Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.mft
File: znQefeZX5KEPk8qSxReoGywLJR4.mft (raw, json)
Hash identifier: WoswCIH5+ou/DRYR/s3RJiZp9DiGQ5kzPCLcyWEkM68=
Subject key identifier: 4F:F8:E1:C4:08:E2:18:B4:FA:2F:BA:C3:D0:D6:9C:4E:A3:B9:8F:D2
Authority key identifier: CE:74:1E:7D:E6:57:E4:A1:0F:93:CA:92:C5:17:A8:1B:2C:0B:25:1E
Certificate issuer: /CN=ce741e7de657e4a10f93ca92c517a81b2c0b251e
Certificate serial: 019FA184236B846DA8FDBAE983137E1C1B70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/znQefeZX5KEPk8qSxReoGywLJR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.mft
Manifest number: 0FC3
Signing time: Mon 27 Jul 2026 03:00:19 +0000
Manifest this update: Mon 27 Jul 2026 03:00:19 +0000
Manifest next update: Tue 28 Jul 2026 03:00:19 +0000
Files and hashes: 1: 9As_XsenM5-QTmM1X_BCn4yPeqA.roa (hash: Dxtnn5XYXXhgv4gymsVhkJbLhB4m0DGlBCGRadS6kHQ=)
2: znQefeZX5KEPk8qSxReoGywLJR4.crl (hash: sf+UqVPvfYRBj+sGjBRXh0gimCyKjcSWlQSGXbepUDY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/znQefeZX5KEPk8qSxReoGywLJR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 03:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:84:23:6b:84:6d:a8:fd:ba:e9:83:13:7e:1c:1b:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce741e7de657e4a10f93ca92c517a81b2c0b251e
Validity
Not Before: Jul 27 03:00:19 2026 GMT
Not After : Jul 28 03:00:19 2026 GMT
Subject: CN=4ff8e1c408e218b4fa2fbac3d0d69c4ea3b98fd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c7:0d:fc:ff:15:0d:d2:b7:a1:de:5d:c2:f3:
db:6d:e5:fa:9b:30:4b:35:7e:c6:a1:8a:ae:9f:f1:
99:ae:95:4b:84:32:30:89:07:8b:43:d8:e3:b8:d0:
4f:99:c5:d4:e4:09:36:a7:03:8e:c5:20:ad:c0:6c:
e4:7b:42:3a:a4:cb:34:df:96:2e:c3:25:35:51:d9:
1b:69:1b:cc:a6:3c:9f:fd:de:d9:ec:ed:c1:2d:8d:
2c:0a:9f:3a:8b:f6:2a:33:07:d8:78:b7:cd:0d:88:
18:bf:f0:64:2f:b5:e8:13:76:92:65:43:b2:e6:46:
da:c2:64:8b:47:84:e7:86:1e:78:0b:73:38:14:33:
83:94:ec:63:47:07:5e:65:0e:c2:53:27:d3:f0:6f:
69:01:21:7d:ae:a0:01:42:39:e9:15:22:31:96:25:
79:04:a5:cc:50:12:40:93:83:24:9c:71:7a:d5:bc:
28:a2:41:18:47:38:df:83:82:a0:39:98:a2:10:24:
8a:e8:6d:d7:46:de:07:5f:91:66:dd:05:34:6b:da:
00:f3:63:17:4b:29:04:82:db:d1:7d:97:10:bb:f9:
c9:2e:b9:ec:a8:48:79:26:1b:06:f2:38:1a:65:7d:
91:3f:89:03:6e:48:aa:0e:08:de:89:d3:fe:44:54:
3d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:F8:E1:C4:08:E2:18:B4:FA:2F:BA:C3:D0:D6:9C:4E:A3:B9:8F:D2
X509v3 Authority Key Identifier:
keyid:CE:74:1E:7D:E6:57:E4:A1:0F:93:CA:92:C5:17:A8:1B:2C:0B:25:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znQefeZX5KEPk8qSxReoGywLJR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:50:02:9f:de:a7:82:dc:b7:6f:14:90:76:8a:d5:b9:b7:97:
7e:0d:8d:6c:49:a0:22:08:49:77:c5:c2:a2:f8:3e:68:e2:55:
78:2c:72:82:5f:6f:f7:88:06:6d:fb:f9:cd:23:89:f3:64:c5:
ac:35:e4:62:07:01:b9:24:a2:e4:85:41:b2:b6:3a:d2:c8:95:
0a:78:1d:f9:3e:a2:eb:a5:22:3a:a5:c4:0b:71:33:f3:72:01:
36:43:69:be:6f:b8:d0:c5:71:d0:08:15:00:db:1a:50:c3:9f:
9d:c9:90:47:96:13:dd:f5:da:3c:da:1d:42:01:d3:9d:64:91:
7f:80:7a:7b:c7:de:d9:2b:c0:97:69:17:97:4a:de:53:d6:e9:
0c:f2:8d:6a:49:5c:d2:12:9f:5f:1b:31:c3:c5:1c:3d:84:48:
68:f5:18:4b:43:fc:ce:8f:95:e5:3c:fb:a7:89:f8:db:c2:1e:
e7:7c:70:ef:82:bb:15:4b:68:8e:af:a2:17:52:51:8a:9b:0a:
fc:ef:66:5f:cd:ef:c2:61:e0:e4:be:d6:12:1d:c8:68:63:60:
e9:01:29:42:fb:bd:a8:99:1a:84:13:ce:02:ac:d6:7d:41:d1:
37:f8:06:f1:61:fd:e3:12:c1:76:96:94:81:46:5a:a1:49:f7:
3a:13:3d:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:26:45 2026 by rpki-client