Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/z7XKpN3_v-PgZ_-Ox34VDJivTzU.mft
File: z7XKpN3_v-PgZ_-Ox34VDJivTzU.mft (raw, json)
Hash identifier: gNCmaiqyf88jm0iPxsBP988xlU1FTGziZnyJNG+7GpQ=
Subject key identifier: 9B:2F:FD:34:10:C8:51:D4:8E:71:9E:A4:3D:29:5D:EE:CF:94:48:BB
Authority key identifier: CF:B5:CA:A4:DD:FF:BF:E3:E0:67:FF:8E:C7:7E:15:0C:98:AF:4F:35
Certificate issuer: /CN=cfb5caa4ddffbfe3e067ff8ec77e150c98af4f35
Certificate serial: 01A0D7CC506A8CA05133E3EA1E5FEA43D245
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z7XKpN3_v-PgZ_-Ox34VDJivTzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/z7XKpN3_v-PgZ_-Ox34VDJivTzU.mft
Manifest number: E9
Signing time: Fri 25 Sep 2026 09:01:26 +0000
Manifest this update: Fri 25 Sep 2026 09:01:26 +0000
Manifest next update: Sat 26 Sep 2026 09:01:26 +0000
Files and hashes: 1: UpQaalpvFrofiBvJgDzD5ykV4Es.roa (hash: htOEHU0XKcxzfErxMNDU5sKxeT/b4gBnMaIIg36jS6Y=)
2: lvL4hmOHFOaf-c2I-4F7EqTFtJs.roa (hash: RhrM1BRru6RaIuVQmbqOxmE3Nat3kjidvWR1T36n9a8=)
3: z7XKpN3_v-PgZ_-Ox34VDJivTzU.crl (hash: 07uRbkklX3/iAAxjvk/r939JJ6hQVbKa5ShuYE0sXJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/z7XKpN3_v-PgZ_-Ox34VDJivTzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/z7XKpN3_v-PgZ_-Ox34VDJivTzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/z7XKpN3_v-PgZ_-Ox34VDJivTzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:cc:50:6a:8c:a0:51:33:e3:ea:1e:5f:ea:43:d2:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfb5caa4ddffbfe3e067ff8ec77e150c98af4f35
Validity
Not Before: Sep 25 09:01:26 2026 GMT
Not After : Sep 26 09:01:26 2026 GMT
Subject: CN=9b2ffd3410c851d48e719ea43d295deecf9448bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:be:4f:2d:64:45:cc:5d:cb:79:e0:b0:4d:b7:
1b:eb:2c:41:1b:be:2e:7d:ae:15:01:cf:2a:6b:b6:
76:77:71:71:06:5e:53:b6:d1:e8:c8:e2:64:93:e8:
5c:1d:53:4b:f7:21:78:cb:f1:d1:82:da:56:57:16:
b5:ef:da:0f:c2:b4:d0:9a:38:78:97:8c:47:f7:94:
d3:02:d3:6a:93:43:9f:51:bf:5f:48:02:db:ef:ae:
e9:94:b8:cd:50:55:fb:8d:a9:e9:45:77:58:b1:54:
9e:2c:c0:65:82:9f:ba:4d:d9:a5:80:f1:c7:07:11:
af:24:f3:5b:72:65:17:01:0e:f3:35:2e:ae:99:01:
f7:95:45:19:34:9c:35:6c:a5:22:b9:ba:ce:ae:76:
b1:2b:d9:49:5d:3b:d9:77:78:98:41:44:96:dd:96:
ad:3a:49:46:69:b6:f1:98:a7:3d:9d:d7:58:83:cc:
26:e5:f3:c5:3f:7a:2c:01:ab:a6:13:76:ee:26:36:
0c:8a:d0:b9:6a:3e:1a:b2:86:84:71:3f:fe:c4:c0:
11:16:c0:c0:b5:2d:71:7b:f2:fe:78:1c:8f:3c:bb:
fa:68:1d:e9:ac:80:7a:e9:92:99:bb:b8:68:17:31:
99:7b:18:1f:0e:a0:63:e8:f4:e6:e8:8f:f6:1a:ad:
63:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:2F:FD:34:10:C8:51:D4:8E:71:9E:A4:3D:29:5D:EE:CF:94:48:BB
X509v3 Authority Key Identifier:
keyid:CF:B5:CA:A4:DD:FF:BF:E3:E0:67:FF:8E:C7:7E:15:0C:98:AF:4F:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z7XKpN3_v-PgZ_-Ox34VDJivTzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/z7XKpN3_v-PgZ_-Ox34VDJivTzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/z7XKpN3_v-PgZ_-Ox34VDJivTzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:d4:ed:41:3a:d3:5e:04:fa:f3:fc:3b:84:16:5b:3a:19:6d:
3e:88:f4:51:b8:9e:5d:fc:f0:27:05:af:5d:42:a5:81:20:c0:
c7:83:bb:87:04:8a:b2:c8:e3:ce:d1:40:80:9c:c8:1d:20:95:
47:53:6f:c3:81:db:43:96:ef:86:64:b6:5c:1f:54:9a:da:59:
b1:7b:b9:f8:80:2d:f0:da:73:28:7b:8f:48:e2:bb:17:d0:25:
ad:a0:9d:0d:65:e0:c8:af:69:21:f0:fa:4c:1e:73:0d:86:fc:
02:79:61:a3:db:b2:9e:29:b1:52:99:92:1e:d6:ef:37:20:4e:
44:27:7f:fb:f6:19:1b:9f:b8:99:60:7b:6d:fc:5f:58:7c:48:
c7:d6:67:18:99:43:a8:c8:b9:a5:e1:ca:b8:63:4e:4a:81:e9:
fe:aa:80:16:76:50:33:9d:1f:a3:da:50:bb:74:d1:57:d9:04:
8f:78:91:1e:e0:e8:7f:5b:8a:f1:4c:4e:f1:af:07:9b:e1:dd:
6f:f3:3b:3f:58:f4:4d:47:4c:c5:69:9b:33:cc:38:51:69:58:
14:54:32:bf:9e:44:12:c5:4f:4a:9e:c0:61:d8:1d:46:de:6b:
24:65:9c:22:29:e5:ff:3e:68:57:fd:fa:51:7e:3f:e8:79:f2:
dc:1a:7b:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:39:55 2026 by rpki-client