Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5ce3dc-03e2-4783-a34c-4375d675fcf3/1/C_z94Kdy-nw-nRn6cHf3AmvXcbI.mft
File: C_z94Kdy-nw-nRn6cHf3AmvXcbI.mft (raw, json)
Hash identifier: eAXe2lnyNGgvmNDckvuyEGlC8OzmsAJ8n2FLf+alnmw=
Subject key identifier: 3F:5A:8A:24:C8:DC:38:62:89:8F:5F:28:B4:22:EA:86:68:C6:ED:B6
Authority key identifier: 0B:FC:FD:E0:A7:72:FA:7C:3E:9D:19:FA:70:77:F7:02:6B:D7:71:B2
Certificate issuer: /CN=0bfcfde0a772fa7c3e9d19fa7077f7026bd771b2
Certificate serial: 019FA228FC2B9344261E48E10E17717AFB34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_z94Kdy-nw-nRn6cHf3AmvXcbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5ce3dc-03e2-4783-a34c-4375d675fcf3/1/C_z94Kdy-nw-nRn6cHf3AmvXcbI.mft
Manifest number: 04AA
Signing time: Mon 27 Jul 2026 06:00:22 +0000
Manifest this update: Mon 27 Jul 2026 06:00:22 +0000
Manifest next update: Tue 28 Jul 2026 06:00:22 +0000
Files and hashes: 1: C_z94Kdy-nw-nRn6cHf3AmvXcbI.crl (hash: 7kHIKs1Yhq9ik8DyJD1codN0BlzD049Qumg84STa2z8=)
2: GTbIIUIo-dUPXDDNc0IDT6FB8t4.roa (hash: 8J7E94r3VGtcxGoE3/Ht7FS8OoqmAYFunNkzFd6kzqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5ce3dc-03e2-4783-a34c-4375d675fcf3/1/C_z94Kdy-nw-nRn6cHf3AmvXcbI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5ce3dc-03e2-4783-a34c-4375d675fcf3/1/C_z94Kdy-nw-nRn6cHf3AmvXcbI.mft
rsync://rpki.ripe.net/repository/DEFAULT/C_z94Kdy-nw-nRn6cHf3AmvXcbI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 06:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:28:fc:2b:93:44:26:1e:48:e1:0e:17:71:7a:fb:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bfcfde0a772fa7c3e9d19fa7077f7026bd771b2
Validity
Not Before: Jul 27 06:00:22 2026 GMT
Not After : Jul 28 06:00:22 2026 GMT
Subject: CN=3f5a8a24c8dc3862898f5f28b422ea8668c6edb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:af:02:0d:c7:cc:22:26:41:66:f4:c5:57:0d:
13:3d:97:8f:3b:ce:22:90:42:fd:0c:49:fe:d4:91:
4b:17:fc:fd:aa:2a:fe:fe:4a:20:90:83:75:2f:4e:
c1:ec:3a:d5:a6:ef:b1:c1:1f:de:19:0d:ac:8e:d2:
67:c5:65:08:0d:fb:88:7b:f3:86:92:97:bd:55:b9:
a6:de:58:7e:59:76:41:af:60:4c:fb:66:d4:1a:c5:
e6:bb:c6:93:63:9a:7f:87:12:c0:ce:93:20:82:52:
a1:2a:af:94:07:75:5a:cd:71:84:63:8d:bb:e1:5c:
7d:5c:b4:d3:e7:7b:bb:70:a8:26:7d:ee:49:e7:49:
1b:f9:ce:72:cb:67:12:a1:d6:9f:72:5e:41:a1:27:
7a:d6:5c:90:75:6e:32:11:c2:10:fb:a1:90:48:ca:
24:73:a9:67:d7:bb:af:af:31:a5:0a:2a:25:dc:37:
9c:08:ab:ee:08:6b:2d:16:b1:d6:a8:79:c7:50:00:
25:ce:5d:46:bd:3c:45:3f:ef:14:a1:a7:b3:1a:35:
16:a6:eb:10:4d:a2:81:ed:f7:79:4c:97:bd:54:8f:
f5:d5:34:b4:96:6e:c1:e4:1e:f0:4c:1f:10:b1:08:
8b:c7:29:66:d0:87:58:ab:d8:f4:79:89:fa:67:a5:
3b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:5A:8A:24:C8:DC:38:62:89:8F:5F:28:B4:22:EA:86:68:C6:ED:B6
X509v3 Authority Key Identifier:
keyid:0B:FC:FD:E0:A7:72:FA:7C:3E:9D:19:FA:70:77:F7:02:6B:D7:71:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_z94Kdy-nw-nRn6cHf3AmvXcbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5ce3dc-03e2-4783-a34c-4375d675fcf3/1/C_z94Kdy-nw-nRn6cHf3AmvXcbI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5ce3dc-03e2-4783-a34c-4375d675fcf3/1/C_z94Kdy-nw-nRn6cHf3AmvXcbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:b8:6d:c5:c1:0a:08:69:a9:6f:41:26:0e:8a:09:37:3b:cc:
c5:e9:f3:51:6f:81:36:a7:f1:3f:3d:1b:b1:43:76:50:28:fb:
c5:6f:d2:47:07:af:5d:89:0d:1a:54:32:75:55:ad:f5:a7:c3:
9d:58:ea:8e:16:a4:84:bd:f9:77:bb:12:fb:e2:ac:2a:04:44:
c0:69:fa:07:91:67:f6:fe:f3:24:4b:72:60:e6:d4:3f:3b:7d:
93:16:a2:c3:b5:05:6c:c7:e0:06:d2:da:05:ce:1d:4b:2a:7a:
a6:68:fd:eb:cf:01:d1:87:95:a7:85:7a:96:c6:21:46:b1:cf:
75:16:41:b5:45:58:2d:90:4b:a4:7f:57:14:89:d1:d6:bd:31:
3e:b1:c0:b8:3d:0a:01:7f:a9:bc:2f:9b:5e:9b:ca:4c:e7:3e:
fe:33:45:5d:57:08:e5:d0:ae:30:cb:2e:17:eb:84:6f:fb:91:
5a:75:32:62:e5:70:28:1a:b6:c9:a9:84:3c:93:c8:66:e8:15:
f5:86:ac:69:78:16:b2:11:de:bb:08:bb:ac:2d:a8:24:22:fb:
08:2c:16:09:ab:04:b6:e8:cf:50:03:1c:4e:15:a7:ac:a5:02:
cc:05:e1:2b:d3:7a:b4:45:89:43:ae:60:5f:6f:ff:96:7e:a2:
0b:0e:0c:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 11:35:59 2026 by rpki-client