Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/34471f-0baf-433b-b86a-acd742fe0986/1/z6jgKeXx6FsRFss9M8haObsslNE.mft
File: z6jgKeXx6FsRFss9M8haObsslNE.mft (raw, json)
Hash identifier: Q3vmfg0fQrpgQ08uYTl6sQ/W+ywP3rTGZS5je6xbOLI=
Subject key identifier: 21:0E:BA:F2:9A:2A:B6:A0:D9:EB:61:FC:B4:87:2A:B4:54:D5:B7:9B
Authority key identifier: CF:A8:E0:29:E5:F1:E8:5B:11:16:CB:3D:33:C8:5A:39:BB:2C:94:D1
Certificate issuer: /CN=cfa8e029e5f1e85b1116cb3d33c85a39bb2c94d1
Certificate serial: 019FA0DFAD0C08914D203DFD75D24594678C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z6jgKeXx6FsRFss9M8haObsslNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/34471f-0baf-433b-b86a-acd742fe0986/1/z6jgKeXx6FsRFss9M8haObsslNE.mft
Manifest number: 48
Signing time: Mon 27 Jul 2026 00:00:41 +0000
Manifest this update: Mon 27 Jul 2026 00:00:41 +0000
Manifest next update: Tue 28 Jul 2026 00:00:41 +0000
Files and hashes: 1: O-XgWvQ8KfMzfm8gFlpAQg2Xmkk.roa (hash: +cSVPrrZGE0RG6ua3kDeP5fHxWhOEOv6pgh3gSfnwNo=)
2: lUVl9Benklpiw6Ylck0dSuxSo-Q.roa (hash: p2ACt84JdaKlgpHAL/YLec1OeIXMp63TXCMnSlAEvAw=)
3: oaqhAz8r6QOEtVOyS7uoPCODlHc.roa (hash: c6tnbsMZPWMkjfAiaVIbYOOTReRqsQcVwvFXobf5RrI=)
4: z6jgKeXx6FsRFss9M8haObsslNE.crl (hash: FqCcuKVjmqs28cp2RAgf5ZNt7M1lLePGh8PkLtSUqvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/34471f-0baf-433b-b86a-acd742fe0986/1/z6jgKeXx6FsRFss9M8haObsslNE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/34471f-0baf-433b-b86a-acd742fe0986/1/z6jgKeXx6FsRFss9M8haObsslNE.mft
rsync://rpki.ripe.net/repository/DEFAULT/z6jgKeXx6FsRFss9M8haObsslNE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 00:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:df:ad:0c:08:91:4d:20:3d:fd:75:d2:45:94:67:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfa8e029e5f1e85b1116cb3d33c85a39bb2c94d1
Validity
Not Before: Jul 27 00:00:41 2026 GMT
Not After : Jul 28 00:00:41 2026 GMT
Subject: CN=210ebaf29a2ab6a0d9eb61fcb4872ab454d5b79b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b4:f7:ff:e9:f4:89:5b:df:8a:31:aa:a7:6c:
61:f6:9a:e5:03:e8:dd:05:e4:f8:c7:76:5d:38:f9:
7b:e0:04:95:d4:e6:2c:a7:5b:e7:d5:54:b1:eb:66:
0a:0d:a5:1f:4c:76:12:05:cc:98:4b:43:b0:1d:17:
55:e9:1a:b9:19:d8:1b:32:8b:92:64:b7:2c:19:5b:
7f:0d:d2:d5:86:6a:70:3f:bc:61:94:fa:f4:57:22:
47:b6:4b:ca:28:8b:e6:c4:1c:d0:75:6a:b6:85:ad:
95:7c:77:81:38:61:40:b8:43:b6:73:d3:51:bb:45:
40:2f:f8:ed:f5:16:e6:18:7e:58:b8:75:15:1d:72:
5d:d0:cd:de:89:3e:2f:96:1b:27:d7:59:a6:c4:fd:
60:16:1b:01:a7:6b:cd:38:62:90:61:b3:d7:36:cb:
9f:a3:38:b3:29:30:44:4a:c4:cb:bd:c8:eb:ef:d2:
09:ed:f9:0f:74:bc:de:29:55:fa:e1:38:33:ee:65:
83:a1:ff:3d:37:18:34:a7:03:ed:f9:f0:82:fe:74:
9e:83:75:10:a2:93:87:bc:16:f8:98:9b:bb:ae:37:
6f:2b:c6:b6:91:a5:c7:5c:e1:97:c1:22:09:9d:f5:
c5:1a:b4:1c:5e:3a:73:cf:fc:5f:86:87:06:77:f0:
93:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:0E:BA:F2:9A:2A:B6:A0:D9:EB:61:FC:B4:87:2A:B4:54:D5:B7:9B
X509v3 Authority Key Identifier:
keyid:CF:A8:E0:29:E5:F1:E8:5B:11:16:CB:3D:33:C8:5A:39:BB:2C:94:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z6jgKeXx6FsRFss9M8haObsslNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/34471f-0baf-433b-b86a-acd742fe0986/1/z6jgKeXx6FsRFss9M8haObsslNE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/34471f-0baf-433b-b86a-acd742fe0986/1/z6jgKeXx6FsRFss9M8haObsslNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:d1:bc:dc:32:63:4c:9f:45:52:ac:b3:0c:fe:74:9a:35:fd:
ec:83:b2:06:ec:58:2f:19:99:f6:0f:94:03:e3:54:fc:04:51:
09:c3:5c:89:6e:a2:15:c5:b1:49:ab:b1:df:33:52:4c:68:e4:
ee:23:20:a5:2d:64:55:4b:ec:fe:b7:99:a5:c6:c5:27:3c:73:
d3:bd:5c:49:86:42:b3:08:2b:b1:f7:ae:9e:fa:7b:c6:e0:33:
ce:a3:e7:d9:5e:ab:91:72:d7:8c:39:be:0b:97:27:d6:8c:1d:
5c:a8:75:c3:86:f3:c2:3c:cf:12:c4:8a:4b:2a:ca:7f:6c:aa:
4b:bd:5f:62:37:f5:fc:44:9a:56:44:9e:24:b2:55:a0:9e:27:
0d:60:a5:da:70:56:58:f8:26:74:81:c1:c6:9a:2f:08:e6:66:
30:2d:58:05:6f:1c:ee:79:9e:0e:d4:f3:9b:85:92:d7:13:33:
ac:35:e7:3f:3c:ed:74:90:44:a7:59:47:97:83:62:04:4b:de:
be:6b:c0:44:ba:20:23:ad:53:08:7c:df:11:b5:79:3f:e5:83:
18:6f:9a:2a:7e:92:c2:f3:d1:66:0b:ef:4d:4d:41:5f:2c:59:
53:e2:46:9a:e0:05:97:88:d2:8e:0d:8d:1f:af:9f:6a:6f:bb:
ac:4b:a7:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:10:23 2026 by rpki-client