e:78:bf:43:d9:97:42:f8:32:d3:b3:9f:ea:a4:
4a:42:78:b4:50:4a:dd:87:8f:62:01:be:29:28:27:b8:cf:5e:
95:48:fa:e4:7e:fd:4e:af:de:ec:5e:76:2b:65:73:a4:4d:37:
0f:14:5f:84:97:aa:fa:ee:31:88:4c:ee:8d:a7:d4:8e:39:dc:
b8:8d:eb:89:43:3e:57:f6:27:2b:e3:f4:60:b0:44:3d:f1:ba:
d9:57:79:30:86:fd:1d:b6:21:b3:f9:cb:d7:a3:ae:02:60:1c:
c7:f7:b2:35:10:da:8d:66:52:5a:03:79:74:c7:d8:1a:7a:67:
5e:81:d2:44:15:ee:ac:10:a4:ea:c8:89:6a:ce:20:f5:5d:01:
ac:66:85:6c:27:a7:aa:1a:56:a9:29:92:41:50:a3:99:9f:ff:
85:91:57:6b:a6:bc:87:68:4d:be:87:07:6e:bb:33:b9:ae:61:
02:95:97:0e:a7:9b:81:ff:75:c8:78:56:4d:67:24:b3:57:c4:
d1:49:07:4c:db:ac:fb:68:7d:e6:60:86:05:0c:82:55:5f:e8:
9c:8f:4b:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:51:28 2026 by rpki-client