Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/3d96f0-4981-4894-882c-6a99c46879ce/1/z2sdziLtzI0bE3M48rfikFxKixI.mft
File: z2sdziLtzI0bE3M48rfikFxKixI.mft (raw, json)
Hash identifier: 6n59OPr05sLb1nrBVztmjZwZvki1J/gV7okpau4kHB0=
Subject key identifier: FE:9D:32:86:7B:78:8A:31:90:4B:20:B9:36:C5:54:E5:FD:2C:55:AE
Authority key identifier: CF:6B:1D:CE:22:ED:CC:8D:1B:13:73:38:F2:B7:E2:90:5C:4A:8B:12
Certificate issuer: /CN=cf6b1dce22edcc8d1b137338f2b7e2905c4a8b12
Certificate serial: 019FCF026D62796F529B56E4518836BC6FEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z2sdziLtzI0bE3M48rfikFxKixI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/3d96f0-4981-4894-882c-6a99c46879ce/1/z2sdziLtzI0bE3M48rfikFxKixI.mft
Manifest number: 19E3
Signing time: Tue 04 Aug 2026 23:01:10 +0000
Manifest this update: Tue 04 Aug 2026 23:01:10 +0000
Manifest next update: Wed 05 Aug 2026 23:01:10 +0000
Files and hashes: 1: CT3dS6C-LLdGxg4ufjXioY_GRbY.roa (hash: 2OWY/qBFg0EKWwzsD1nTcACFUzcmAJDh5fmSfds1Lpc=)
2: z2sdziLtzI0bE3M48rfikFxKixI.crl (hash: CvEpvW9oMkzuUU6IgXY1cbIXJB+oHxOW1d9Pg+G3GY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/3d96f0-4981-4894-882c-6a99c46879ce/1/z2sdziLtzI0bE3M48rfikFxKixI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/3d96f0-4981-4894-882c-6a99c46879ce/1/z2sdziLtzI0bE3M48rfikFxKixI.mft
rsync://rpki.ripe.net/repository/DEFAULT/z2sdziLtzI0bE3M48rfikFxKixI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Aug 2026 23:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cf:02:6d:62:79:6f:52:9b:56:e4:51:88:36:bc:6f:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf6b1dce22edcc8d1b137338f2b7e2905c4a8b12
Validity
Not Before: Aug 4 23:01:10 2026 GMT
Not After : Aug 5 23:01:10 2026 GMT
Subject: CN=fe9d32867b788a31904b20b936c554e5fd2c55ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c0:25:b2:7e:e3:ac:0a:af:62:30:da:82:63:
60:24:e7:9c:67:ee:2c:66:5d:a8:6c:d5:f8:a3:9f:
e2:c7:1d:97:a7:4b:0b:52:48:07:da:f8:ec:cc:4a:
d8:41:37:06:7d:fd:e5:62:7b:5f:7e:93:bb:9e:68:
ba:b2:27:cf:5c:70:27:db:f4:93:9d:b3:de:49:80:
76:0a:9c:1a:61:e3:7e:16:bd:f7:ab:d4:9b:d7:e9:
d8:5e:3f:d0:fb:26:87:43:f0:7c:51:18:18:36:33:
0b:89:93:84:05:6c:f0:5e:a2:af:73:e3:6f:73:99:
3f:5d:84:da:09:5d:7a:ad:17:e1:91:45:41:09:01:
b0:9f:ba:47:1f:02:65:00:63:b0:26:51:30:1f:30:
6c:ca:a7:76:37:88:ac:aa:6d:19:f7:04:d9:65:26:
a0:ab:6f:82:f6:cf:b2:ae:e5:c2:ff:eb:aa:1b:91:
ea:4f:9f:b1:af:ca:47:58:c2:9e:79:71:ee:fe:5a:
b3:28:d5:6f:3c:2d:ef:14:1c:a9:70:97:38:d5:7d:
6b:44:51:63:05:63:fc:ff:47:4e:a7:2a:0f:55:a8:
fe:e0:c5:29:bd:cc:9e:c7:67:3c:d1:99:7c:68:35:
e2:55:6a:20:0b:d5:f5:1a:6b:89:8d:c4:9a:fb:bd:
0f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:9D:32:86:7B:78:8A:31:90:4B:20:B9:36:C5:54:E5:FD:2C:55:AE
X509v3 Authority Key Identifier:
keyid:CF:6B:1D:CE:22:ED:CC:8D:1B:13:73:38:F2:B7:E2:90:5C:4A:8B:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z2sdziLtzI0bE3M48rfikFxKixI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3d96f0-4981-4894-882c-6a99c46879ce/1/z2sdziLtzI0bE3M48rfikFxKixI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3d96f0-4981-4894-882c-6a99c46879ce/1/z2sdziLtzI0bE3M48rfikFxKixI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:2b:8c:06:b3:a6:b2:01:fe:9a:f7:04:5e:bf:9d:7e:5b:0e:
d3:c5:a9:b3:21:7e:4b:b9:8f:ec:7e:f6:e6:3d:7b:74:0f:e6:
b1:d1:14:99:3c:e0:c6:bd:76:4d:51:67:bf:b4:ca:a2:78:4c:
93:99:52:de:ad:bb:a3:fd:f5:11:6a:8f:89:8d:bd:e7:df:3b:
0a:18:8e:e9:2a:e7:3f:4b:ee:e8:85:1b:d1:32:4f:38:fa:62:
97:d6:34:d2:2b:b5:8a:09:50:c0:8e:76:2a:95:7c:30:f5:2a:
d4:ba:d1:e1:ab:b6:32:09:72:fa:df:f2:48:d8:37:77:06:55:
36:b6:c2:b5:9b:95:4e:31:10:df:85:b1:27:3b:b6:0a:57:09:
88:5a:a3:08:9a:f0:10:49:75:77:20:28:29:27:3e:de:86:b9:
ff:a3:23:e6:e5:56:f2:11:51:6c:ad:9e:19:41:18:3f:1d:90:
50:0d:dc:75:7e:d2:0b:36:b3:54:2a:28:73:c0:78:5e:93:94:
01:18:b2:69:e5:92:c1:05:58:f5:9c:ca:38:08:5b:bd:ff:98:
8d:9d:b4:4f:c7:bc:03:57:ef:a1:89:e6:74:3f:2f:ab:4d:01:
d9:33:c4:81:5a:c5:b7:76:30:f5:65:96:02:42:1b:4b:5c:48:
2a:f9:56:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 5 06:50:28 2026 by rpki-client