Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/3f33d8-cceb-4506-a2ef-c0ca80a05e2a/1/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.mft
File: z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.mft (raw, json)
Hash identifier: OlpzwiGzab8WfaA05Gt4/KAfUQzJH92T7EDd/YBYUC0=
Subject key identifier: 09:01:17:1E:37:4B:49:F1:71:1C:68:3D:97:02:1A:EE:93:B4:BC:33
Authority key identifier: CF:BA:04:3E:1C:4B:52:44:7A:8E:36:7B:BC:13:07:51:9F:A5:FA:E0
Certificate issuer: /CN=cfba043e1c4b52447a8e367bbc1307519fa5fae0
Certificate serial: 019D981872A10F6930C7476FF4FA6D9968C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/3f33d8-cceb-4506-a2ef-c0ca80a05e2a/1/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.mft
Manifest number: 1396
Signing time: Thu 16 Apr 2026 21:00:32 +0000
Manifest this update: Thu 16 Apr 2026 21:00:32 +0000
Manifest next update: Fri 17 Apr 2026 21:00:32 +0000
Files and hashes: 1: kvrpde2NkZn_MY5z8yP0kUJPKB0.roa (hash: nyyXOBMDEJmgos3/uP4abipU5IsMQkBb228KURVxjm8=)
2: z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.crl (hash: 7r6Ov6NjlgeH96jaqnlstWT1sxaCSWjJ0IOuEH9Lr2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/3f33d8-cceb-4506-a2ef-c0ca80a05e2a/1/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/3f33d8-cceb-4506-a2ef-c0ca80a05e2a/1/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.mft
rsync://rpki.ripe.net/repository/DEFAULT/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:72:a1:0f:69:30:c7:47:6f:f4:fa:6d:99:68:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfba043e1c4b52447a8e367bbc1307519fa5fae0
Validity
Not Before: Apr 16 21:00:32 2026 GMT
Not After : Apr 17 21:00:32 2026 GMT
Subject: CN=0901171e374b49f1711c683d97021aee93b4bc33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:52:96:e3:fc:f0:7b:25:50:ff:97:0f:1a:c7:
0b:6d:3d:2a:b8:f4:e6:54:c4:1d:86:63:fa:00:0e:
b8:78:bd:32:8c:71:82:77:40:2d:b2:91:df:b0:bf:
be:0a:a6:9a:ea:36:50:06:52:ae:e6:81:2a:e1:b5:
5e:3c:61:d3:dc:5d:59:30:80:0d:c6:d6:e2:b2:ee:
07:7f:2d:df:ad:37:28:7d:86:80:e5:bc:c1:f7:46:
61:22:34:6b:2a:a9:a6:bb:63:28:8e:b0:c7:20:de:
0d:22:8b:94:80:ef:df:96:75:ca:e5:23:3e:4e:bc:
11:1a:e7:0d:53:ad:02:12:d7:82:55:e4:01:0e:24:
df:9d:b9:fe:82:d1:4e:23:d8:25:9e:54:68:99:30:
a6:21:35:2e:0f:0c:dd:d2:b5:a4:ed:9f:5c:ba:47:
b9:a0:e7:ae:bd:df:d3:09:ee:49:49:d9:0f:64:11:
33:d1:fa:b1:96:6e:4b:20:ab:18:31:3c:80:4d:e6:
d6:f4:1c:5a:59:76:32:a1:b0:97:62:78:4e:1e:f6:
d3:f2:7a:2b:82:5c:a1:06:c9:f8:84:a2:c7:c9:4d:
41:aa:b5:16:44:8c:6a:d1:0d:84:d1:7b:da:81:61:
ca:42:db:d4:47:a0:78:ff:70:53:39:2c:24:c1:58:
60:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:01:17:1E:37:4B:49:F1:71:1C:68:3D:97:02:1A:EE:93:B4:BC:33
X509v3 Authority Key Identifier:
keyid:CF:BA:04:3E:1C:4B:52:44:7A:8E:36:7B:BC:13:07:51:9F:A5:FA:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3f33d8-cceb-4506-a2ef-c0ca80a05e2a/1/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3f33d8-cceb-4506-a2ef-c0ca80a05e2a/1/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:6e:74:bf:7a:a0:78:b3:bd:b6:40:0c:48:72:33:7c:9e:97:
a3:23:b9:21:2c:3d:da:8b:1d:7d:2e:25:c6:40:52:a5:4f:41:
bb:da:b0:b5:34:98:3f:35:3f:25:27:1b:b8:2e:53:66:01:00:
94:12:bc:9c:87:7f:33:6e:30:fa:67:28:a1:f8:11:1e:8f:f7:
c7:73:b0:12:10:f6:d9:4a:52:00:f1:a9:db:a1:2f:ba:27:f6:
7c:c5:a8:99:39:5b:7f:9a:90:03:d7:12:2a:55:b8:67:a0:72:
6b:d6:37:3c:8d:16:43:b6:64:cb:5e:fe:f8:e6:fc:d1:87:cb:
07:99:f9:39:b8:3c:9c:8e:92:0d:f7:6e:eb:2a:f7:2a:d0:81:
d3:c6:61:61:90:d7:d0:52:1c:bc:c9:fc:1f:b3:ac:41:03:2d:
a9:63:6c:ca:45:4c:14:d1:73:51:34:a7:83:19:16:2e:4b:c7:
8b:41:2a:89:41:1a:b4:83:71:d6:05:bd:6a:ba:52:89:7a:fb:
56:ac:e4:56:43:60:82:54:f6:ac:aa:ec:a1:92:c6:88:c9:cc:
da:24:6e:e8:51:c8:85:48:76:b1:e0:f7:67:1f:94:56:65:b2:
26:22:b7:e8:24:17:de:3e:c3:0f:d9:ed:ad:41:ba:b4:5e:f0:
64:c9:47:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:55:22 2026 by rpki-client