Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/3f33d8-cceb-4506-a2ef-c0ca80a05e2a/1/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.mft
File: z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.mft (raw, json)
Hash identifier: FW5hvO0DDB6+IBF8dVLYxKSylx8DHIKaoQAC0PqgmtU=
Subject key identifier: 61:55:7F:C9:B0:E0:08:3A:D5:E0:1B:16:CE:49:18:46:1C:75:3C:A0
Authority key identifier: CF:BA:04:3E:1C:4B:52:44:7A:8E:36:7B:BC:13:07:51:9F:A5:FA:E0
Certificate issuer: /CN=cfba043e1c4b52447a8e367bbc1307519fa5fae0
Certificate serial: 01A0CEC8A6D71BBF61A48A53164C3BBC0DB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/3f33d8-cceb-4506-a2ef-c0ca80a05e2a/1/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.mft
Manifest number: 1540
Signing time: Wed 23 Sep 2026 15:00:51 +0000
Manifest this update: Wed 23 Sep 2026 15:00:51 +0000
Manifest next update: Thu 24 Sep 2026 15:00:51 +0000
Files and hashes: 1: kvrpde2NkZn_MY5z8yP0kUJPKB0.roa (hash: nyyXOBMDEJmgos3/uP4abipU5IsMQkBb228KURVxjm8=)
2: z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.crl (hash: +ZOdsDLl1oufkkW6rvCN0+uP8J2eJ6Qo0ZLV2pGLMFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/3f33d8-cceb-4506-a2ef-c0ca80a05e2a/1/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/3f33d8-cceb-4506-a2ef-c0ca80a05e2a/1/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.mft
rsync://rpki.ripe.net/repository/DEFAULT/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:c8:a6:d7:1b:bf:61:a4:8a:53:16:4c:3b:bc:0d:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfba043e1c4b52447a8e367bbc1307519fa5fae0
Validity
Not Before: Sep 23 15:00:51 2026 GMT
Not After : Sep 24 15:00:51 2026 GMT
Subject: CN=61557fc9b0e0083ad5e01b16ce4918461c753ca0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:68:dc:62:42:92:4d:5e:cb:ef:0f:12:91:f8:
10:11:5b:a6:cf:37:af:fd:50:c5:66:76:6f:63:f3:
4f:68:60:f9:10:e0:b5:9d:e2:88:0f:2c:49:01:a1:
0b:94:04:3d:f5:50:4c:a1:90:a7:7a:a3:41:e5:b7:
11:64:34:26:62:4a:c7:c7:bc:a3:f1:6a:b0:a6:3d:
13:3d:4a:2a:80:ba:1c:aa:ea:ba:30:da:2a:15:7b:
3f:24:b8:c3:4e:3f:56:df:7d:e8:74:80:78:f9:4c:
4f:e7:4a:05:15:36:0a:01:fd:07:b5:65:a4:47:14:
a5:f3:22:38:88:69:92:89:fe:0a:bf:5c:75:77:a5:
a3:6e:96:0f:20:11:73:4f:2f:3c:19:d2:c1:43:25:
25:c1:b7:c5:d4:1d:24:35:a2:fe:76:42:cd:5e:e4:
9c:86:13:41:30:56:9a:61:28:18:ec:66:a5:46:58:
3c:0d:21:df:e9:46:41:f2:af:de:42:40:ee:8f:1b:
34:1a:6c:5f:ca:1e:58:1d:7b:de:ff:60:ce:69:08:
11:13:c7:4d:35:67:ce:74:14:4f:c6:a5:56:fb:2a:
37:cd:5d:c5:67:18:65:44:cd:eb:c7:bf:bc:cd:f6:
53:0c:07:a7:7a:83:ee:62:d4:4b:7f:f8:ac:8e:d4:
a2:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:55:7F:C9:B0:E0:08:3A:D5:E0:1B:16:CE:49:18:46:1C:75:3C:A0
X509v3 Authority Key Identifier:
keyid:CF:BA:04:3E:1C:4B:52:44:7A:8E:36:7B:BC:13:07:51:9F:A5:FA:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3f33d8-cceb-4506-a2ef-c0ca80a05e2a/1/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3f33d8-cceb-4506-a2ef-c0ca80a05e2a/1/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:fa:53:51:54:23:ca:fe:4a:90:42:17:52:ff:3d:36:91:18:
d4:fb:7f:23:8b:88:bb:13:99:37:b9:87:4d:09:1d:57:53:32:
f8:35:06:8f:e8:a4:1c:8f:07:1a:7f:e9:6a:94:c1:1d:3c:aa:
9a:7f:4c:3f:13:cf:f2:59:50:67:9d:46:4c:6e:33:75:f5:9d:
8d:2a:f9:fc:a8:cf:94:53:cd:af:a4:c0:a9:3e:d7:b7:2f:1b:
ce:cd:1b:de:2d:94:b4:1f:90:9b:78:8b:b2:9c:bc:38:99:e6:
10:3a:f4:54:32:6f:67:dd:9c:7a:10:f7:eb:34:99:4b:03:c7:
20:77:36:99:f1:59:2c:2f:06:9e:dd:f8:bc:ae:91:f3:c5:89:
c8:c2:fd:fc:af:c8:02:df:b5:cf:f8:d0:c7:fc:58:06:99:42:
8a:c3:f4:e1:6e:27:98:e0:74:83:60:af:79:0e:9b:ef:0a:0e:
7c:99:ac:f1:0c:ff:78:a2:d2:6a:9d:62:b4:44:4a:4f:44:fe:
13:e8:23:8f:d0:c9:94:bf:82:fc:03:72:c9:c9:3b:80:02:1e:
3d:46:20:99:da:fc:e8:8a:00:8c:25:a2:f2:97:20:41:f9:4f:
49:da:8b:c6:20:f8:57:59:de:a9:49:fe:13:8e:6f:27:b2:cc:
69:73:de:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDOyKbXG79hpIpTFkw7vA24MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmYmEwNDNlMWM0YjUyNDQ3YThlMzY3YmJjMTMwNzUxOWZh
NWZhZTAwHhcNMjYwOTIzMTUwMDUxWhcNMjYwOTI0MTUwMDUxWjAzMTEwLwYDVQQD
Eyg2MTU1N2ZjOWIwZTAwODNhZDVlMDFiMTZjZTQ5MTg0NjFjNzUzY2EwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2jcYkKSTV7L7w8SkfgQEVumzzev
/VDFZnZvY/NPaGD5EOC1neKIDyxJAaELlAQ99VBMoZCneqNB5bcRZDQmYkrHx7yj
8Wqwpj0TPUoqgLocquq6MNoqFXs/JLjDTj9W333odIB4+UxP50oFFTYKAf0HtWWk
RxSl8yI4iGmSif4Kv1x1d6WjbpYPIBFzTy88GdLBQyUlwbfF1B0kNaL+dkLNXuSc
hhNBMFaaYSgY7GalRlg8DSHf6UZB8q/eQkDujxs0Gmxfyh5YHXve/2DOaQgRE8dN
NWfOdBRPxqVW+yo3zV3FZxhlRM3rx7+8zfZTDAeneoPuYtRLf/isjtSiRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGFVf8mw4Ag61eAbFs5JGEYcdTygMB8GA1UdIwQY
MBaAFM+6BD4cS1JEeo42e7wTB1GfpfrgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejdvRVBoeExVa1I2ampaN3ZCTUhVWi1sLXVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC8zZjMzZDgtY2NlYi00NTA2LWEyZWYt
YzBjYTgwYTA1ZTJhLzEvejdvRVBoeExVa1I2ampaN3ZCTUhVWi1sLXVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC8zZjMzZDgtY2NlYi00NTA2LWEyZWYtYzBjYTgwYTA1ZTJh
LzEvejdvRVBoeExVa1I2ampaN3ZCTUhVWi1sLXVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHfpTUVQj
yv5KkEIXUv89NpEY1Pt/I4uIuxOZN7mHTQkdV1My+DUGj+ikHI8HGn/papTBHTyq
mn9MPxPP8llQZ51GTG4zdfWdjSr5/KjPlFPNr6TAqT7Xty8bzs0b3i2UtB+Qm3iL
spy8OJnmEDr0VDJvZ92cehD36zSZSwPHIHc2mfFZLC8Gnt34vK6R88WJyML9/K/I
At+1z/jQx/xYBplCisP04W4nmOB0g2CveQ6b7woOfJms8Qz/eKLSap1itERKT0T+
E+gjj9DJlL+C/ANyyck7gAIePUYgmdr86IoAjCWi8pcgQflPSdqLxiD4V1neqUn+
E45vJ7LMaXPemQ==
-----END CERTIFICATE-----
Generated at Wed Sep 23 23:21:38 2026 by rpki-client