Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/66c029-68de-4334-b92c-5e17a62231b5/1/z9tEWe8iRa2EkR7v4IdafZM1xdg.mft
File: z9tEWe8iRa2EkR7v4IdafZM1xdg.mft (raw, json)
Hash identifier: kwiK76MguKQ++0xNtMqca6tysdIfeUileFgRTiVt2+o=
Subject key identifier: 7C:78:7A:45:4A:5D:80:A5:78:2E:C6:D4:F1:1D:84:BC:8B:05:94:CD
Authority key identifier: CF:DB:44:59:EF:22:45:AD:84:91:1E:EF:E0:87:5A:7D:93:35:C5:D8
Certificate issuer: /CN=cfdb4459ef2245ad84911eefe0875a7d9335c5d8
Certificate serial: 019FA899D7A3D07DB3F160E6B927B5791494
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z9tEWe8iRa2EkR7v4IdafZM1xdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/66c029-68de-4334-b92c-5e17a62231b5/1/z9tEWe8iRa2EkR7v4IdafZM1xdg.mft
Manifest number: 4C
Signing time: Tue 28 Jul 2026 12:01:22 +0000
Manifest this update: Tue 28 Jul 2026 12:01:22 +0000
Manifest next update: Wed 29 Jul 2026 12:01:22 +0000
Files and hashes: 1: 5Ne0J2AnsBb3KqrsSaZmYRS_sJ8.asa (hash: tSOxg/159dhYNU00jXQeCM0SgZ81uaakuIVv4gHhNvQ=)
2: z9tEWe8iRa2EkR7v4IdafZM1xdg.crl (hash: 7U/fZFVzxnXFwUoilHpj8DjBETyr5v0TEXjXuqgL1Z4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/66c029-68de-4334-b92c-5e17a62231b5/1/z9tEWe8iRa2EkR7v4IdafZM1xdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/66c029-68de-4334-b92c-5e17a62231b5/1/z9tEWe8iRa2EkR7v4IdafZM1xdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/z9tEWe8iRa2EkR7v4IdafZM1xdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:d7:a3:d0:7d:b3:f1:60:e6:b9:27:b5:79:14:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfdb4459ef2245ad84911eefe0875a7d9335c5d8
Validity
Not Before: Jul 28 12:01:22 2026 GMT
Not After : Jul 29 12:01:22 2026 GMT
Subject: CN=7c787a454a5d80a5782ec6d4f11d84bc8b0594cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:95:b6:c9:a4:62:40:1a:e3:fa:91:f9:37:31:
8d:1a:4c:94:2e:17:cd:e5:33:3c:c3:06:6b:86:43:
d3:2b:d0:55:4f:46:5c:0a:88:f7:a7:7e:a6:f7:e0:
0e:80:26:17:98:a6:01:0c:3e:aa:ea:4c:e0:37:02:
b3:9d:0a:53:39:fc:1f:b2:7f:f4:b6:14:4c:f8:51:
9b:3c:e3:60:8e:e2:66:ff:b2:9f:0c:c8:22:78:84:
1a:86:9c:0d:56:c4:04:c3:8c:d5:e0:3e:29:7c:2d:
63:63:de:59:45:77:d5:33:e2:53:48:84:b1:53:1b:
0d:cb:ff:59:0d:c8:6d:40:22:01:c6:52:78:da:c8:
3e:bf:c7:7e:f0:76:38:50:63:bb:e6:03:89:dc:98:
82:1c:f8:da:38:ec:60:20:94:52:8a:c2:c8:2b:db:
1e:fa:1f:56:0d:94:74:ab:c8:6a:bf:af:c0:29:73:
74:66:5b:12:61:b9:6b:dd:d2:4c:18:67:96:db:b9:
1a:fe:10:14:f9:98:db:b6:bb:e3:ca:fb:de:68:7f:
fc:d4:85:b7:39:e9:5c:b6:c3:2c:6d:66:7b:3f:b9:
6c:86:70:e8:fd:45:5d:c4:7f:b5:db:c9:35:a1:9c:
8f:59:dd:22:16:84:d0:af:5a:d2:63:b5:30:97:b3:
02:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:78:7A:45:4A:5D:80:A5:78:2E:C6:D4:F1:1D:84:BC:8B:05:94:CD
X509v3 Authority Key Identifier:
keyid:CF:DB:44:59:EF:22:45:AD:84:91:1E:EF:E0:87:5A:7D:93:35:C5:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9tEWe8iRa2EkR7v4IdafZM1xdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/66c029-68de-4334-b92c-5e17a62231b5/1/z9tEWe8iRa2EkR7v4IdafZM1xdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/66c029-68de-4334-b92c-5e17a62231b5/1/z9tEWe8iRa2EkR7v4IdafZM1xdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:a1:fe:bf:4e:e5:58:8e:b3:d9:1b:9d:96:77:69:54:47:4a:
d9:68:97:d0:30:fe:52:25:ab:a6:20:43:23:0c:04:ac:0a:eb:
56:b8:24:08:08:88:0c:d9:73:fd:70:6e:52:2f:14:8c:fd:78:
21:06:05:17:b8:8a:e6:29:1e:4e:88:1d:45:71:56:57:dc:8e:
a1:6b:63:df:7c:ea:fc:56:92:e3:6e:51:52:e4:65:2a:4c:d3:
45:9e:a2:52:3f:b1:d2:3b:fd:14:40:3c:e4:a6:20:60:65:05:
04:14:60:44:74:43:bc:d3:2b:8b:d6:8d:69:d1:19:73:5d:9a:
2f:53:58:c9:b7:13:6f:10:51:6f:44:5f:b1:c6:28:09:e0:e8:
1d:c4:b1:ba:17:03:6d:c4:7c:fb:61:80:51:bb:3f:19:60:ca:
fd:50:5c:48:91:e8:a5:f9:30:9f:4d:21:bd:73:36:9e:9e:91:
a2:83:0c:b8:7c:85:1b:38:31:6f:c1:84:73:bc:88:50:56:d7:
c8:3a:ea:54:7c:dd:76:3e:f7:e5:de:54:90:8c:ad:ad:2d:aa:
d9:6a:77:fa:bc:a1:66:06:81:b1:4e:70:c9:8f:8a:6b:28:af:
0a:39:9a:e4:6c:ea:80:9a:06:8d:fd:aa:e9:3b:64:1f:27:72:
e6:e1:3e:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:49:11 2026 by rpki-client