Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.mft
File: z7dRkZeIZvH8l_Ujx92kCoj353c.mft (raw, json)
Hash identifier: X22sjkjL8T3MwMdtEDPLmYBTvIrkc64J7IiE7vrwaj0=
Subject key identifier: 30:24:B6:FA:6A:E8:4E:EB:1F:29:0E:2C:6E:E4:6F:C5:69:8A:89:AA
Authority key identifier: CF:B7:51:91:97:88:66:F1:FC:97:F5:23:C7:DD:A4:0A:88:F7:E7:77
Certificate issuer: /CN=cfb75191978866f1fc97f523c7dda40a88f7e777
Certificate serial: 01A019E4F37D934320D2C81F13990BB19AF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z7dRkZeIZvH8l_Ujx92kCoj353c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.mft
Manifest number: 1288
Signing time: Wed 19 Aug 2026 12:00:29 +0000
Manifest this update: Wed 19 Aug 2026 12:00:29 +0000
Manifest next update: Thu 20 Aug 2026 12:00:29 +0000
Files and hashes: 1: cq34xzctLYqO4YHpg8mI18UOe54.roa (hash: 0aujtvTQc2NNmpQ8QZDl9cSHbe7wcJMt7msXFOTCM14=)
2: z7dRkZeIZvH8l_Ujx92kCoj353c.crl (hash: 6VQRPqMm7bE2Cpsp3U53BDy2xZzA2aDbV28m7DAVZpo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.mft
rsync://rpki.ripe.net/repository/DEFAULT/z7dRkZeIZvH8l_Ujx92kCoj353c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Aug 2026 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:19:e4:f3:7d:93:43:20:d2:c8:1f:13:99:0b:b1:9a:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfb75191978866f1fc97f523c7dda40a88f7e777
Validity
Not Before: Aug 19 12:00:29 2026 GMT
Not After : Aug 20 12:00:29 2026 GMT
Subject: CN=3024b6fa6ae84eeb1f290e2c6ee46fc5698a89aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:71:04:9b:77:4c:e4:2c:0d:c4:4a:4f:76:ae:
26:95:5d:02:9e:1d:2f:cd:7a:f2:37:fb:33:3f:99:
8e:5f:ea:ef:29:ef:7c:74:cb:30:18:30:33:c6:68:
42:8a:cd:44:e0:21:ec:64:f2:ad:ad:29:18:09:cc:
4c:4b:c0:00:2f:e3:2b:0a:b1:65:7a:69:f2:8e:00:
09:ae:ee:84:a7:d4:8f:2c:c4:f5:a5:5d:99:60:a2:
2f:49:43:c5:b3:88:7d:98:df:9d:91:c4:dc:08:8b:
90:84:fd:b6:65:87:ba:55:da:23:cb:b9:10:2c:8a:
77:99:c1:14:c2:88:c3:69:91:90:74:cb:11:d4:12:
56:41:4d:15:02:de:75:dd:40:0f:14:56:b1:3e:7b:
fe:3f:66:bc:3e:59:29:e8:13:51:32:fb:8f:89:ca:
d2:e6:a6:32:6e:ce:6e:b1:63:5f:c8:d1:58:92:c2:
7b:43:3a:54:a6:0a:88:ef:6f:e8:b5:10:34:f3:f6:
77:5f:3a:17:b9:6d:1d:99:bf:54:87:33:48:6d:bb:
80:67:17:60:c3:8b:03:b7:79:bb:50:db:65:6d:20:
27:9a:3d:e6:82:81:d1:7c:41:c1:b1:f6:2d:b3:c1:
d9:11:24:b4:2e:62:45:f6:36:97:1b:d6:ac:e5:0a:
d6:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:24:B6:FA:6A:E8:4E:EB:1F:29:0E:2C:6E:E4:6F:C5:69:8A:89:AA
X509v3 Authority Key Identifier:
keyid:CF:B7:51:91:97:88:66:F1:FC:97:F5:23:C7:DD:A4:0A:88:F7:E7:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z7dRkZeIZvH8l_Ujx92kCoj353c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:7b:bb:92:87:4a:3c:94:97:70:73:62:80:c0:17:ef:41:e5:
e4:7f:a9:e1:5b:43:9e:25:9c:e7:71:27:f7:33:0a:fb:04:b5:
2a:a1:f1:a9:c9:0e:9b:4e:6e:38:4f:2b:18:a8:53:a2:0a:db:
d6:d3:65:a3:16:5c:db:2d:b7:95:fc:f4:35:32:ad:a7:bf:7d:
80:8f:89:50:07:ee:95:e0:06:1b:80:80:3f:e8:37:d8:b0:6f:
cf:ff:40:96:b8:97:b1:e3:08:af:93:73:5c:53:d2:2c:b2:59:
0f:ca:f7:84:17:06:35:92:f1:a2:be:b2:f9:e9:39:e8:74:62:
4d:37:88:03:a1:45:ec:e8:81:71:0b:0c:da:9b:ef:62:16:96:
2b:13:88:26:2b:e5:b0:4c:28:69:35:9c:28:8c:1c:02:4f:37:
90:72:43:a6:46:1b:73:44:15:67:41:09:1b:a9:ea:49:e0:7d:
3e:c2:39:6e:2e:d3:b1:69:38:83:07:82:8f:05:b6:4a:a7:33:
0e:bd:36:59:45:82:0b:cc:f8:38:d5:38:16:9f:ac:ab:2a:cb:
19:10:cf:05:a9:87:75:03:ab:f2:81:d1:e8:76:06:f1:cf:ed:
c8:be:e8:42:4a:6c:a5:f4:81:1c:7b:86:cb:33:cd:7e:37:f6:
d9:5d:cd:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:46:56 2026 by rpki-client