Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.mft
File: z6loMZ1yqYp1lAAzi3D9xniRLeY.mft (raw, json)
Hash identifier: 80/9QKNJCkXX7VGX/gqfyOqbTK7XO/6T0U+O2AqhSiI=
Subject key identifier: 35:A5:10:E2:07:F7:5E:62:62:3E:A7:1C:AF:41:84:73:69:42:A0:D0
Authority key identifier: CF:A9:68:31:9D:72:A9:8A:75:94:00:33:8B:70:FD:C6:78:91:2D:E6
Certificate issuer: /CN=cfa968319d72a98a759400338b70fdc678912de6
Certificate serial: 019FAB9A9259D78149D9AEA2E46EC39F4382
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z6loMZ1yqYp1lAAzi3D9xniRLeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.mft
Manifest number: 19D9
Signing time: Wed 29 Jul 2026 02:01:01 +0000
Manifest this update: Wed 29 Jul 2026 02:01:01 +0000
Manifest next update: Thu 30 Jul 2026 02:01:01 +0000
Files and hashes: 1: 6Ep4JB6joSkE2HYaEIb1LFsZbgY.roa (hash: SqDePBtTD8XjhS8RPU2gNtHpu8bEH14qQE6MxK5aj78=)
2: z6loMZ1yqYp1lAAzi3D9xniRLeY.crl (hash: AGUNvwi2mnAsXTPXo+JjYI+8jHpC4vJ+IjMqBGMVSKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/z6loMZ1yqYp1lAAzi3D9xniRLeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:9a:92:59:d7:81:49:d9:ae:a2:e4:6e:c3:9f:43:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfa968319d72a98a759400338b70fdc678912de6
Validity
Not Before: Jul 29 02:01:01 2026 GMT
Not After : Jul 30 02:01:01 2026 GMT
Subject: CN=35a510e207f75e62623ea71caf4184736942a0d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:62:b0:3b:46:c5:81:28:b6:8c:45:64:5b:82:
c4:0f:6f:9f:e7:d7:40:21:d4:eb:69:c0:fe:d2:bb:
e9:58:1a:30:7b:d5:b4:4d:19:46:04:58:77:bb:ed:
65:cb:09:ec:5c:47:04:83:62:a0:5d:e9:b3:10:71:
ed:f7:e1:4a:60:61:59:d7:b8:63:e4:6c:de:bb:dc:
a2:f0:8e:b8:87:3d:08:49:45:50:a4:ed:0a:47:96:
3a:db:a3:1f:8b:8a:23:56:3f:17:c1:a9:50:42:ff:
13:d8:7c:db:75:9b:5e:c2:44:0a:03:f1:1c:90:de:
c4:fb:e1:b6:6c:fb:f8:62:11:06:d1:83:21:8a:21:
5a:92:ee:33:14:61:f2:4e:9c:2c:01:dd:20:1b:4e:
85:8a:66:ce:1c:07:6a:ae:39:65:ef:6b:61:4b:33:
94:81:8d:9d:ae:a4:14:0e:6e:05:2a:95:a8:5e:66:
99:29:1d:64:19:e7:07:f8:96:0c:57:17:39:07:ad:
13:1d:f3:26:92:be:a3:ea:51:27:9a:37:fa:59:42:
fb:14:43:5a:ac:2c:88:0c:64:7f:18:1e:6e:28:7a:
4b:36:b6:8f:f9:e9:08:c5:8f:df:f8:9e:e4:e8:97:
9d:f6:41:62:0a:ff:db:61:6f:0c:9d:04:c0:7d:bb:
6e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:A5:10:E2:07:F7:5E:62:62:3E:A7:1C:AF:41:84:73:69:42:A0:D0
X509v3 Authority Key Identifier:
keyid:CF:A9:68:31:9D:72:A9:8A:75:94:00:33:8B:70:FD:C6:78:91:2D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z6loMZ1yqYp1lAAzi3D9xniRLeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:f9:67:56:a0:6c:46:93:81:47:0a:f9:c2:99:e6:9a:7a:64:
05:8e:c7:ce:cf:e0:31:a9:1b:fb:ce:ad:8f:93:08:95:91:9f:
4a:3d:84:9e:1d:e8:59:59:ec:ac:68:ce:35:2f:f7:30:5e:b4:
c7:0e:30:7e:15:16:ef:9b:f8:00:97:30:e9:eb:52:48:53:66:
69:af:f9:bb:4e:8c:7e:cf:5d:09:cc:5e:2c:ba:21:2b:64:9d:
d2:93:1b:0f:76:df:fb:4e:6c:c0:74:12:6c:f1:b4:48:67:54:
cd:09:51:f0:69:8f:8a:86:f6:6f:23:06:cd:61:1e:9d:4e:0c:
b6:6b:8a:c4:00:47:51:3a:75:6e:c5:bb:fe:b8:07:57:ea:ab:
07:8a:b9:7c:2a:00:36:ba:05:fc:b6:9e:03:55:7d:b1:90:0c:
1f:10:03:4d:b7:81:4d:2a:5b:b3:ed:80:60:02:b0:7a:f8:fc:
ab:4d:51:0c:be:9f:03:ff:25:b5:2c:73:e1:eb:f9:93:4f:73:
b3:12:cc:5b:98:df:16:2d:a0:85:6c:8d:6e:27:91:f5:63:49:
a0:27:0a:d6:c1:db:47:03:cd:b8:da:54:92:c6:6e:72:30:b4:
88:a3:9a:e7:ab:96:c0:72:e8:42:89:32:62:74:18:f4:17:eb:
35:f7:e3:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:33:05 2026 by rpki-client