Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/fba0ec-de56-40a5-89cf-770d7e3c0620/1/z312VOh85PlnktVlxW4ZH0Ten1o.mft
File: z312VOh85PlnktVlxW4ZH0Ten1o.mft (raw, json)
Hash identifier: u2AlCDa6zx/XuzEFWv0z57mnSu1lDke0CWhCvuzusug=
Subject key identifier: 70:20:BD:6A:E1:8B:31:65:9A:33:40:2F:57:91:5E:90:12:2F:66:D7
Authority key identifier: CF:7D:76:54:E8:7C:E4:F9:67:92:D5:65:C5:6E:19:1F:44:DE:9F:5A
Certificate issuer: /CN=cf7d7654e87ce4f96792d565c56e191f44de9f5a
Certificate serial: 019FA33C71ADC2C76AE3C8EFABF1ECF8D307
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z312VOh85PlnktVlxW4ZH0Ten1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/fba0ec-de56-40a5-89cf-770d7e3c0620/1/z312VOh85PlnktVlxW4ZH0Ten1o.mft
Manifest number: 12E2
Signing time: Mon 27 Jul 2026 11:01:15 +0000
Manifest this update: Mon 27 Jul 2026 11:01:15 +0000
Manifest next update: Tue 28 Jul 2026 11:01:15 +0000
Files and hashes: 1: GSjgftqq3fsasoRBiwgyoGVynxk.roa (hash: 9bH/WK8qEWYXbBVodpWZWBBCr2Ad6muHm/adFtN+AO0=)
2: z312VOh85PlnktVlxW4ZH0Ten1o.crl (hash: V2ywNMwvdapKWzYVIl30cASjNsEqbg7D0aDXn2DPOb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/fba0ec-de56-40a5-89cf-770d7e3c0620/1/z312VOh85PlnktVlxW4ZH0Ten1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/fba0ec-de56-40a5-89cf-770d7e3c0620/1/z312VOh85PlnktVlxW4ZH0Ten1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/z312VOh85PlnktVlxW4ZH0Ten1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:3c:71:ad:c2:c7:6a:e3:c8:ef:ab:f1:ec:f8:d3:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf7d7654e87ce4f96792d565c56e191f44de9f5a
Validity
Not Before: Jul 27 11:01:15 2026 GMT
Not After : Jul 28 11:01:15 2026 GMT
Subject: CN=7020bd6ae18b31659a33402f57915e90122f66d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:38:a7:1c:f7:55:04:a7:fc:7f:13:5f:fa:c5:
a0:9f:2b:b0:e3:bb:5e:01:38:f6:20:87:79:da:3d:
b1:09:3b:2f:38:65:1d:1c:da:07:b2:29:2b:4b:0e:
c6:a0:54:3b:84:60:fe:90:37:5f:99:de:4c:b1:76:
bd:09:52:ab:38:23:6d:e9:01:2e:e8:5e:32:f6:fc:
56:67:16:31:30:c9:03:09:b1:b7:05:36:6a:ce:81:
85:ae:4f:64:19:12:a1:d8:8e:bf:3e:51:b4:2c:24:
c7:bf:7e:12:9b:7f:1b:ea:5c:ac:5a:f7:25:30:42:
81:5e:3e:9b:ba:f9:1f:a1:60:f3:80:de:20:36:e8:
57:48:9f:cc:51:a8:66:e0:45:af:69:cc:9d:79:d1:
e4:0a:72:67:74:76:ef:6f:d8:95:0b:ff:88:66:a7:
c6:d3:48:de:f8:2d:67:dd:b2:d5:6c:f8:e5:31:fe:
50:47:e1:24:b3:c0:c9:2e:2b:5b:dd:04:13:d6:6f:
12:27:05:82:e0:14:4b:ef:aa:65:28:c4:d4:ef:f1:
08:a0:42:d6:2e:75:ae:d2:09:11:3b:9a:27:34:95:
7c:54:84:19:59:bd:61:a3:8c:c0:ba:e4:db:6a:44:
17:b9:37:94:75:e2:4c:ab:1e:a5:af:c8:26:48:00:
51:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:20:BD:6A:E1:8B:31:65:9A:33:40:2F:57:91:5E:90:12:2F:66:D7
X509v3 Authority Key Identifier:
keyid:CF:7D:76:54:E8:7C:E4:F9:67:92:D5:65:C5:6E:19:1F:44:DE:9F:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z312VOh85PlnktVlxW4ZH0Ten1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/fba0ec-de56-40a5-89cf-770d7e3c0620/1/z312VOh85PlnktVlxW4ZH0Ten1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/fba0ec-de56-40a5-89cf-770d7e3c0620/1/z312VOh85PlnktVlxW4ZH0Ten1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:c8:20:37:ed:96:94:b9:62:04:ae:af:fa:fa:2b:ea:72:f7:
d2:02:76:b1:80:ab:48:0a:39:30:3a:6d:4a:7f:12:a2:3e:ae:
c2:a5:0f:e8:d3:8f:ce:9e:12:db:c2:42:dc:a0:0c:17:30:25:
32:c5:87:ed:e0:c5:f6:f7:7b:81:88:b5:ed:b2:e4:5f:b9:5f:
86:a8:02:82:d2:ed:e6:04:c4:35:3b:1a:c8:1d:97:ae:d8:0e:
d8:fc:11:bb:9f:f3:76:22:b4:90:7c:b1:45:9b:7c:d3:fa:c5:
83:7a:b2:91:a9:d6:14:da:d3:8b:f8:42:4a:b6:b5:0c:a4:c8:
25:d5:e9:a2:5a:41:e5:f1:16:dc:a6:c6:c4:7a:8f:0e:81:4d:
1c:2f:f4:90:8f:a7:89:1a:a2:86:4f:fc:89:e6:78:da:0d:d6:
a5:b6:56:04:50:64:31:38:6c:13:af:be:db:60:6b:4b:39:a0:
c2:2d:9d:a9:80:6e:fc:80:ae:6d:b3:62:99:1d:52:d1:8b:1a:
43:7a:a2:37:3d:be:7f:fa:91:0c:d8:9b:7a:85:2d:e2:a8:ae:
ff:7a:e2:fa:23:55:e5:ae:97:e8:14:43:98:d8:7a:2b:0c:cf:
96:ea:74:c3:eb:f2:09:45:b1:6a:96:72:c5:45:1f:b1:69:5b:
fc:93:c9:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 15:04:15 2026 by rpki-client