Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.mft
File: z7dRkZeIZvH8l_Ujx92kCoj353c.mft (raw, json)
Hash identifier: EAuqSmI7yJpLLUviY1VGu7RXfZhHbvIdepiYkBYFFBc=
Subject key identifier: 7D:4B:D8:FE:36:DF:30:BF:69:A1:2F:36:32:D5:F5:82:5D:84:FE:AC
Authority key identifier: CF:B7:51:91:97:88:66:F1:FC:97:F5:23:C7:DD:A4:0A:88:F7:E7:77
Certificate issuer: /CN=cfb75191978866f1fc97f523c7dda40a88f7e777
Certificate serial: 01A0C1B1E1A0CA51EDDE52A13AF3C4098508
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z7dRkZeIZvH8l_Ujx92kCoj353c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.mft
Manifest number: 12E0
Signing time: Mon 21 Sep 2026 02:00:55 +0000
Manifest this update: Mon 21 Sep 2026 02:00:55 +0000
Manifest next update: Tue 22 Sep 2026 02:00:55 +0000
Files and hashes: 1: BShN_Su6KeKwbhlTkQBsz2EU2ag.roa (hash: XwDRhqSVGgdp2r56sCqKjsBrreDrVD6B7DqyCO6zoH8=)
2: z7dRkZeIZvH8l_Ujx92kCoj353c.crl (hash: tGkRUWLwFSZvuTROJkbqrUjlz8x++P/pvY6F0oCFvQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.mft
rsync://rpki.ripe.net/repository/DEFAULT/z7dRkZeIZvH8l_Ujx92kCoj353c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:b1:e1:a0:ca:51:ed:de:52:a1:3a:f3:c4:09:85:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfb75191978866f1fc97f523c7dda40a88f7e777
Validity
Not Before: Sep 21 02:00:55 2026 GMT
Not After : Sep 22 02:00:55 2026 GMT
Subject: CN=7d4bd8fe36df30bf69a12f3632d5f5825d84feac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4e:75:9a:82:7c:7c:19:c1:26:65:42:40:26:
e6:8d:31:99:cf:ce:ee:93:8f:fb:ae:d7:b5:fb:e3:
72:2a:0c:e7:64:4f:00:ba:99:ee:c5:b3:53:97:1f:
b9:72:28:83:aa:6c:46:77:33:ae:c1:35:0f:58:b4:
83:83:05:f3:15:ae:04:43:9b:14:3c:26:27:43:8e:
4e:d8:72:f0:da:d3:5e:b1:ac:c4:7f:6a:bc:d3:61:
9e:75:e8:3d:22:90:84:89:55:9b:09:1b:7c:7c:a1:
78:9c:17:86:6f:21:ce:89:07:73:e7:81:a4:ea:1f:
4a:7c:9d:e5:62:88:14:04:d0:64:c9:27:8b:d7:70:
dc:99:15:cc:72:8d:4c:8a:16:50:9e:1d:98:ea:dd:
59:6d:d7:89:65:af:16:77:47:9b:0c:18:64:28:5c:
13:00:6c:f1:05:c0:02:3a:2a:59:fc:b8:8f:f3:37:
89:fc:fb:0c:9c:b9:00:c8:88:2a:e6:df:b1:83:77:
cb:21:b2:c1:96:b2:f9:a5:00:d5:ac:8e:8a:e9:4a:
a8:af:27:ab:4e:c2:96:ee:23:5d:a3:0c:6c:31:48:
bd:e4:6d:ba:04:37:cb:c4:28:21:2e:91:1d:c8:a6:
ae:c6:3a:bd:b4:de:dc:aa:25:fe:7e:cd:2c:cf:c5:
21:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:4B:D8:FE:36:DF:30:BF:69:A1:2F:36:32:D5:F5:82:5D:84:FE:AC
X509v3 Authority Key Identifier:
keyid:CF:B7:51:91:97:88:66:F1:FC:97:F5:23:C7:DD:A4:0A:88:F7:E7:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z7dRkZeIZvH8l_Ujx92kCoj353c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:1f:43:8d:86:b3:7a:74:54:17:0a:00:44:9b:01:c1:4c:f6:
fb:32:1d:65:78:4b:c9:48:b6:b5:24:7f:a1:7c:f6:8b:69:89:
ea:4b:6b:e1:3b:7f:9d:66:8d:b4:38:08:1c:c8:d6:e3:c8:9c:
ce:b4:9e:ff:ed:de:3d:10:ce:9b:26:a7:a8:67:10:f0:ad:46:
5c:94:99:6b:15:91:53:7a:70:00:dc:ae:19:2e:1e:47:94:05:
60:91:e8:2a:de:24:98:1f:30:ce:5a:ec:46:44:bd:a4:5e:ba:
1b:6d:ea:2c:9e:47:c0:8f:86:bf:37:9a:82:cf:ab:59:16:49:
06:47:76:07:c4:34:93:95:39:f5:ec:2c:66:36:77:a5:ef:09:
ab:e1:10:92:f3:21:85:a0:85:18:da:dd:5f:22:e3:3a:0b:3f:
4f:a0:a2:59:85:57:95:b2:24:1a:61:21:cf:2e:fc:89:f2:dc:
e2:33:68:eb:b0:33:3c:4a:00:a7:9d:80:73:62:84:46:0e:d9:
75:68:90:8d:5d:f0:cd:8d:f8:92:bb:75:e8:34:43:55:9e:38:
d7:80:81:ae:8e:99:71:84:75:34:dd:c4:6d:60:65:a6:ae:1d:
27:26:25:a6:01:d4:56:fb:cc:e8:c3:79:a8:b3:9f:56:65:d8:
91:01:a3:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:31:14 2026 by rpki-client