Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/976925-2551-4b2b-900a-e111f322636a/1/z8TCrjOIRe_ngC3uwjTq4_e5XzE.mft
File: z8TCrjOIRe_ngC3uwjTq4_e5XzE.mft (raw, json)
Hash identifier: qzd6qvgbDRw/rSIjhcv3fnBnfl0e0kO8nBoVeaL+oOI=
Subject key identifier: 7E:96:EC:64:F1:2A:33:8D:0C:C8:A8:05:5F:23:7E:0A:FD:EE:83:15
Authority key identifier: CF:C4:C2:AE:33:88:45:EF:E7:80:2D:EE:C2:34:EA:E3:F7:B9:5F:31
Certificate issuer: /CN=cfc4c2ae338845efe7802deec234eae3f7b95f31
Certificate serial: 019FAA510A5518DD23017D9771DB2486F1C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8TCrjOIRe_ngC3uwjTq4_e5XzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/976925-2551-4b2b-900a-e111f322636a/1/z8TCrjOIRe_ngC3uwjTq4_e5XzE.mft
Manifest number: 03CC
Signing time: Tue 28 Jul 2026 20:01:05 +0000
Manifest this update: Tue 28 Jul 2026 20:01:05 +0000
Manifest next update: Wed 29 Jul 2026 20:01:05 +0000
Files and hashes: 1: HfBJ2Nut_YAQuWjhDmP8H2eMvJ8.roa (hash: qlvHpaLVzXcUtxyLFD8U+1k01vVLX6TwfsOJYC4Ocds=)
2: z8TCrjOIRe_ngC3uwjTq4_e5XzE.crl (hash: K2vxlklnGjgo15sRE+aN2f6sS7porf2pq7XpxKINyvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/976925-2551-4b2b-900a-e111f322636a/1/z8TCrjOIRe_ngC3uwjTq4_e5XzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/976925-2551-4b2b-900a-e111f322636a/1/z8TCrjOIRe_ngC3uwjTq4_e5XzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/z8TCrjOIRe_ngC3uwjTq4_e5XzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:51:0a:55:18:dd:23:01:7d:97:71:db:24:86:f1:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfc4c2ae338845efe7802deec234eae3f7b95f31
Validity
Not Before: Jul 28 20:01:05 2026 GMT
Not After : Jul 29 20:01:05 2026 GMT
Subject: CN=7e96ec64f12a338d0cc8a8055f237e0afdee8315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f3:b2:65:67:9d:5d:f4:75:83:75:4b:c0:f9:
05:7e:f6:24:1e:ed:ab:d5:91:bc:b0:ca:49:e2:78:
4f:e4:1a:27:c2:75:2c:f4:47:9a:b7:03:d3:02:b0:
85:86:8d:68:66:bc:c7:01:ac:22:35:66:de:91:11:
80:fe:f5:b5:f8:3c:db:fd:83:e4:b2:e6:7d:5b:8b:
ca:eb:09:1e:91:58:2e:86:61:bb:0e:d5:4d:2e:5c:
2b:5e:11:bc:35:73:32:a0:04:1e:dc:dd:97:2e:d3:
45:40:9d:3d:ec:be:39:70:f6:ff:24:da:f0:d9:90:
91:de:23:a3:3a:c5:44:2a:bf:93:3a:30:84:94:7a:
71:40:bd:1d:c7:0b:1e:bd:50:f2:b0:ea:24:bf:f9:
74:3c:a9:6c:20:6d:5c:aa:e6:8f:d9:ea:ce:ca:ec:
15:f9:d3:27:24:e1:0f:13:a9:76:84:43:c2:0a:73:
24:34:e7:74:f8:86:07:c0:57:41:bf:80:7c:67:b1:
b4:7d:c8:80:62:a1:80:01:6a:c2:07:d6:02:f3:02:
c2:98:8c:2c:21:0e:93:07:f0:2d:b2:51:77:88:18:
cf:e8:09:7a:aa:8e:d3:39:4a:71:3a:a7:53:8d:ef:
bc:3c:84:6f:bc:1c:57:33:32:8c:53:e8:86:23:47:
36:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:96:EC:64:F1:2A:33:8D:0C:C8:A8:05:5F:23:7E:0A:FD:EE:83:15
X509v3 Authority Key Identifier:
keyid:CF:C4:C2:AE:33:88:45:EF:E7:80:2D:EE:C2:34:EA:E3:F7:B9:5F:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8TCrjOIRe_ngC3uwjTq4_e5XzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/976925-2551-4b2b-900a-e111f322636a/1/z8TCrjOIRe_ngC3uwjTq4_e5XzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/976925-2551-4b2b-900a-e111f322636a/1/z8TCrjOIRe_ngC3uwjTq4_e5XzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:5e:b6:7f:9a:18:e1:f3:5e:19:09:76:4b:a2:ca:5a:90:47:
b2:76:74:45:13:1f:ee:df:6d:df:cc:49:f8:d8:b0:9d:86:66:
f6:94:c4:d5:e9:07:73:e5:c6:4d:74:26:50:19:07:4f:0e:ac:
88:b4:c1:b8:41:ec:3a:9f:6d:49:08:8b:4c:a9:29:7b:3d:56:
06:95:7a:95:08:32:de:4d:ab:c0:a1:ef:6e:e6:e0:5e:b0:9e:
ec:04:d4:13:75:a1:1e:7e:10:31:83:80:79:11:63:c1:28:73:
70:b4:36:0a:f8:5e:92:53:c0:d2:a3:b1:95:6b:34:47:8b:60:
7b:ee:74:1c:f2:57:8b:93:f0:7f:20:b8:a9:fd:0d:29:f2:af:
42:c3:55:97:69:61:a8:c9:24:d9:c6:c1:9d:93:4c:bd:33:1c:
7f:69:53:e0:6a:75:99:c3:9a:00:a0:f1:b4:8f:3d:60:35:ab:
f5:15:69:31:eb:9b:14:f9:6e:9c:82:1d:3b:e2:c9:29:8f:71:
b2:3f:73:3a:b1:82:dd:33:19:6b:44:a7:5b:fd:a6:b9:48:ee:
0d:56:8f:f1:2a:6e:32:65:fa:ef:75:26:bc:3a:0d:95:dc:38:
cf:4a:28:de:c7:2d:80:ca:a2:4f:61:60:70:87:39:d8:50:9b:
1a:f1:98:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:39:18 2026 by rpki-client