Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/51885b-5693-4892-a1d4-1a19792a1d26/1/zS0OOdePxiAiVaW0rbVFg9ne3c4.mft
File: zS0OOdePxiAiVaW0rbVFg9ne3c4.mft (raw, json)
Hash identifier: PDud9F6TEXKILryyT+DkW1/VNZPBbrs9ghj/S4fE2iY=
Subject key identifier: F2:50:61:C9:39:72:74:09:C9:4C:E7:66:EC:94:18:C3:04:CD:42:78
Authority key identifier: CD:2D:0E:39:D7:8F:C6:20:22:55:A5:B4:AD:B5:45:83:D9:DE:DD:CE
Certificate issuer: /CN=cd2d0e39d78fc6202255a5b4adb54583d9deddce
Certificate serial: 019F94DC53F8B683583C3F1995FC45F0EF18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zS0OOdePxiAiVaW0rbVFg9ne3c4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/51885b-5693-4892-a1d4-1a19792a1d26/1/zS0OOdePxiAiVaW0rbVFg9ne3c4.mft
Manifest number: 0CEC
Signing time: Fri 24 Jul 2026 16:01:34 +0000
Manifest this update: Fri 24 Jul 2026 16:01:34 +0000
Manifest next update: Sat 25 Jul 2026 16:01:34 +0000
Files and hashes: 1: BzcIlfSqWBkxCx6sQahLAYgQl9U.roa (hash: iEU6LtcxUGPF+befnk/JbzTRId/51aZ7BTsMTWVBJf8=)
2: zS0OOdePxiAiVaW0rbVFg9ne3c4.crl (hash: mcCDIzjpNiCRZjouI1AMt/7vVX41gAKgfwJFZNpM6h0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/51885b-5693-4892-a1d4-1a19792a1d26/1/zS0OOdePxiAiVaW0rbVFg9ne3c4.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/51885b-5693-4892-a1d4-1a19792a1d26/1/zS0OOdePxiAiVaW0rbVFg9ne3c4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zS0OOdePxiAiVaW0rbVFg9ne3c4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:dc:53:f8:b6:83:58:3c:3f:19:95:fc:45:f0:ef:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd2d0e39d78fc6202255a5b4adb54583d9deddce
Validity
Not Before: Jul 24 16:01:34 2026 GMT
Not After : Jul 25 16:01:34 2026 GMT
Subject: CN=f25061c939727409c94ce766ec9418c304cd4278
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c4:53:20:4d:21:71:f4:f2:96:7d:d8:87:dd:
a1:49:7a:77:75:86:9e:80:7a:cd:c9:48:2b:55:47:
b0:ca:27:66:b0:cb:1e:88:96:0c:14:6c:bb:27:9f:
b4:82:85:f3:0f:1a:a2:11:5f:b5:d2:75:ac:a9:9f:
e6:13:c4:5f:54:1b:df:28:41:75:eb:80:c3:ed:c4:
d7:23:92:39:a3:c1:a8:4a:19:f0:fc:ba:ce:49:b5:
63:60:e8:f6:a9:3b:59:1f:7c:2a:a8:29:8d:84:f0:
f8:1f:07:6d:ad:25:11:ce:4f:3f:50:a6:bc:32:72:
d6:45:30:2a:b6:79:79:38:7e:e1:4f:bf:08:d6:6c:
17:ce:8f:52:aa:ba:4b:77:e9:6c:5e:e9:ba:3e:b9:
03:55:22:f2:5c:20:a4:4f:29:4e:a2:bc:6a:6e:c7:
84:93:24:a7:92:20:73:b8:7d:a2:86:3e:e3:4e:a1:
dc:ed:a1:78:7e:d6:29:31:2c:43:80:a3:d7:e5:27:
06:22:eb:9e:79:34:20:d1:04:b1:f1:ff:44:16:3a:
a9:ca:2b:a5:28:2f:30:8c:df:34:ec:f4:b5:b7:ba:
47:6c:c6:40:d0:e0:f5:ae:9c:7f:7d:14:44:b2:b1:
41:f4:2f:84:ef:52:86:0c:ad:2a:96:b7:57:74:80:
8d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:50:61:C9:39:72:74:09:C9:4C:E7:66:EC:94:18:C3:04:CD:42:78
X509v3 Authority Key Identifier:
keyid:CD:2D:0E:39:D7:8F:C6:20:22:55:A5:B4:AD:B5:45:83:D9:DE:DD:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zS0OOdePxiAiVaW0rbVFg9ne3c4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/51885b-5693-4892-a1d4-1a19792a1d26/1/zS0OOdePxiAiVaW0rbVFg9ne3c4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/51885b-5693-4892-a1d4-1a19792a1d26/1/zS0OOdePxiAiVaW0rbVFg9ne3c4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:f5:db:8d:b1:88:a4:0a:e9:c1:9b:ca:30:fd:2f:66:17:aa:
e4:16:b7:b3:0c:88:ab:e1:59:c3:46:bc:94:10:01:49:e5:a5:
2a:99:bb:a7:42:e3:48:22:11:84:9e:07:5a:08:c6:92:78:44:
1d:30:57:32:26:6c:96:fb:4a:15:7b:2b:59:f3:0c:c6:12:fd:
cd:3c:f2:d8:be:e4:27:c1:2d:b9:88:5b:0f:34:7c:93:02:92:
85:91:30:e1:a4:13:77:ef:51:91:a6:c3:56:7b:b2:57:0d:a6:
5f:9b:4e:9b:d1:ec:16:77:6f:6a:a9:d3:6b:06:7e:29:99:f8:
62:81:31:9b:67:c7:eb:72:29:0e:a1:e4:f2:ff:b8:94:58:53:
87:75:df:84:d7:6c:9d:ef:eb:0f:e2:20:7b:80:20:64:1d:4c:
67:2c:48:97:58:c2:ab:de:fe:61:40:45:0d:f5:f7:1a:cc:bc:
b5:23:f8:82:af:24:b9:b3:6f:77:6f:c3:0f:1a:14:e8:b1:2d:
a2:74:e0:e2:24:c8:96:4f:46:50:3b:66:2a:83:34:b5:53:37:
2a:cb:6c:b2:4f:d1:cc:39:57:bf:82:ea:1b:0d:ac:33:1b:30:
8c:43:b7:dc:b6:7e:97:ff:b5:a7:fa:1b:9b:47:01:45:5c:bb:
7c:6c:b5:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:05:56 2026 by rpki-client