Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/3f33d8-cceb-4506-a2ef-c0ca80a05e2a/1/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.mft
File: z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.mft (raw, json)
Hash identifier: BH3jkFQZdyraBqy/B1T5vtJ8P61MvyXPnOUzFjju5xU=
Subject key identifier: D4:B8:2B:E1:54:BF:87:6A:A1:15:1A:F6:9E:E2:58:19:CF:CA:5B:BC
Authority key identifier: CF:BA:04:3E:1C:4B:52:44:7A:8E:36:7B:BC:13:07:51:9F:A5:FA:E0
Certificate issuer: /CN=cfba043e1c4b52447a8e367bbc1307519fa5fae0
Certificate serial: 019CAA8FACF5B7974EF51F55274C27B00CBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/3f33d8-cceb-4506-a2ef-c0ca80a05e2a/1/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.mft
Manifest number: 131B
Signing time: Sun 01 Mar 2026 18:01:08 +0000
Manifest this update: Sun 01 Mar 2026 18:01:08 +0000
Manifest next update: Mon 02 Mar 2026 18:01:08 +0000
Files and hashes: 1: kvrpde2NkZn_MY5z8yP0kUJPKB0.roa (hash: nyyXOBMDEJmgos3/uP4abipU5IsMQkBb228KURVxjm8=)
2: z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.crl (hash: DVMhZdmswHpGc/1QimT8eUuX3MgDhAOEpsdBHYRDq38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/3f33d8-cceb-4506-a2ef-c0ca80a05e2a/1/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/3f33d8-cceb-4506-a2ef-c0ca80a05e2a/1/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.mft
rsync://rpki.ripe.net/repository/DEFAULT/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:ac:f5:b7:97:4e:f5:1f:55:27:4c:27:b0:0c:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfba043e1c4b52447a8e367bbc1307519fa5fae0
Validity
Not Before: Mar 1 18:01:08 2026 GMT
Not After : Mar 2 18:01:08 2026 GMT
Subject: CN=d4b82be154bf876aa1151af69ee25819cfca5bbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fc:1e:a3:b8:e7:53:9a:b1:d8:44:40:b2:4b:
f3:e9:a4:a3:5b:65:8c:a7:e3:2d:e6:79:79:e9:9f:
0a:13:79:f3:dd:31:44:92:48:b4:fa:b7:f6:37:f5:
e2:be:e9:d6:d6:bb:b1:b4:f5:d0:16:d4:fd:c2:5c:
bd:08:07:37:9f:11:da:fb:1a:b8:f6:84:7f:4d:89:
f7:2d:5a:a3:7a:ef:85:96:04:f6:36:5e:ac:b7:80:
79:3b:f9:0c:6a:12:30:35:69:9b:c2:f5:0c:72:5c:
02:aa:6d:ca:05:55:00:62:71:59:99:f8:b6:56:34:
58:10:c0:0d:1d:da:64:df:bf:91:2b:90:b8:b4:7c:
9f:84:79:90:89:29:23:6d:4c:4d:47:83:76:8b:c9:
31:6d:bf:2d:f1:eb:fb:1f:5b:c6:1d:84:0c:56:6b:
18:f4:97:ef:21:a9:4f:7a:ce:1d:71:ed:4c:f8:8e:
3b:40:2d:dd:7e:02:27:be:74:95:ec:ff:36:8c:3e:
07:23:38:77:29:8f:4f:c7:36:84:a7:93:cd:53:7d:
a3:58:e8:1c:87:38:b5:85:f2:b0:a5:46:dc:01:ba:
0e:19:22:e5:45:6a:89:78:0f:1f:14:b6:3e:b4:8f:
4a:64:62:43:60:f3:fb:eb:db:6e:0b:9a:a8:a2:7f:
64:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:B8:2B:E1:54:BF:87:6A:A1:15:1A:F6:9E:E2:58:19:CF:CA:5B:BC
X509v3 Authority Key Identifier:
keyid:CF:BA:04:3E:1C:4B:52:44:7A:8E:36:7B:BC:13:07:51:9F:A5:FA:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3f33d8-cceb-4506-a2ef-c0ca80a05e2a/1/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3f33d8-cceb-4506-a2ef-c0ca80a05e2a/1/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:47:e2:3f:10:d2:0a:31:62:b3:c0:b3:5a:5f:15:3c:b6:65:
f1:45:77:4c:4b:78:93:96:09:08:56:ef:15:9d:e8:da:cd:88:
f2:83:6f:0e:6c:0e:5f:03:b3:37:1a:7c:da:39:e3:87:57:12:
d0:5c:c4:df:6f:24:3c:17:40:c9:ec:d1:c4:8a:68:1b:9c:53:
53:d3:d2:e8:80:78:d6:39:df:3d:56:cf:83:84:98:b4:36:7a:
da:c1:22:49:ff:0a:96:63:e7:a0:93:dd:42:a1:75:ed:f8:9b:
16:9c:02:dd:88:9b:f8:98:dc:07:8c:fc:df:d9:4f:72:04:d8:
ec:b2:9f:35:ba:4c:3d:49:6b:75:f5:f3:6a:3e:de:a9:44:d2:
6d:57:be:af:2a:b3:19:ad:bf:db:05:51:6b:c2:0e:3d:75:ef:
31:cf:0c:1a:e5:ac:6c:3a:6b:2c:72:b4:07:d3:9b:f2:fc:27:
95:af:de:50:be:5f:8a:3c:4a:f7:4f:a2:d1:fe:93:f2:88:de:
52:b3:df:a3:a7:63:5e:bb:e1:52:f4:2c:3e:32:fe:e4:e8:da:
ef:4f:33:8a:53:89:c0:5d:66:ae:2b:d3:e1:2f:12:4b:58:97:
cf:4e:d0:54:90:73:bf:05:3c:fa:c4:bd:2f:f5:0f:9d:22:bc:
dd:35:a0:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:14:01 2026 by rpki-client