Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/0ca310-3dfe-413d-8f4f-5afe1ce92c4c/1/z_jVsaHSJUEodoK9xpNv8sUlq7w.mft
File: z_jVsaHSJUEodoK9xpNv8sUlq7w.mft (raw, json)
Hash identifier: Lrl7ygUZYWs1/FNcM4KjLqqszoOcMJ0IhPcVTs7Iirk=
Subject key identifier: B4:A0:EA:80:91:2D:B6:12:69:47:A5:E2:FB:8B:6C:03:0B:2F:03:77
Authority key identifier: CF:F8:D5:B1:A1:D2:25:41:28:76:82:BD:C6:93:6F:F2:C5:25:AB:BC
Certificate issuer: /CN=cff8d5b1a1d22541287682bdc6936ff2c525abbc
Certificate serial: 019EB620CB7C94383C3012DDB1ED7E4E1ABD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z_jVsaHSJUEodoK9xpNv8sUlq7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/0ca310-3dfe-413d-8f4f-5afe1ce92c4c/1/z_jVsaHSJUEodoK9xpNv8sUlq7w.mft
Manifest number: 0EED
Signing time: Thu 11 Jun 2026 10:01:02 +0000
Manifest this update: Thu 11 Jun 2026 10:01:02 +0000
Manifest next update: Fri 12 Jun 2026 10:01:02 +0000
Files and hashes: 1: z_jVsaHSJUEodoK9xpNv8sUlq7w.crl (hash: vbdVOMrA+wmu+EQOZsvN3kBC2YX7M9etNDEkDptSyjM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/0ca310-3dfe-413d-8f4f-5afe1ce92c4c/1/z_jVsaHSJUEodoK9xpNv8sUlq7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/0ca310-3dfe-413d-8f4f-5afe1ce92c4c/1/z_jVsaHSJUEodoK9xpNv8sUlq7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/z_jVsaHSJUEodoK9xpNv8sUlq7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 10:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:20:cb:7c:94:38:3c:30:12:dd:b1:ed:7e:4e:1a:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cff8d5b1a1d22541287682bdc6936ff2c525abbc
Validity
Not Before: Jun 11 10:01:02 2026 GMT
Not After : Jun 12 10:01:02 2026 GMT
Subject: CN=b4a0ea80912db6126947a5e2fb8b6c030b2f0377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:cf:10:d1:3c:b0:6a:c1:7e:c9:a4:b8:d2:2b:
7d:7f:06:00:e7:66:ec:f0:60:4e:57:32:82:8c:f1:
50:fc:ff:dd:b8:43:d3:15:5d:9a:14:a9:f9:f7:a0:
42:25:dd:7e:b0:88:99:5b:6e:1a:a6:88:32:de:df:
54:a3:5e:11:c4:71:64:ec:9c:b6:a1:6a:fa:8d:73:
c3:f2:85:7f:d0:b2:4b:b8:08:a2:e9:2a:22:d0:3f:
72:76:b5:c6:3a:6c:4e:2e:1a:d1:21:75:60:1d:dc:
56:3e:70:b9:81:e6:00:4e:82:cd:6e:1d:94:d6:47:
a1:c6:98:ac:47:d0:a9:37:3c:ba:aa:f2:f5:6f:52:
d8:bb:c8:c6:76:24:6d:f9:72:9c:f2:d9:d0:89:c2:
37:23:96:b1:11:8a:ec:ce:81:dd:fe:05:fd:3e:b9:
28:84:1a:d2:6b:a3:b9:4a:b7:92:80:af:d8:d0:ac:
10:d8:ea:24:7d:08:fe:28:32:d0:31:aa:ac:c2:53:
a4:b2:e4:1c:50:30:6d:fd:70:52:2c:c2:95:91:4d:
3b:b2:bf:f3:75:33:77:8b:5c:ad:cd:dc:c9:8e:89:
12:92:0b:d0:4e:f2:27:aa:17:8d:65:d7:02:94:ee:
17:21:74:e3:97:7f:22:ab:f8:4d:6f:a8:9b:ad:8e:
d5:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:A0:EA:80:91:2D:B6:12:69:47:A5:E2:FB:8B:6C:03:0B:2F:03:77
X509v3 Authority Key Identifier:
keyid:CF:F8:D5:B1:A1:D2:25:41:28:76:82:BD:C6:93:6F:F2:C5:25:AB:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z_jVsaHSJUEodoK9xpNv8sUlq7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0ca310-3dfe-413d-8f4f-5afe1ce92c4c/1/z_jVsaHSJUEodoK9xpNv8sUlq7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0ca310-3dfe-413d-8f4f-5afe1ce92c4c/1/z_jVsaHSJUEodoK9xpNv8sUlq7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:c1:d5:47:59:ad:8c:54:67:4b:e9:c4:1e:5b:aa:94:97:3f:
1f:fb:fd:b7:48:33:0d:67:59:ad:f4:94:c5:f1:9e:df:ce:13:
07:7b:b7:5d:8c:b4:e6:93:47:69:c8:64:a1:f8:0f:29:61:c4:
11:df:c4:83:33:74:ed:9a:dd:13:4e:89:c7:72:ea:99:d8:c4:
fe:84:9a:8c:e0:48:78:1b:da:21:28:a7:c1:cc:07:02:67:23:
ee:6a:c0:f7:15:36:0c:1b:29:8c:c2:47:bb:91:91:90:da:a9:
c6:cf:2a:88:31:41:63:f5:d5:95:25:d5:ec:76:37:c4:48:65:
a3:94:dc:2c:ee:4e:57:b9:d8:b8:50:b5:af:1b:a9:9b:28:b7:
bf:c1:48:93:ec:2d:b4:96:b8:35:8f:e8:96:2c:45:dc:36:b0:
3c:1c:23:3c:85:f6:c8:d4:90:1f:2f:c0:9a:42:85:6f:f9:a0:
e1:90:11:53:c8:5a:d9:f0:7a:cc:87:9a:ca:5a:ee:1d:60:c7:
37:ec:ef:8f:fe:db:3b:2c:2d:74:7f:3d:ed:8c:13:df:2c:61:
6d:2d:cd:39:60:e5:5c:1c:9a:32:78:bd:9c:54:2b:bd:fa:4e:
3c:2a:34:70:03:b3:65:b7:e7:9b:c3:3b:7c:3c:80:b9:d0:bf:
ea:fc:9c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 20:31:22 2026 by rpki-client