Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.mft
File: z7dRkZeIZvH8l_Ujx92kCoj353c.mft (raw, json)
Hash identifier: stBVHrAymrl7OzSElIr+FkigoY01VH6QFo1xSMbYQOk=
Subject key identifier: 89:28:9C:EF:16:32:76:09:28:19:E5:55:1C:AB:99:9C:85:A5:82:AC
Authority key identifier: CF:B7:51:91:97:88:66:F1:FC:97:F5:23:C7:DD:A4:0A:88:F7:E7:77
Certificate issuer: /CN=cfb75191978866f1fc97f523c7dda40a88f7e777
Certificate serial: 019F30DE93F29C358878449B76CEAE266F91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z7dRkZeIZvH8l_Ujx92kCoj353c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.mft
Manifest number: 120C
Signing time: Sun 05 Jul 2026 06:02:00 +0000
Manifest this update: Sun 05 Jul 2026 06:02:00 +0000
Manifest next update: Mon 06 Jul 2026 06:02:00 +0000
Files and hashes: 1: HbZqbcd_SA0fqZKKhKTDPHn7QrA.roa (hash: lHsLnFXi4sJiW73WhLYcB2LoJaZPYnZoNATOCOJJhZ4=)
2: z7dRkZeIZvH8l_Ujx92kCoj353c.crl (hash: Wrm1YQg+HhMBCVV78c+lJrqnjLxI91UlWOUQemjV5yY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.mft
rsync://rpki.ripe.net/repository/DEFAULT/z7dRkZeIZvH8l_Ujx92kCoj353c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 Jul 2026 06:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:30:de:93:f2:9c:35:88:78:44:9b:76:ce:ae:26:6f:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfb75191978866f1fc97f523c7dda40a88f7e777
Validity
Not Before: Jul 5 06:02:00 2026 GMT
Not After : Jul 6 06:02:00 2026 GMT
Subject: CN=89289cef163276092819e5551cab999c85a582ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:2f:d8:68:74:f2:12:69:aa:aa:6f:1e:83:0b:
3c:19:01:5b:34:f2:df:07:fb:5b:06:2d:14:ff:06:
d3:a0:e4:d4:e4:82:7c:a0:01:f1:e3:ac:b0:c0:e3:
32:e5:f5:9d:cf:ac:6e:e5:bf:c9:de:83:97:79:8a:
ce:f8:5a:0e:bc:49:b0:34:99:6a:81:bb:a8:e9:a6:
f4:a5:ed:e1:08:03:25:7f:0d:20:ea:fe:7c:d0:6f:
66:3b:1e:2e:00:b7:39:62:4b:58:ce:eb:1e:e7:58:
23:22:ed:ba:db:65:8b:96:e2:77:a7:5c:b0:dc:fa:
f5:d0:71:d1:4f:41:99:9b:a9:60:11:a0:8e:6f:f0:
24:7b:2b:34:e5:20:dd:c6:83:2a:bc:eb:33:81:67:
59:94:03:cc:f9:eb:a9:ef:c6:a5:94:95:88:9a:69:
7e:49:f7:bb:e3:82:d3:e2:0b:63:45:ae:91:e4:6a:
68:83:43:a3:c5:cd:7c:72:1f:77:8d:a1:b3:8b:9f:
57:de:f6:d0:3d:e6:fe:2c:be:9f:a0:11:a7:a2:15:
86:b6:3d:97:1d:c9:09:b6:fc:1b:9e:57:68:98:cb:
20:cc:62:07:6d:d5:59:a1:8a:20:a6:1b:6e:37:50:
43:98:68:72:97:8c:d1:d1:6f:78:8e:63:7c:4c:47:
cd:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:28:9C:EF:16:32:76:09:28:19:E5:55:1C:AB:99:9C:85:A5:82:AC
X509v3 Authority Key Identifier:
keyid:CF:B7:51:91:97:88:66:F1:FC:97:F5:23:C7:DD:A4:0A:88:F7:E7:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z7dRkZeIZvH8l_Ujx92kCoj353c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:2a:a1:ff:d9:bb:6a:c0:61:b6:80:7b:30:4e:db:3f:a1:98:
1c:5c:6d:de:0a:08:a0:ef:b6:cb:cc:b5:db:eb:32:96:16:61:
da:6b:23:5a:11:2e:11:38:8f:0a:ef:3e:89:29:b7:c8:20:73:
78:bf:64:2f:37:c8:d5:d5:fc:94:6c:1e:4a:ee:c7:54:f4:1f:
79:59:74:3b:59:1e:01:4a:19:54:5f:5d:9e:e7:09:3c:fb:c0:
7a:d6:d3:ff:c2:6d:ac:86:6f:8f:38:05:f6:be:af:6b:ed:f1:
93:68:41:17:1d:2b:74:4f:23:d7:b0:20:4e:37:52:f1:6d:53:
26:9c:0c:85:02:b8:69:13:1d:13:95:95:5a:f0:b6:3d:67:f0:
ea:91:41:ce:10:de:31:03:1c:fb:b0:29:56:0c:3b:5b:83:92:
e9:2c:e9:de:34:25:dc:5c:56:33:cc:f3:c5:84:fb:5c:7d:9c:
01:00:85:1e:54:75:06:ef:43:fa:1d:98:ca:02:4a:b7:36:71:
f8:4c:dd:29:8d:be:7b:5d:d9:6d:8f:f6:a5:cd:1f:8f:68:07:
ad:b5:a4:67:d7:9d:79:82:04:f0:c8:ea:e0:c3:5f:ee:ef:54:
08:24:9b:56:8a:94:fe:ac:b6:56:18:82:d0:43:ba:a7:02:81:
63:b7:58:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 13:43:35 2026 by rpki-client