Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.mft
File: z7dRkZeIZvH8l_Ujx92kCoj353c.mft (raw, json)
Hash identifier: E8au0HO/6IDC7pp59aJDk38/MBduQby8AOl/YgWnZ8Y=
Subject key identifier: F6:6A:76:CE:40:D7:7E:66:A7:49:6A:03:45:DC:5C:54:CA:86:BF:36
Authority key identifier: CF:B7:51:91:97:88:66:F1:FC:97:F5:23:C7:DD:A4:0A:88:F7:E7:77
Certificate issuer: /CN=cfb75191978866f1fc97f523c7dda40a88f7e777
Certificate serial: 019E3DC0758E28DA3202EC1722041492A452
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z7dRkZeIZvH8l_Ujx92kCoj353c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.mft
Manifest number: 118E
Signing time: Tue 19 May 2026 01:01:23 +0000
Manifest this update: Tue 19 May 2026 01:01:23 +0000
Manifest next update: Wed 20 May 2026 01:01:23 +0000
Files and hashes: 1: m0gmPNIgnPQiOcpSUIvNpyX690M.roa (hash: CpJvjfUdN7rFRz32OhTizxDvTNJv8yNfGS+CrGfqROI=)
2: z7dRkZeIZvH8l_Ujx92kCoj353c.crl (hash: INPazCgu3jcQGPhEfqfGkOmmFzO81JCXZDpYg+Gqq7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.mft
rsync://rpki.ripe.net/repository/DEFAULT/z7dRkZeIZvH8l_Ujx92kCoj353c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 20 May 2026 01:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:3d:c0:75:8e:28:da:32:02:ec:17:22:04:14:92:a4:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfb75191978866f1fc97f523c7dda40a88f7e777
Validity
Not Before: May 19 01:01:23 2026 GMT
Not After : May 20 01:01:23 2026 GMT
Subject: CN=f66a76ce40d77e66a7496a0345dc5c54ca86bf36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:12:22:45:25:84:fc:fd:9e:99:98:3a:09:ec:
4f:1b:2d:4b:5f:9f:2a:67:65:5a:1c:26:3f:c3:20:
35:6e:67:fa:c4:22:f6:a0:88:30:4c:52:79:97:f1:
1a:3d:14:f1:66:d2:67:12:4e:10:3e:29:6c:11:5c:
03:9a:8a:de:e5:a0:82:52:37:36:c2:66:90:73:0d:
98:38:55:39:73:cf:2d:08:1b:3e:14:9a:a8:4e:1f:
36:be:41:0f:7f:55:b1:8a:a2:20:27:11:27:d7:aa:
65:29:42:fb:d2:ee:86:5e:13:91:62:0b:35:b8:54:
37:ab:a0:ac:f4:2c:91:b8:23:20:e5:d2:22:e6:eb:
b7:19:a0:0d:ce:0b:c7:ae:49:70:47:5a:14:8e:79:
78:ac:b3:ec:8a:88:e7:3e:45:bf:d4:99:1e:1f:3f:
77:ae:c1:56:38:98:b2:ba:c8:af:db:48:d4:3d:5c:
3c:f0:5e:fe:73:90:2e:ca:09:60:6f:06:71:13:b4:
f0:c7:1b:4c:91:93:32:ce:9b:8d:27:6d:d2:0f:3f:
fd:77:3d:bc:3d:6c:2b:7f:4b:fd:0f:1d:ca:dd:e4:
55:84:46:cb:d7:bc:f2:11:62:5f:a1:96:da:a4:a1:
92:4a:e6:77:49:1c:9c:1a:7f:78:17:cb:6b:79:e8:
b1:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:6A:76:CE:40:D7:7E:66:A7:49:6A:03:45:DC:5C:54:CA:86:BF:36
X509v3 Authority Key Identifier:
keyid:CF:B7:51:91:97:88:66:F1:FC:97:F5:23:C7:DD:A4:0A:88:F7:E7:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z7dRkZeIZvH8l_Ujx92kCoj353c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:bb:cf:ff:47:01:1e:dc:4b:51:bc:cc:11:b1:7a:15:b7:d8:
a1:cd:d0:2a:bf:bf:ca:83:c8:4d:ca:ed:e5:41:6d:57:b0:74:
47:54:8c:c3:af:0a:a3:e0:f5:00:39:ef:2c:ef:46:23:3b:65:
2a:e9:0c:35:1f:fa:06:fb:88:a2:c3:cc:38:72:19:1d:4d:93:
d3:b4:08:e8:92:ee:13:49:e1:5b:a2:b0:4c:9e:75:92:54:7d:
0a:7d:2c:6b:89:1a:e3:46:f2:3e:2f:c8:96:02:ff:28:06:37:
71:f6:be:e7:90:a6:ee:8b:23:a4:d6:2a:f6:0c:9d:4c:77:a6:
94:c4:ac:42:b7:36:85:c9:c7:99:ae:c0:62:dd:99:cf:82:1a:
2d:22:99:8e:61:e7:c8:8b:67:67:84:2d:d2:aa:5a:04:c4:f6:
1a:77:64:9f:b4:f8:8f:c8:c0:4b:f4:7a:68:70:dc:00:ad:5c:
aa:b8:41:c4:5b:05:cc:62:80:73:e1:91:4f:3b:fd:d8:67:f3:
e6:33:95:61:ac:49:ca:49:78:b8:ac:95:40:b9:b9:4d:13:ce:
52:fa:30:90:74:b9:09:62:e0:0b:37:bc:87:d0:e5:7d:88:0c:
fe:0e:c5:0f:59:36:6f:4a:a7:28:5f:83:8f:9b:04:fd:78:50:
f0:69:9d:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ49wHWOKNoyAuwXIgQUkqRSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmYjc1MTkxOTc4ODY2ZjFmYzk3ZjUyM2M3ZGRhNDBhODhm
N2U3NzcwHhcNMjYwNTE5MDEwMTIzWhcNMjYwNTIwMDEwMTIzWjAzMTEwLwYDVQQD
EyhmNjZhNzZjZTQwZDc3ZTY2YTc0OTZhMDM0NWRjNWM1NGNhODZiZjM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRIiRSWE/P2emZg6CexPGy1LX58q
Z2VaHCY/wyA1bmf6xCL2oIgwTFJ5l/EaPRTxZtJnEk4QPilsEVwDmore5aCCUjc2
wmaQcw2YOFU5c88tCBs+FJqoTh82vkEPf1WxiqIgJxEn16plKUL70u6GXhORYgs1
uFQ3q6Cs9CyRuCMg5dIi5uu3GaANzgvHrklwR1oUjnl4rLPsiojnPkW/1JkeHz93
rsFWOJiyusiv20jUPVw88F7+c5AuyglgbwZxE7TwxxtMkZMyzpuNJ23SDz/9dz28
PWwrf0v9Dx3K3eRVhEbL17zyEWJfoZbapKGSSuZ3SRycGn94F8treeixOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPZqds5A135mp0lqA0XcXFTKhr82MB8GA1UdIwQY
MBaAFM+3UZGXiGbx/Jf1I8fdpAqI9+d3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejdkUmtaZUladkg4bF9Vang5MmtDb2ozNTNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9iOTU3NWItYjdjMS00YzVjLTlkYWIt
YzE5OWM3YjRjYWMyLzEvejdkUmtaZUladkg4bF9Vang5MmtDb2ozNTNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS9iOTU3NWItYjdjMS00YzVjLTlkYWItYzE5OWM3YjRjYWMy
LzEvejdkUmtaZUladkg4bF9Vang5MmtDb2ozNTNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALLvP/0cB
HtxLUbzMEbF6FbfYoc3QKr+/yoPITcrt5UFtV7B0R1SMw68Ko+D1ADnvLO9GIztl
KukMNR/6BvuIosPMOHIZHU2T07QI6JLuE0nhW6KwTJ51klR9Cn0sa4ka40byPi/I
lgL/KAY3cfa+55Cm7osjpNYq9gydTHemlMSsQrc2hcnHma7AYt2Zz4IaLSKZjmHn
yItnZ4Qt0qpaBMT2Gndkn7T4j8jAS/R6aHDcAK1cqrhBxFsFzGKAc+GRTzv92Gfz
5jOVYaxJykl4uKyVQLm5TRPOUvowkHS5CWLgCze8h9DlfYgM/g7FD1k2b0qnKF+D
j5sE/XhQ8Gmdgw==
-----END CERTIFICATE-----
Generated at Tue May 19 10:21:41 2026 by rpki-client