Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.mft
File: z3cwGIO-DSGr2cbMC9dQCnq0eYg.mft (raw, json)
Hash identifier: PL8NwQtf1653lbrqTWtFwmjqxYQmQiu+oovft5OfZ+g=
Subject key identifier: 58:B6:C4:20:01:09:E3:44:17:A5:7E:3A:38:9A:79:F2:D4:0E:1F:7E
Authority key identifier: CF:77:30:18:83:BE:0D:21:AB:D9:C6:CC:0B:D7:50:0A:7A:B4:79:88
Certificate issuer: /CN=cf77301883be0d21abd9c6cc0bd7500a7ab47988
Certificate serial: 019FAB634B78FEB5D6D15F0A48C4E27F8589
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z3cwGIO-DSGr2cbMC9dQCnq0eYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.mft
Manifest number: 19D0
Signing time: Wed 29 Jul 2026 01:00:39 +0000
Manifest this update: Wed 29 Jul 2026 01:00:39 +0000
Manifest next update: Thu 30 Jul 2026 01:00:39 +0000
Files and hashes: 1: 24q9lVMraaNn4l78Un2euxMBmOs.roa (hash: MXilc6o86s0zd42plXsG4dYTHW3ZMvsoeOl29WStn9c=)
2: z3cwGIO-DSGr2cbMC9dQCnq0eYg.crl (hash: UjmGUcrvOJy07ovf32w6eu1K7epgX9IwxT2k64QY/1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/z3cwGIO-DSGr2cbMC9dQCnq0eYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:63:4b:78:fe:b5:d6:d1:5f:0a:48:c4:e2:7f:85:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf77301883be0d21abd9c6cc0bd7500a7ab47988
Validity
Not Before: Jul 29 01:00:39 2026 GMT
Not After : Jul 30 01:00:39 2026 GMT
Subject: CN=58b6c4200109e34417a57e3a389a79f2d40e1f7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1c:95:0a:d2:1a:44:dc:e8:c7:ae:bc:42:a7:
e3:5a:47:60:6b:16:cf:a9:a0:83:e1:cb:c9:2f:72:
cd:f2:8f:c2:78:1f:2a:fb:7f:93:94:4d:01:9c:52:
1a:fe:f5:b8:95:ed:f5:84:9a:de:65:f8:7e:21:4e:
f4:a3:d2:99:88:1e:3b:b7:c8:c9:6e:5b:bd:e1:dd:
35:df:55:c1:3d:cd:c6:46:a0:0d:e0:c8:7c:80:58:
93:e9:54:9b:1d:5e:ca:a9:56:56:8c:02:e8:f7:dc:
4a:1a:e7:7e:f5:59:be:f1:97:90:12:80:5d:36:15:
a1:b4:3c:f6:34:c8:b4:6c:b6:bc:d4:69:e4:22:1f:
32:48:b0:1c:7b:5f:94:50:ba:5a:89:27:16:1f:0a:
50:0a:43:2f:89:24:82:a0:cb:e8:47:25:6d:ab:53:
1d:45:85:3e:00:45:0c:98:a7:99:33:96:df:00:c8:
fb:69:fb:73:98:e2:e6:99:78:5b:eb:be:15:27:0a:
13:97:46:45:03:c6:5a:7d:45:99:02:85:8e:d2:81:
fb:83:27:13:54:46:d7:ec:9e:2f:52:5b:09:65:e2:
84:08:02:09:c9:22:df:3e:25:19:68:d5:12:8f:2e:
fb:d6:04:b7:31:71:d5:2e:0f:5c:da:73:af:35:a8:
63:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:B6:C4:20:01:09:E3:44:17:A5:7E:3A:38:9A:79:F2:D4:0E:1F:7E
X509v3 Authority Key Identifier:
keyid:CF:77:30:18:83:BE:0D:21:AB:D9:C6:CC:0B:D7:50:0A:7A:B4:79:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z3cwGIO-DSGr2cbMC9dQCnq0eYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:74:19:09:8c:bc:6c:3d:a9:6a:fa:94:c1:1f:55:23:3e:c0:
b0:c6:7f:79:58:dc:8f:d4:79:63:42:f0:e7:6d:82:6a:32:c1:
96:c3:4a:d1:1e:81:e3:f0:5b:af:df:cc:19:cd:cb:6f:fb:3f:
5d:54:fd:38:0c:ff:67:cf:20:64:45:a2:2e:5c:42:d6:ab:cc:
6e:45:4c:b1:b1:25:29:f8:7d:6a:52:7d:a6:04:2e:0f:05:1b:
8e:fd:3c:f5:04:23:7f:44:25:43:b1:e9:30:19:f9:14:a1:97:
4a:b3:fd:fa:e9:be:b5:7d:d4:03:59:fa:77:67:25:fc:64:01:
e7:96:5a:f0:9b:20:f4:4e:5e:81:70:ad:ee:62:08:49:3b:5b:
f9:96:36:3c:38:63:fa:95:80:09:9d:a1:25:7c:c2:13:41:bf:
7b:c6:97:54:b9:ad:6a:5e:f6:d1:ec:a5:e5:af:b3:ab:c8:13:
95:a1:96:4d:20:d6:ec:2a:e5:4f:03:8e:c0:10:0a:fd:d5:41:
b8:1b:8e:5d:7f:ba:38:23:a0:42:b7:bf:5f:0f:6e:02:42:e5:
54:8b:b5:5d:86:0b:d5:8f:7c:eb:fd:57:56:31:48:ae:0f:89:
07:fd:8b:c8:c5:7d:70:70:f3:fd:5d:ec:73:b7:0e:10:99:ae:
0b:95:1f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:48:35 2026 by rpki-client