Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f7e1f2-5df8-45a4-ae72-54f7453f1033/1/z3gtKHK556EKkaJ_MHAg2pSESCc.mft
File: z3gtKHK556EKkaJ_MHAg2pSESCc.mft (raw, json)
Hash identifier: tvibxk4p26CSGGuDaGtg6SCaHd1YJqF5NW4RqxFI6/M=
Subject key identifier: 76:18:EF:27:BE:F8:2D:28:58:EA:26:62:56:6E:84:E1:03:E5:53:10
Authority key identifier: CF:78:2D:28:72:B9:E7:A1:0A:91:A2:7F:30:70:20:DA:94:84:48:27
Certificate issuer: /CN=cf782d2872b9e7a10a91a27f307020da94844827
Certificate serial: 019FAD8878F684E7415EB997DD02F6311B43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z3gtKHK556EKkaJ_MHAg2pSESCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f7e1f2-5df8-45a4-ae72-54f7453f1033/1/z3gtKHK556EKkaJ_MHAg2pSESCc.mft
Manifest number: 2D
Signing time: Wed 29 Jul 2026 11:00:29 +0000
Manifest this update: Wed 29 Jul 2026 11:00:29 +0000
Manifest next update: Thu 30 Jul 2026 11:00:29 +0000
Files and hashes: 1: MoIvUz5lwZlbNrx3nyA_TUl_A00.roa (hash: FOMLayHG7KjKY5RaWNXk9EZf9JkS/3bo0DSwODGb+Ak=)
2: z3gtKHK556EKkaJ_MHAg2pSESCc.crl (hash: OHPixh74THypojp8P2X6QhR8JRh6EzQajOv7WbuWRSY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f7e1f2-5df8-45a4-ae72-54f7453f1033/1/z3gtKHK556EKkaJ_MHAg2pSESCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/f7e1f2-5df8-45a4-ae72-54f7453f1033/1/z3gtKHK556EKkaJ_MHAg2pSESCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/z3gtKHK556EKkaJ_MHAg2pSESCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:88:78:f6:84:e7:41:5e:b9:97:dd:02:f6:31:1b:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf782d2872b9e7a10a91a27f307020da94844827
Validity
Not Before: Jul 29 11:00:29 2026 GMT
Not After : Jul 30 11:00:29 2026 GMT
Subject: CN=7618ef27bef82d2858ea2662566e84e103e55310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:9f:e7:b7:0f:03:7d:48:c2:97:ee:d1:75:d2:
f1:5e:0d:02:b9:26:7a:e3:29:4e:b3:39:8d:1b:8f:
03:21:1b:16:d2:c8:3a:1b:23:aa:df:59:07:24:e9:
cb:e0:99:6a:b4:6a:a9:3f:8b:9a:87:03:b5:64:a0:
39:b4:f2:5c:c1:f1:88:fd:a8:9b:9b:95:fa:55:f0:
6f:9f:cd:4d:d4:3d:28:5a:da:e9:5e:6f:0d:75:d4:
5f:fe:b1:5a:2b:d7:f0:73:18:33:15:97:40:8b:54:
51:c7:e8:e4:f9:c1:44:b9:5d:31:5f:b2:2c:e9:60:
11:20:d9:b6:24:1a:73:9d:b3:7b:ff:16:3c:44:71:
4f:25:6f:7c:d0:59:bc:59:b0:6d:fb:af:d2:e7:1d:
83:a9:ad:05:f2:e2:05:f0:83:eb:b8:64:b2:32:34:
11:5a:e8:87:3d:4e:a0:4e:9c:31:83:0c:56:2a:bb:
e3:c6:2c:97:13:7c:f3:3c:0d:df:4c:f2:79:c2:23:
44:7d:c5:13:57:e1:bc:eb:3f:e7:d5:7a:77:09:f3:
32:23:c5:a1:ee:43:fb:95:22:5d:71:43:58:8c:5b:
80:b9:df:42:ad:e4:67:71:f0:63:c5:6a:b2:92:ba:
39:3b:5c:f4:3f:9d:33:93:4b:39:03:af:7d:31:d9:
21:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:18:EF:27:BE:F8:2D:28:58:EA:26:62:56:6E:84:E1:03:E5:53:10
X509v3 Authority Key Identifier:
keyid:CF:78:2D:28:72:B9:E7:A1:0A:91:A2:7F:30:70:20:DA:94:84:48:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z3gtKHK556EKkaJ_MHAg2pSESCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f7e1f2-5df8-45a4-ae72-54f7453f1033/1/z3gtKHK556EKkaJ_MHAg2pSESCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f7e1f2-5df8-45a4-ae72-54f7453f1033/1/z3gtKHK556EKkaJ_MHAg2pSESCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:fe:e9:58:ec:81:5d:41:33:86:a5:c5:84:b9:2c:c5:94:68:
7e:59:d6:0b:76:cf:c7:a9:6a:67:bc:0b:07:14:9e:47:16:63:
9f:99:93:c9:1a:46:d7:85:90:b4:ef:b6:a0:79:0c:d1:b2:db:
49:48:e3:09:5d:cd:84:80:15:8e:1e:9d:99:19:5b:b3:1d:bb:
e4:2b:9c:fb:78:81:8c:12:01:34:11:88:01:e9:30:f3:b1:21:
38:22:cd:9d:43:4b:a7:64:a1:6d:a9:f9:b2:f7:73:c4:ac:f7:
d8:0a:56:55:51:af:a4:f8:40:eb:ab:2f:2c:80:12:b0:99:f0:
1f:1f:75:43:fa:19:51:46:d9:71:f3:47:7f:c8:aa:e7:b9:4e:
59:e5:33:5d:d4:ef:b8:22:00:95:3f:3e:a9:0e:49:8c:d8:91:
f3:4d:d3:11:a9:56:96:25:17:16:92:e1:61:8e:dd:bb:83:b6:
e8:2a:d8:26:4b:69:df:43:3c:7e:c9:8d:fd:57:05:e6:3b:23:
fe:3d:1c:ad:50:20:bb:38:6f:9e:f1:2d:5b:93:71:53:49:28:
ff:91:fe:81:b4:07:c4:18:e3:ac:ba:52:e2:4e:06:4f:5a:95:
5e:a6:1e:1f:64:65:e6:e5:9d:48:1c:70:17:ba:38:6e:c5:49:
35:f5:95:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:20:25 2026 by rpki-client