Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/631521-d4b7-4f10-8c06-87aa285f807c/1/z173qHDUsUjrHU9P5mbtUFSt6uw.mft
File: z173qHDUsUjrHU9P5mbtUFSt6uw.mft (raw, json)
Hash identifier: elVOPvaTJpIfFES9peFNLQdUqDSWpVesTIwZ0qkM9MQ=
Subject key identifier: C1:3A:9C:EA:F6:9F:A1:C5:CA:6F:F3:CC:B2:F8:F8:48:6B:83:09:E8
Authority key identifier: CF:5E:F7:A8:70:D4:B1:48:EB:1D:4F:4F:E6:66:ED:50:54:AD:EA:EC
Certificate issuer: /CN=cf5ef7a870d4b148eb1d4f4fe666ed5054adeaec
Certificate serial: 019FD128FB3EF070F50E300FA117A9908116
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z173qHDUsUjrHU9P5mbtUFSt6uw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/631521-d4b7-4f10-8c06-87aa285f807c/1/z173qHDUsUjrHU9P5mbtUFSt6uw.mft
Manifest number: 115E
Signing time: Wed 05 Aug 2026 09:02:31 +0000
Manifest this update: Wed 05 Aug 2026 09:02:31 +0000
Manifest next update: Thu 06 Aug 2026 09:02:31 +0000
Files and hashes: 1: WcEXb1FwWuq7CmZIR_j833VQVLg.roa (hash: YwtVclxxnke6RUqR5TUDz5Eu+w+6DwiJjWOIUuWJONU=)
2: bfREzEwR-EXPjAe3wBGoI04LV-k.roa (hash: 769fYTMFcVF5MUU/DGKAsF33sj2AY85ZIEX4Env7vD8=)
3: z173qHDUsUjrHU9P5mbtUFSt6uw.crl (hash: b/2cYomK5+IdYFM7/PhvUBooRVC0Yh+Sww0Yko7IPE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/631521-d4b7-4f10-8c06-87aa285f807c/1/z173qHDUsUjrHU9P5mbtUFSt6uw.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/631521-d4b7-4f10-8c06-87aa285f807c/1/z173qHDUsUjrHU9P5mbtUFSt6uw.mft
rsync://rpki.ripe.net/repository/DEFAULT/z173qHDUsUjrHU9P5mbtUFSt6uw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Aug 2026 09:02:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d1:28:fb:3e:f0:70:f5:0e:30:0f:a1:17:a9:90:81:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf5ef7a870d4b148eb1d4f4fe666ed5054adeaec
Validity
Not Before: Aug 5 09:02:31 2026 GMT
Not After : Aug 6 09:02:31 2026 GMT
Subject: CN=c13a9ceaf69fa1c5ca6ff3ccb2f8f8486b8309e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c1:15:63:fa:c9:03:5c:9c:80:b2:49:39:84:
b0:4e:19:f8:96:32:2e:5b:80:5d:13:df:1e:8d:70:
f7:7d:67:2c:db:21:31:2a:8e:11:8c:f6:e5:f4:02:
c1:ab:a2:50:5b:15:d9:c9:d6:5d:7b:76:55:ae:a6:
fb:e8:09:8e:0e:8d:6e:9e:14:de:d1:9b:2c:b6:e4:
24:5f:b9:8f:3b:9b:6f:51:ca:db:c5:35:74:46:b0:
5f:f9:0e:98:88:09:6e:6e:80:32:64:32:9a:5a:63:
f6:a6:21:a8:40:48:9d:60:ed:7f:29:6c:7f:84:6f:
ae:47:54:39:35:de:19:2a:c5:45:ac:7b:c8:0f:32:
35:ff:29:de:ab:cb:6e:c1:e7:3d:d7:09:6c:93:8a:
64:d6:77:f9:c4:34:28:33:e3:33:57:cf:b6:55:39:
43:5e:26:9c:9d:ce:85:b0:c9:a7:de:ed:a5:c8:ef:
4b:bb:7c:95:6e:16:3b:3c:06:29:e6:f5:c2:11:ef:
30:e8:0b:4b:72:77:4d:d3:62:e7:00:31:af:d0:e1:
a6:3b:33:4d:83:07:d9:ec:69:da:d5:e5:24:19:ea:
0c:64:7b:62:55:6e:56:44:45:f7:45:47:fb:09:a7:
23:7c:cc:6d:c7:50:31:81:bc:33:5a:ed:6b:44:41:
fa:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:3A:9C:EA:F6:9F:A1:C5:CA:6F:F3:CC:B2:F8:F8:48:6B:83:09:E8
X509v3 Authority Key Identifier:
keyid:CF:5E:F7:A8:70:D4:B1:48:EB:1D:4F:4F:E6:66:ED:50:54:AD:EA:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z173qHDUsUjrHU9P5mbtUFSt6uw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/631521-d4b7-4f10-8c06-87aa285f807c/1/z173qHDUsUjrHU9P5mbtUFSt6uw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/631521-d4b7-4f10-8c06-87aa285f807c/1/z173qHDUsUjrHU9P5mbtUFSt6uw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:b6:4c:d9:fc:6e:64:6e:6b:b4:e4:d0:24:11:92:12:88:ef:
3c:bc:03:65:24:41:a5:e4:15:57:e6:b1:ce:01:1e:0e:7d:b9:
26:46:34:9e:91:b6:72:27:fd:9f:01:da:b6:e9:32:d4:b8:21:
ff:6b:fa:9d:37:d6:ce:62:3f:e0:0c:3d:0d:2e:e0:29:a9:fb:
cf:93:0d:d9:9a:e8:47:ea:f7:00:01:f5:18:26:53:02:e3:6d:
47:8d:9d:ea:b5:4d:36:8e:28:f0:06:c5:58:44:e0:39:4f:30:
e9:47:26:f5:c6:df:cf:2a:91:ee:32:ab:e5:16:30:df:66:28:
37:55:6d:08:f1:39:20:2d:46:be:8e:1d:a3:04:f2:43:f3:1a:
8e:bd:ee:d9:fb:42:48:95:4e:08:7d:84:a1:20:b8:36:46:18:
54:7c:fc:16:3e:4b:26:f2:bb:8f:38:51:4b:3b:54:a8:a1:c5:
8f:2e:b8:d6:81:1e:da:b1:12:ff:ce:d5:a0:4c:51:0e:27:df:
d0:69:28:80:ca:99:d9:e9:19:e6:a0:a6:20:e9:b2:f0:66:ef:
b3:98:2f:92:0c:33:b5:8a:46:8b:51:2b:c9:d5:62:c5:b8:41:
bc:c3:c4:4b:95:a1:1a:87:fa:9b:8e:e5:a5:8f:b4:b5:eb:52:
cb:6a:b7:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 5 19:03:43 2026 by rpki-client