Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.mft
File: z96Fu9R49ehC9MT42FIl0QDg9N8.mft (raw, json)
Hash identifier: v4/80UUcxiIXKOpFlUDJKp76TJsKJ1GzJrnUxYHHtOg=
Subject key identifier: 51:7B:D2:3B:E3:09:92:0C:CC:DB:54:49:FA:F0:07:04:E0:86:81:64
Authority key identifier: CF:DE:85:BB:D4:78:F5:E8:42:F4:C4:F8:D8:52:25:D1:00:E0:F4:DF
Certificate issuer: /CN=cfde85bbd478f5e842f4c4f8d85225d100e0f4df
Certificate serial: 019F42AD2C0AA2958301068A68B75F1B070F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z96Fu9R49ehC9MT42FIl0QDg9N8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.mft
Manifest number: 17C0
Signing time: Wed 08 Jul 2026 17:01:12 +0000
Manifest this update: Wed 08 Jul 2026 17:01:12 +0000
Manifest next update: Thu 09 Jul 2026 17:01:12 +0000
Files and hashes: 1: AYmY6bS1DW5wNX1gemsinMtxn4A.roa (hash: zRK2sb27i2HJzTqfMswAMQmmf/Cx/9L2B5J6Nm4MQxc=)
2: LmZL7NQJ3CA-ChgOtrMd32jvZBI.roa (hash: IeCaOVu0UoDFXz4huIJasKVw/iNCvSqG8pZqqp+jQ3I=)
3: cjZ33bD33v-eUIybd6UwPNRRpoQ.roa (hash: FLqtX2+FQiCXJcMBU06mRmURivJmg3QovEfaA3JnsmE=)
4: z96Fu9R49ehC9MT42FIl0QDg9N8.crl (hash: kdyf37QfxUJ/RrXORUAbXBClrKzmWtaKq3DMUrKuijQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.mft
rsync://rpki.ripe.net/repository/DEFAULT/z96Fu9R49ehC9MT42FIl0QDg9N8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 13:45:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:42:ad:2c:0a:a2:95:83:01:06:8a:68:b7:5f:1b:07:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfde85bbd478f5e842f4c4f8d85225d100e0f4df
Validity
Not Before: Jul 8 17:01:12 2026 GMT
Not After : Jul 9 17:01:12 2026 GMT
Subject: CN=517bd23be309920cccdb5449faf00704e0868164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4d:10:a7:d0:78:24:4b:51:d3:a5:80:c4:4f:
75:48:e2:f7:e9:09:ea:0b:03:ee:9f:2a:9c:f8:74:
09:02:90:ad:4e:fd:b1:51:96:ac:2a:bc:95:27:77:
68:92:f2:9f:f7:b2:b0:f2:d3:c4:55:de:59:2c:6f:
01:18:48:ca:c5:fe:13:57:d1:de:cc:66:71:2f:35:
57:b8:88:81:fd:4a:b2:1e:ee:62:b9:c2:16:3d:dc:
50:ca:f8:b4:95:7c:de:00:21:8e:57:64:92:16:51:
3b:33:21:bc:76:ee:1e:4f:f1:cc:ec:0c:97:0d:b8:
95:14:e2:a0:ec:d3:6a:21:c6:9a:8f:42:83:27:eb:
8b:dc:59:0e:88:0f:d7:f8:f8:b5:9f:7d:9f:ae:47:
2b:04:83:39:24:01:32:2d:47:64:5c:3d:6e:c5:25:
c6:7b:5e:5e:65:27:4f:10:d9:a9:35:54:49:cc:a2:
87:f4:f5:44:7c:7e:ca:7d:b0:ac:8b:f2:92:99:11:
35:a3:ec:4e:59:0e:4a:83:db:86:54:ef:c0:00:67:
59:68:6a:f8:85:19:34:25:8b:94:17:5d:48:d9:ad:
d5:f4:65:94:1e:56:cb:23:13:ed:f0:50:c3:26:2a:
c2:00:29:6b:ba:ee:d2:21:51:bb:64:89:37:51:24:
b4:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:7B:D2:3B:E3:09:92:0C:CC:DB:54:49:FA:F0:07:04:E0:86:81:64
X509v3 Authority Key Identifier:
keyid:CF:DE:85:BB:D4:78:F5:E8:42:F4:C4:F8:D8:52:25:D1:00:E0:F4:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z96Fu9R49ehC9MT42FIl0QDg9N8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:b7:76:9d:d2:4e:0c:fa:8f:05:fb:29:9c:a7:89:56:a9:14:
ba:08:b8:46:c4:03:ed:e8:ae:39:b5:58:1b:d8:ae:22:79:8c:
ae:aa:bd:f4:d3:54:95:08:1d:b5:31:cf:d0:ce:84:27:c7:36:
21:17:85:ba:b0:0d:36:22:c8:d1:e0:9b:92:3f:da:73:05:2c:
d3:ab:e0:e4:37:ae:99:0f:31:cf:79:12:8d:9e:4b:4c:08:54:
76:5c:8d:6b:e7:6a:21:d3:60:94:67:ac:36:72:6d:29:ba:e6:
33:8e:07:5b:95:21:ff:33:25:04:f9:ce:b0:f5:e8:c7:65:ef:
33:cd:b6:de:ba:fe:b3:19:f7:56:a4:49:19:be:92:e8:8d:d6:
ce:9b:6e:08:8a:73:97:c9:2e:6c:39:61:e3:aa:f0:20:87:e4:
5e:d4:68:10:27:41:ef:ed:39:62:49:4e:79:e3:b2:2c:7c:e9:
f0:1d:1d:f5:2a:3f:e2:d2:94:2a:5a:7c:d3:fd:77:5e:7b:d6:
94:86:6e:81:76:85:cc:8b:3e:a2:f3:90:8f:04:18:2e:66:5b:
b8:b6:58:02:3c:df:53:9d:6c:a2:a1:1f:1d:3b:5c:15:99:17:
ea:52:42:d9:08:34:12:6f:1f:01:9c:e0:54:6d:49:f8:82:65:
e1:c0:4c:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 19:39:27 2026 by rpki-client