Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/a8237d-1307-4dfb-aad6-f90b3e5493d4/1/z9LUeU5busDjTJ0BibJu8UcViiM.mft
File: z9LUeU5busDjTJ0BibJu8UcViiM.mft (raw, json)
Hash identifier: ZNK3M8MROMU0FuhW23e17HE32GNugAqv99JMtoKFS/8=
Subject key identifier: 90:A0:2E:B6:BA:79:AF:2B:0C:56:89:9B:98:EF:4F:59:BC:6B:03:A2
Authority key identifier: CF:D2:D4:79:4E:5B:BA:C0:E3:4C:9D:01:89:B2:6E:F1:47:15:8A:23
Certificate issuer: /CN=cfd2d4794e5bbac0e34c9d0189b26ef147158a23
Certificate serial: 019FA7F4298C739285F6A2BE5B06F47F1599
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z9LUeU5busDjTJ0BibJu8UcViiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/a8237d-1307-4dfb-aad6-f90b3e5493d4/1/z9LUeU5busDjTJ0BibJu8UcViiM.mft
Manifest number: 01A5
Signing time: Tue 28 Jul 2026 09:00:24 +0000
Manifest this update: Tue 28 Jul 2026 09:00:24 +0000
Manifest next update: Wed 29 Jul 2026 09:00:24 +0000
Files and hashes: 1: e9ESBbCpXLampxKyfROKHhSNrlQ.roa (hash: tD7v+u/DQGlM+A9s6n4BBi5LAYT9sFcm9HvPxsWUOOU=)
2: pUcV2CDMwVfdHgvxvC-AB5Vhfog.asa (hash: /YYL6jpXO8Tk4JIAMqivU9OX7v7luqvFgZ3LC4roaSQ=)
3: z9LUeU5busDjTJ0BibJu8UcViiM.crl (hash: meKfiJM6qeYHzVeusNLMTTs7jzv39yjXCUTzp5VFjAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/a8237d-1307-4dfb-aad6-f90b3e5493d4/1/z9LUeU5busDjTJ0BibJu8UcViiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/a8237d-1307-4dfb-aad6-f90b3e5493d4/1/z9LUeU5busDjTJ0BibJu8UcViiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/z9LUeU5busDjTJ0BibJu8UcViiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 09:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:f4:29:8c:73:92:85:f6:a2:be:5b:06:f4:7f:15:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfd2d4794e5bbac0e34c9d0189b26ef147158a23
Validity
Not Before: Jul 28 09:00:24 2026 GMT
Not After : Jul 29 09:00:24 2026 GMT
Subject: CN=90a02eb6ba79af2b0c56899b98ef4f59bc6b03a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c1:b2:1a:62:d5:7f:66:fb:58:d7:ff:21:e3:
d1:72:ed:4c:dc:f5:43:89:57:02:98:b8:72:9c:5a:
c9:9c:11:22:d2:33:33:1c:93:66:3d:68:3c:f5:95:
86:ca:cb:98:c5:78:00:6b:a3:be:29:86:e0:a2:9c:
e2:15:51:cb:ba:2e:dd:5c:ed:b3:e5:57:7d:99:de:
8a:ed:f3:3c:4c:a5:7c:77:aa:f4:9f:fe:ed:0d:14:
a4:4e:8c:cb:09:5d:44:69:f8:8c:07:db:9f:47:24:
6b:c7:73:10:e2:5b:dc:d9:b1:97:50:82:d3:b0:08:
a4:e1:e7:24:06:7d:48:01:10:40:55:89:a7:63:d7:
ac:fa:7f:77:e8:c6:c7:fe:2e:53:4f:fd:c6:17:41:
9b:b3:88:a1:04:62:24:1d:70:69:de:50:57:86:73:
1f:c7:13:f4:e3:30:00:f9:f9:75:59:c6:36:42:e6:
76:25:17:77:ee:68:df:58:7b:99:d3:4f:4f:3e:fd:
98:cb:5a:1c:4f:77:77:94:b5:ec:9b:b6:93:09:72:
a5:91:1f:c3:cc:a3:6c:20:fc:48:f5:e1:e0:e6:08:
61:ce:ec:af:38:56:80:f7:f0:0a:17:18:b4:24:88:
a9:4b:10:1c:72:ce:45:b7:97:9e:9c:8b:3e:3d:d8:
77:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:A0:2E:B6:BA:79:AF:2B:0C:56:89:9B:98:EF:4F:59:BC:6B:03:A2
X509v3 Authority Key Identifier:
keyid:CF:D2:D4:79:4E:5B:BA:C0:E3:4C:9D:01:89:B2:6E:F1:47:15:8A:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9LUeU5busDjTJ0BibJu8UcViiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/a8237d-1307-4dfb-aad6-f90b3e5493d4/1/z9LUeU5busDjTJ0BibJu8UcViiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/a8237d-1307-4dfb-aad6-f90b3e5493d4/1/z9LUeU5busDjTJ0BibJu8UcViiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:1b:54:f2:48:e4:8f:7f:a6:89:23:32:4f:d4:7e:4b:cc:dc:
13:9d:87:50:81:ac:eb:74:ab:06:4d:67:3c:fe:c7:06:47:7d:
fb:ad:54:f7:0f:9a:49:e0:89:59:da:ea:20:2b:fd:05:99:81:
73:fa:2e:54:9b:b2:b2:2e:eb:f4:02:45:82:31:04:a1:6a:e3:
40:3c:38:a0:e5:ea:0e:a6:f2:11:8d:f3:b6:e4:f3:bf:6c:4c:
6e:06:ec:8a:a8:3e:b0:5e:3f:63:46:e1:82:44:11:10:e1:6a:
c5:a5:ed:74:42:c0:be:f1:8c:bc:81:86:94:95:31:1f:d0:1a:
e8:ce:2d:8b:13:66:67:d3:4c:9a:2a:b3:ec:c5:f6:e5:96:f3:
c7:40:a0:51:86:cf:42:fc:71:6b:3d:d4:3e:5a:9c:0c:20:aa:
ee:19:52:87:53:95:92:a8:e4:04:f7:ff:6e:05:c2:5c:be:57:
e5:e9:e7:03:48:25:be:0d:a7:b3:0e:ed:03:c7:be:3b:6c:35:
c8:75:d9:f7:9f:97:a2:01:37:b4:f6:ad:22:ba:03:b3:f1:3d:
92:2e:cd:81:e7:3f:4a:b9:d5:40:6a:47:2c:70:b9:4f:4f:76:
13:5d:14:73:d0:f0:f9:cc:3e:11:23:c1:e8:0d:c8:ce:20:b6:
ab:52:4e:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:47:21 2026 by rpki-client