Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/z7XKpN3_v-PgZ_-Ox34VDJivTzU.mft
File: z7XKpN3_v-PgZ_-Ox34VDJivTzU.mft (raw, json)
Hash identifier: BhN3QDbWeiHX5/IoJHPlyD4enQt215/CuRJ3yls6wws=
Subject key identifier: 8D:2C:2F:C2:3F:E6:6C:02:91:5F:38:70:2A:B9:57:A3:9F:14:DC:9E
Authority key identifier: CF:B5:CA:A4:DD:FF:BF:E3:E0:67:FF:8E:C7:7E:15:0C:98:AF:4F:35
Certificate issuer: /CN=cfb5caa4ddffbfe3e067ff8ec77e150c98af4f35
Certificate serial: 019FAC75D01FA5C273DD70CD127D1F12A69C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z7XKpN3_v-PgZ_-Ox34VDJivTzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/z7XKpN3_v-PgZ_-Ox34VDJivTzU.mft
Manifest number: 4E
Signing time: Wed 29 Jul 2026 06:00:29 +0000
Manifest this update: Wed 29 Jul 2026 06:00:29 +0000
Manifest next update: Thu 30 Jul 2026 06:00:29 +0000
Files and hashes: 1: UpQaalpvFrofiBvJgDzD5ykV4Es.roa (hash: htOEHU0XKcxzfErxMNDU5sKxeT/b4gBnMaIIg36jS6Y=)
2: lvL4hmOHFOaf-c2I-4F7EqTFtJs.roa (hash: RhrM1BRru6RaIuVQmbqOxmE3Nat3kjidvWR1T36n9a8=)
3: z7XKpN3_v-PgZ_-Ox34VDJivTzU.crl (hash: uv4uubm1PBJHDkqAWsOEDet7juZ0KLSb82+JdNnjBbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/z7XKpN3_v-PgZ_-Ox34VDJivTzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/z7XKpN3_v-PgZ_-Ox34VDJivTzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/z7XKpN3_v-PgZ_-Ox34VDJivTzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:75:d0:1f:a5:c2:73:dd:70:cd:12:7d:1f:12:a6:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfb5caa4ddffbfe3e067ff8ec77e150c98af4f35
Validity
Not Before: Jul 29 06:00:29 2026 GMT
Not After : Jul 30 06:00:29 2026 GMT
Subject: CN=8d2c2fc23fe66c02915f38702ab957a39f14dc9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a0:ff:0c:03:97:06:c9:5d:38:71:df:82:f7:
2e:ce:35:cb:1f:46:8e:f1:87:f3:42:54:0d:e9:53:
20:4e:31:10:39:e1:bf:db:ce:a3:fe:89:a7:bb:6d:
38:41:ef:64:81:62:3d:d2:25:c4:77:9e:30:00:bd:
5f:41:d2:09:7b:0d:2c:5b:bb:c0:b0:eb:ae:40:da:
d2:2f:e5:a1:22:71:a3:8a:0e:7b:32:00:51:3d:e9:
f1:e1:64:b2:93:c3:4e:9c:fb:13:24:15:9a:82:d3:
54:c5:e5:61:d5:d9:4a:4b:11:23:59:fd:e6:b2:52:
bd:ea:9f:e7:49:67:34:37:67:80:a1:2c:b0:c0:8b:
f5:47:b2:99:cd:4f:07:7d:e0:a5:d4:3c:dd:c2:f3:
7c:d7:28:1b:ab:a7:38:f6:87:7e:1d:0f:d0:0d:43:
02:da:5c:40:6b:74:c6:ba:dc:05:5f:42:ef:7b:11:
44:1e:8f:05:f4:d5:3c:36:2a:9b:4e:b9:3c:1b:36:
9a:a3:f1:ad:02:ca:46:fc:c6:41:43:0d:8c:c7:04:
dd:fe:bd:6c:ef:da:19:7f:9f:a4:2d:d9:69:cc:b2:
75:92:ee:52:5d:46:12:73:1c:36:20:8e:10:e0:af:
9d:02:a3:03:1a:83:1c:de:6a:9a:d8:a5:f5:60:ae:
9f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:2C:2F:C2:3F:E6:6C:02:91:5F:38:70:2A:B9:57:A3:9F:14:DC:9E
X509v3 Authority Key Identifier:
keyid:CF:B5:CA:A4:DD:FF:BF:E3:E0:67:FF:8E:C7:7E:15:0C:98:AF:4F:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z7XKpN3_v-PgZ_-Ox34VDJivTzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/z7XKpN3_v-PgZ_-Ox34VDJivTzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/z7XKpN3_v-PgZ_-Ox34VDJivTzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:70:15:da:7b:1f:ff:47:f0:5b:98:4c:4d:db:da:03:ab:78:
3d:f5:5c:d2:b8:d1:42:2b:8f:5c:aa:a1:ce:b5:c1:51:3e:64:
ed:28:05:96:fb:51:ec:69:c4:87:44:da:39:d6:3e:bf:73:3b:
5b:20:8f:5e:78:d9:41:78:f9:2c:83:43:6a:ed:fd:d6:9f:ca:
aa:7e:b6:55:1d:84:a2:82:f3:10:e9:81:e2:73:a9:e5:2f:dc:
46:d4:d6:28:93:04:2c:42:22:b3:b2:8f:bb:a7:24:ba:e4:d8:
24:44:8f:92:3c:47:71:28:64:f8:4c:a0:3a:d0:aa:7f:48:1d:
3d:44:23:96:32:07:d2:1e:26:62:fb:b0:a7:45:ab:f1:47:f4:
91:f0:0c:d0:d6:6d:97:b6:0e:aa:11:e1:87:cd:b1:39:90:ea:
2b:64:e5:81:92:1b:e0:67:b4:9a:6d:25:b6:d8:30:9e:02:dc:
f5:16:dc:2a:0e:0a:3e:1e:03:4f:19:34:29:a5:bd:93:b4:78:
48:27:a9:fd:65:9d:73:15:d2:00:e9:c7:75:ac:76:6e:75:e4:
41:75:2f:36:f2:da:01:3a:d5:05:e3:e9:70:26:0b:af:cf:dc:
02:16:9d:7d:3f:4e:84:96:5e:cd:05:a7:6f:63:20:47:c7:7c:
bd:be:d8:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+sddAfpcJz3XDNEn0fEqacMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmYjVjYWE0ZGRmZmJmZTNlMDY3ZmY4ZWM3N2UxNTBjOThh
ZjRmMzUwHhcNMjYwNzI5MDYwMDI5WhcNMjYwNzMwMDYwMDI5WjAzMTEwLwYDVQQD
Eyg4ZDJjMmZjMjNmZTY2YzAyOTE1ZjM4NzAyYWI5NTdhMzlmMTRkYzllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKD/DAOXBsldOHHfgvcuzjXLH0aO
8YfzQlQN6VMgTjEQOeG/286j/omnu204Qe9kgWI90iXEd54wAL1fQdIJew0sW7vA
sOuuQNrSL+WhInGjig57MgBRPenx4WSyk8NOnPsTJBWagtNUxeVh1dlKSxEjWf3m
slK96p/nSWc0N2eAoSywwIv1R7KZzU8HfeCl1DzdwvN81ygbq6c49od+HQ/QDUMC
2lxAa3TGutwFX0LvexFEHo8F9NU8NiqbTrk8Gzaao/GtAspG/MZBQw2MxwTd/r1s
79oZf5+kLdlpzLJ1ku5SXUYScxw2II4Q4K+dAqMDGoMc3mqa2KX1YK6f+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI0sL8I/5mwCkV84cCq5V6OfFNyeMB8GA1UdIwQY
MBaAFM+1yqTd/7/j4Gf/jsd+FQyYr081MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejdYS3BOM192LVBnWl8tT3gzNFZESml2VHpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS81MDFmMmItZmQxZi00NWVhLWI0OTQt
ZDczZGM0YjQxY2UxLzEvejdYS3BOM192LVBnWl8tT3gzNFZESml2VHpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS81MDFmMmItZmQxZi00NWVhLWI0OTQtZDczZGM0YjQxY2Ux
LzEvejdYS3BOM192LVBnWl8tT3gzNFZESml2VHpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH3AV2nsf
/0fwW5hMTdvaA6t4PfVc0rjRQiuPXKqhzrXBUT5k7SgFlvtR7GnEh0TaOdY+v3M7
WyCPXnjZQXj5LINDau391p/Kqn62VR2EooLzEOmB4nOp5S/cRtTWKJMELEIis7KP
u6ckuuTYJESPkjxHcShk+EygOtCqf0gdPUQjljIH0h4mYvuwp0Wr8Uf0kfAM0NZt
l7YOqhHhh82xOZDqK2TlgZIb4Ge0mm0lttgwngLc9RbcKg4KPh4DTxk0KaW9k7R4
SCep/WWdcxXSAOnHdax2bnXkQXUvNvLaATrVBePpcCYLr8/cAhadfT9OhJZezQWn
b2MgR8d8vb7YVg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 09:23:30 2026 by rpki-client