Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/27cbd0-a7b9-45fb-9954-78d1144ad967/1/zl1FYESPeKTc3LeRoH2tIWOgjN8.mft
File: zl1FYESPeKTc3LeRoH2tIWOgjN8.mft (raw, json)
Hash identifier: POg2Fj6tRTIkrGuKVGD5uEatzK62wN9g0G9OS8tFpDA=
Subject key identifier: 93:CA:BC:79:18:B4:F2:17:43:6F:48:3F:CA:97:69:4B:43:C4:BE:D1
Authority key identifier: CE:5D:45:60:44:8F:78:A4:DC:DC:B7:91:A0:7D:AD:21:63:A0:8C:DF
Certificate issuer: /CN=ce5d4560448f78a4dcdcb791a07dad2163a08cdf
Certificate serial: 019F93C91FF2833B11DC17911A0239F3CEBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zl1FYESPeKTc3LeRoH2tIWOgjN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/27cbd0-a7b9-45fb-9954-78d1144ad967/1/zl1FYESPeKTc3LeRoH2tIWOgjN8.mft
Manifest number: 195B
Signing time: Fri 24 Jul 2026 11:00:59 +0000
Manifest this update: Fri 24 Jul 2026 11:00:59 +0000
Manifest next update: Sat 25 Jul 2026 11:00:59 +0000
Files and hashes: 1: kJTuRCvouXJMaVDF0pdJUxYymkE.roa (hash: u4BkMutspCjtHl2p10ecFJYI7igX5XDffjXXKmzdde8=)
2: zl1FYESPeKTc3LeRoH2tIWOgjN8.crl (hash: l1uVsRx1xEJJXnJCsahhteYmIGw782e21ky1x3TniNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/27cbd0-a7b9-45fb-9954-78d1144ad967/1/zl1FYESPeKTc3LeRoH2tIWOgjN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/27cbd0-a7b9-45fb-9954-78d1144ad967/1/zl1FYESPeKTc3LeRoH2tIWOgjN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zl1FYESPeKTc3LeRoH2tIWOgjN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c9:1f:f2:83:3b:11:dc:17:91:1a:02:39:f3:ce:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce5d4560448f78a4dcdcb791a07dad2163a08cdf
Validity
Not Before: Jul 24 11:00:59 2026 GMT
Not After : Jul 25 11:00:59 2026 GMT
Subject: CN=93cabc7918b4f217436f483fca97694b43c4bed1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e5:74:4a:88:48:a2:f0:b8:a8:86:c2:19:8c:
4d:f4:77:20:41:c9:87:49:54:92:7e:da:b2:c1:ee:
68:02:b9:a5:c3:03:20:9a:9a:71:3a:13:8d:1f:a6:
5e:8c:ed:ef:c3:c6:f5:a0:ce:ed:2b:34:d3:e7:05:
ac:89:98:8f:05:02:2a:cb:75:60:52:d7:f8:cb:4b:
09:9d:30:1b:38:55:89:f8:a6:15:a5:35:6f:80:13:
4e:67:1b:b6:c7:7d:59:57:be:3d:c1:44:85:f8:21:
ae:3d:78:87:e2:af:38:bd:5c:0c:59:36:24:11:9f:
d2:7a:19:4a:f7:30:a2:24:ba:20:d2:50:4c:35:32:
0a:71:14:9b:1c:5a:be:9e:c3:7d:e3:f0:3d:a7:32:
f8:05:1e:e3:cd:21:e9:3d:36:d6:00:a7:c7:fd:1e:
e3:c1:99:97:92:c7:36:d7:91:df:6d:39:58:61:b5:
48:8b:af:e9:05:1a:fd:95:9e:99:60:bd:a3:bf:6f:
a4:27:50:e8:64:f8:14:8c:64:f0:d0:ca:c4:34:95:
52:1f:4e:b0:75:8f:af:92:13:5e:be:a3:32:24:83:
21:df:5b:4f:cd:73:b9:1d:24:e6:6b:fa:9e:42:a9:
f1:37:1c:f4:ed:1f:6f:74:84:20:35:aa:9c:22:5d:
29:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:CA:BC:79:18:B4:F2:17:43:6F:48:3F:CA:97:69:4B:43:C4:BE:D1
X509v3 Authority Key Identifier:
keyid:CE:5D:45:60:44:8F:78:A4:DC:DC:B7:91:A0:7D:AD:21:63:A0:8C:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zl1FYESPeKTc3LeRoH2tIWOgjN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/27cbd0-a7b9-45fb-9954-78d1144ad967/1/zl1FYESPeKTc3LeRoH2tIWOgjN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/27cbd0-a7b9-45fb-9954-78d1144ad967/1/zl1FYESPeKTc3LeRoH2tIWOgjN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:9d:44:47:c5:ef:33:7e:95:71:16:b1:c7:ed:0f:3b:5d:84:
1a:bb:a0:96:d6:44:b9:be:76:d9:02:6c:96:65:50:21:af:9e:
0d:f9:5f:26:fc:f3:5f:ec:4f:f6:7c:96:12:da:5b:83:0e:7b:
6b:e6:d9:aa:ce:44:98:b0:22:d1:2d:53:e7:a5:38:f0:87:54:
b1:fb:d4:20:6b:48:a9:1b:e9:35:ff:3f:28:16:10:2a:8e:05:
36:df:75:37:7c:5f:58:d4:8f:83:71:31:fc:8f:df:46:4f:2b:
e0:06:b1:f3:f1:57:c4:0c:c1:9b:8f:9a:64:04:a9:df:f4:bd:
a4:05:c1:ef:79:ff:81:56:83:23:b1:34:9d:9f:d2:e7:e4:fa:
47:39:e4:91:92:8f:1b:8a:a7:ab:0d:08:4c:f0:3b:1c:ca:b8:
5e:57:aa:6f:ad:31:8d:1d:49:80:47:5e:49:95:2c:76:f9:40:
e4:af:10:7d:f6:cd:69:ef:56:25:7d:ef:21:7f:99:59:03:7b:
73:82:e6:59:bd:38:71:49:a3:fe:0f:3e:be:e0:48:1e:fd:5d:
aa:77:6e:df:1d:27:0e:53:53:d1:64:49:dd:3b:5c:44:25:76:
55:b3:bb:8f:32:d7:a6:af:7a:ac:88:cb:fa:02:ea:1f:c4:b9:
c0:f6:1b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:46:37 2026 by rpki-client