Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.mft
File: zTmPfz1bO4Lc_eyQKwP3M9iV2uc.mft (raw, json)
Hash identifier: CqvLlzmnE+2dHTcSLb5jNO6pfwpM5QMY42VkPGQ3Tzk=
Subject key identifier: F3:F7:3E:79:17:E0:EF:BD:3C:0F:93:AB:8F:C1:65:67:0B:2F:4F:64
Authority key identifier: CD:39:8F:7F:3D:5B:3B:82:DC:FD:EC:90:2B:03:F7:33:D8:95:DA:E7
Certificate issuer: /CN=cd398f7f3d5b3b82dcfdec902b03f733d895dae7
Certificate serial: 019FD203AB76812C81193EE8B7D1CDE6404B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.mft
Manifest number: 0873
Signing time: Wed 05 Aug 2026 13:01:23 +0000
Manifest this update: Wed 05 Aug 2026 13:01:23 +0000
Manifest next update: Thu 06 Aug 2026 13:01:23 +0000
Files and hashes: 1: PtaIwv6j_fRPhVi8J0-7j605lCI.roa (hash: TLTnNugB01FAGr+O6mM1yQs38FDf/1kqzR1LqqRn5tM=)
2: iLYecyNvPLJpQj3efxZOTIWXApk.roa (hash: swdILG30N67hGnJzm85h/2MvOrOT4xu46fpnQjTo9Z8=)
3: zTmPfz1bO4Lc_eyQKwP3M9iV2uc.crl (hash: Sqcai+MXRO4HULNiS9I/1z9fqjwLI/TjmtAjJR/N+XA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Aug 2026 13:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d2:03:ab:76:81:2c:81:19:3e:e8:b7:d1:cd:e6:40:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd398f7f3d5b3b82dcfdec902b03f733d895dae7
Validity
Not Before: Aug 5 13:01:23 2026 GMT
Not After : Aug 6 13:01:23 2026 GMT
Subject: CN=f3f73e7917e0efbd3c0f93ab8fc165670b2f4f64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ad:2d:5e:88:22:8b:b5:61:e4:d5:45:68:0f:
aa:50:08:f0:c6:a0:38:c5:03:df:0e:03:66:23:ed:
83:6f:9c:6b:00:2f:62:c1:0d:e1:26:21:83:07:bf:
56:13:78:9f:8d:ff:e2:38:30:57:d3:88:ca:e3:cf:
7f:f5:18:b7:20:04:71:fe:17:0c:8d:3d:b6:22:d4:
24:5f:0d:56:dd:6e:9a:0f:fa:da:05:ec:d9:40:1c:
29:eb:a0:1c:44:8d:21:95:3f:8e:d9:98:fe:7b:e5:
db:45:e8:7d:13:e9:db:60:77:52:b6:9f:85:e2:fc:
bf:8d:99:57:53:21:df:3e:4d:66:78:4d:c4:b3:1f:
8b:f2:eb:61:d9:bf:1e:fc:cc:77:20:5f:d2:a8:b8:
9c:d8:de:df:40:0e:97:27:fe:8c:3e:b9:a6:0b:4b:
fe:84:ea:4c:71:ee:95:46:e3:e4:13:b8:e3:80:0d:
9d:9d:bc:d3:62:ec:e2:47:12:9d:52:89:07:6c:74:
9e:20:11:cf:4d:e7:fc:6e:e4:0d:05:94:00:a4:4e:
1b:a5:6b:81:37:fe:01:dc:c1:c3:50:22:cb:da:21:
db:ae:a1:9b:80:f5:7d:64:bd:4a:ca:c1:a7:2e:c8:
48:32:95:16:ba:cb:78:2a:2e:97:63:c2:64:9b:94:
c6:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:F7:3E:79:17:E0:EF:BD:3C:0F:93:AB:8F:C1:65:67:0B:2F:4F:64
X509v3 Authority Key Identifier:
keyid:CD:39:8F:7F:3D:5B:3B:82:DC:FD:EC:90:2B:03:F7:33:D8:95:DA:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:90:ba:58:dd:3d:9b:6f:03:1e:aa:6c:3f:a2:88:48:bf:86:
6f:af:b0:2b:6c:09:a7:f7:2d:36:fc:83:2a:11:55:a2:f9:bd:
93:ae:5f:20:9e:a2:c0:f3:02:68:71:3d:6c:0b:ff:9a:a1:ab:
7a:66:90:e7:0f:17:1b:82:da:be:75:ff:1d:e3:04:3e:b4:3e:
57:41:25:56:6e:5d:0f:83:f4:2e:09:53:26:37:c5:b7:68:00:
e5:d7:be:a7:01:2b:ba:da:d7:a7:b8:a2:ed:b1:65:ff:ef:ba:
e7:2b:3f:28:8d:3e:bd:01:d6:ca:b8:56:bb:bc:51:ba:80:ea:
90:a8:45:18:7c:f8:e5:70:1b:5c:1d:64:22:7c:51:89:e1:29:
ed:46:c6:ed:a0:27:82:32:a4:3b:06:28:a4:eb:67:12:a2:7d:
96:00:0c:8f:56:de:0b:c1:d9:fb:10:33:89:7c:e5:7b:64:4a:
9a:98:6a:2a:32:06:c2:4e:72:b3:16:53:c3:47:11:67:de:f9:
fe:19:10:f4:de:e1:d4:77:79:23:e8:43:b2:20:6c:0d:fa:50:
f6:00:f5:72:40:f9:01:f0:25:3c:94:96:65:05:2c:e5:04:25:
77:9e:e1:72:bc:28:f7:96:45:03:72:46:f0:51:20:d1:cb:da:
5b:60:bd:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 5 18:56:53 2026 by rpki-client