Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.mft
File: zTCHzHAsjZNT_nj3kyRAt-hC_G4.mft (raw, json)
Hash identifier: /MxZlBqkMnFaMWqIpxPMUz+IoGH0Vp1D6b79NnKEBgo=
Subject key identifier: 80:3E:78:10:76:4D:9C:F7:78:E6:2C:3C:6B:4D:32:75:E3:AB:CF:DF
Authority key identifier: CD:30:87:CC:70:2C:8D:93:53:FE:78:F7:93:24:40:B7:E8:42:FC:6E
Certificate issuer: /CN=cd3087cc702c8d9353fe78f7932440b7e842fc6e
Certificate serial: 019F93C9A2F584178982119F03AF68A41442
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zTCHzHAsjZNT_nj3kyRAt-hC_G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.mft
Manifest number: 1346
Signing time: Fri 24 Jul 2026 11:01:32 +0000
Manifest this update: Fri 24 Jul 2026 11:01:32 +0000
Manifest next update: Sat 25 Jul 2026 11:01:32 +0000
Files and hashes: 1: a0kN2gfK01wMuqhoW-MZjPAbstc.roa (hash: mmiujuewrIIcuNRFw3juwDDGpDhJAvUuobcjAggyfUE=)
2: zTCHzHAsjZNT_nj3kyRAt-hC_G4.crl (hash: 8hxkUHniTsAwssmjYHG/dmUrZTC1QI1Yvv/cNMB/CpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zTCHzHAsjZNT_nj3kyRAt-hC_G4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 11:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c9:a2:f5:84:17:89:82:11:9f:03:af:68:a4:14:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd3087cc702c8d9353fe78f7932440b7e842fc6e
Validity
Not Before: Jul 24 11:01:32 2026 GMT
Not After : Jul 25 11:01:32 2026 GMT
Subject: CN=803e7810764d9cf778e62c3c6b4d3275e3abcfdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1a:7f:92:4b:f1:a7:68:c1:94:e4:56:3d:8f:
b0:52:44:a9:3c:0c:28:31:f7:2e:db:b0:21:d5:6f:
6c:af:3f:20:0c:c2:d0:54:c1:72:59:23:b9:99:af:
71:51:47:2f:c4:45:de:fa:ce:b3:82:33:1a:4e:dd:
35:10:8b:15:56:94:89:d1:23:a1:ee:d6:9c:83:8f:
d1:6a:6a:d6:c0:e2:2b:55:dc:4a:37:8d:82:d4:c9:
fa:40:6e:6b:b6:f9:2d:83:af:00:df:c7:dd:d4:f3:
58:b3:34:7d:d0:c3:a4:bf:4d:88:f0:c2:95:85:7f:
44:e1:ce:9d:ac:96:cb:b6:30:d1:ec:51:43:b1:73:
c0:ad:3e:6a:75:c3:e8:68:0c:13:6f:22:ef:5c:bc:
f5:31:34:e5:a7:53:0d:4f:ac:11:6e:3b:a9:92:86:
29:5b:db:9d:43:ac:80:06:26:15:79:12:7b:bb:df:
87:6e:34:31:93:54:8c:0d:82:f8:2c:d3:98:40:19:
5b:33:c9:6d:65:e5:63:42:cd:4d:67:9f:cd:aa:56:
70:c7:b8:a1:79:c7:83:ac:a7:f3:2f:9f:66:ac:14:
64:d5:4e:73:e7:d3:f7:73:56:18:3b:69:f8:68:3a:
e1:2a:2c:31:c2:1c:cb:e1:7b:27:40:e7:1a:5c:dc:
5b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:3E:78:10:76:4D:9C:F7:78:E6:2C:3C:6B:4D:32:75:E3:AB:CF:DF
X509v3 Authority Key Identifier:
keyid:CD:30:87:CC:70:2C:8D:93:53:FE:78:F7:93:24:40:B7:E8:42:FC:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zTCHzHAsjZNT_nj3kyRAt-hC_G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:c4:c0:58:c7:2c:9c:e3:7c:01:3f:1d:d3:25:a1:19:0f:08:
ff:cd:1d:14:6f:f8:e9:d4:13:44:2e:1f:55:ad:2b:e8:7a:f6:
85:1f:de:0b:20:f1:51:0c:38:e4:c8:0e:9a:f9:c3:5c:d3:d4:
c4:73:94:7e:c0:56:4a:21:e8:b8:a6:42:a3:1d:73:0e:b5:7d:
60:56:fd:a7:dc:66:11:7c:f1:41:34:a2:85:1e:be:3e:3a:12:
70:ca:fa:dd:a1:fd:07:63:0a:70:ea:15:bf:fb:cb:79:75:17:
a2:63:3f:3c:cb:e3:03:52:59:92:0d:90:24:da:5b:ac:c8:53:
ab:ab:68:e4:de:95:59:61:99:73:ab:cb:34:f6:27:98:8f:0d:
94:27:e6:fc:48:72:cb:c0:4a:44:84:11:08:3e:cb:b9:f8:62:
47:cf:e4:37:40:6d:07:4a:f3:a4:e0:a9:d4:9f:23:eb:3a:76:
87:df:98:d6:27:ac:15:56:09:5d:89:cd:15:1a:3d:ce:78:ca:
f5:c6:81:71:3c:34:67:04:20:06:2a:47:87:58:21:17:cb:69:
3f:5f:a7:53:db:c8:91:4d:64:cb:24:63:0f:41:b9:e7:67:27:
ce:e9:6e:f2:1e:22:9c:43:08:38:7e:76:2d:c1:7d:16:25:7a:
2a:24:52:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:01:11 2026 by rpki-client