Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.mft
File: z7dRkZeIZvH8l_Ujx92kCoj353c.mft (raw, json)
Hash identifier: kFZyTtbpxoIflotp2x1pHh6m6ACVhoPmG0u7IHjGRUQ=
Subject key identifier: 5E:F5:73:B2:6F:EC:4D:88:39:A7:29:36:ED:23:91:4C:A5:0E:F2:8B
Authority key identifier: CF:B7:51:91:97:88:66:F1:FC:97:F5:23:C7:DD:A4:0A:88:F7:E7:77
Certificate issuer: /CN=cfb75191978866f1fc97f523c7dda40a88f7e777
Certificate serial: 019D3940C80765C64301E890C23D7BA1BF9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z7dRkZeIZvH8l_Ujx92kCoj353c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.mft
Manifest number: 1105
Signing time: Sun 29 Mar 2026 11:00:39 +0000
Manifest this update: Sun 29 Mar 2026 11:00:39 +0000
Manifest next update: Mon 30 Mar 2026 11:00:39 +0000
Files and hashes: 1: 0qRIj8FpE8X1N6x5GSHkeAwZpXQ.roa (hash: S2EFxoimo0CCE2MEzDNtzpx1Z0cgiW5Og80JDexN1gg=)
2: z7dRkZeIZvH8l_Ujx92kCoj353c.crl (hash: YRxNsim3s/xWV8Owf3+rJbpvPySwKEHlyKH87dGOr98=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.mft
rsync://rpki.ripe.net/repository/DEFAULT/z7dRkZeIZvH8l_Ujx92kCoj353c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:c8:07:65:c6:43:01:e8:90:c2:3d:7b:a1:bf:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfb75191978866f1fc97f523c7dda40a88f7e777
Validity
Not Before: Mar 29 11:00:39 2026 GMT
Not After : Mar 30 11:00:39 2026 GMT
Subject: CN=5ef573b26fec4d8839a72936ed23914ca50ef28b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:f3:57:65:65:44:d3:4e:be:b9:ca:4f:66:88:
1a:2e:08:e3:8c:5d:1d:c5:08:b2:b0:b0:67:c9:66:
71:48:77:fb:a7:8c:8f:ec:4d:dd:68:63:54:2c:1c:
b9:d1:b7:ed:01:ac:62:b3:40:34:57:1c:f8:03:a8:
48:47:0c:5c:1a:1a:ac:88:d1:25:97:bc:0e:d7:35:
45:4a:eb:94:16:ce:18:9b:42:6c:d7:97:f6:2a:90:
90:e0:8c:fe:11:0e:ff:36:88:b6:c7:b1:c1:73:6e:
e5:4e:13:df:f9:ae:cb:5b:8f:9d:c5:fd:20:98:1a:
88:74:32:2c:16:93:4e:d3:e5:de:b0:f9:69:13:72:
98:ba:7d:9c:d5:09:b7:5a:e5:37:80:e2:02:9e:41:
12:71:de:46:97:5c:f6:84:67:07:49:34:c1:98:56:
bb:86:2b:75:2a:0a:57:3a:73:c9:75:6c:45:95:88:
c9:b7:15:c3:0d:fd:33:e4:05:93:e5:86:06:3c:0c:
13:16:5b:48:aa:df:b5:f5:0b:22:54:5d:dc:63:99:
aa:cd:51:a7:18:6a:59:6c:bd:a6:32:59:4a:b5:d0:
a0:3b:8d:4e:b8:7b:d5:47:67:d0:a1:b8:f3:09:c5:
8e:3a:74:fd:95:bc:08:e8:e7:4e:22:69:cb:a0:ec:
32:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:F5:73:B2:6F:EC:4D:88:39:A7:29:36:ED:23:91:4C:A5:0E:F2:8B
X509v3 Authority Key Identifier:
keyid:CF:B7:51:91:97:88:66:F1:FC:97:F5:23:C7:DD:A4:0A:88:F7:E7:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z7dRkZeIZvH8l_Ujx92kCoj353c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:ff:d7:fc:99:eb:88:9c:cb:9a:a7:23:92:16:e7:5a:98:f5:
05:36:18:4c:22:af:39:36:ed:d5:bd:2f:8e:fa:26:89:d0:16:
8b:10:65:87:d3:08:fa:b1:72:6b:cc:06:14:49:12:39:1c:65:
36:da:ab:7c:66:74:b2:11:6c:83:d7:64:9b:9d:d6:11:97:45:
5e:19:f6:15:6e:e8:84:e1:51:95:b5:eb:b6:46:83:81:a3:6d:
76:eb:e8:23:89:06:6d:ae:81:24:2d:02:6c:97:57:9e:8a:26:
ec:43:a2:bf:5e:bc:14:81:2c:ef:e3:62:03:02:94:bb:34:3a:
78:df:8a:69:66:91:75:3f:8b:76:f2:74:98:68:0c:7a:d8:17:
df:a6:0f:2b:0c:82:f2:53:da:c6:4e:ae:20:c9:fb:4a:4c:70:
41:99:b5:69:2d:01:6d:5b:20:a1:47:1d:22:fd:53:74:3d:c0:
4c:9b:ce:18:f5:90:a7:2f:f9:c4:51:dc:71:da:4e:28:17:98:
16:6c:bb:6a:e7:80:14:fc:6c:3e:8f:b1:74:24:34:b6:1e:23:
6e:2c:c9:54:4d:d1:03:e7:d6:1e:69:d6:1b:b8:80:40:5f:c3:
44:82:57:60:5e:9b:78:19:05:79:a9:a2:8a:3f:1f:40:0d:80:
0f:7b:a1:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:26:03 2026 by rpki-client