Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/a725e2-e715-4fd2-81ec-ea42d6c159f3/1/ZRUuTmwkXAP-zfpIv5E5bL7-168.mft
File: ZRUuTmwkXAP-zfpIv5E5bL7-168.mft (raw, json)
Hash identifier: mtERdBV5ZJHWmhpdF/7+ZwKUGCrL0byArlr+VuFhXgY=
Subject key identifier: DD:CE:24:E0:55:F6:AA:C4:B5:D5:27:45:D8:80:92:CC:6D:36:03:18
Authority key identifier: 65:15:2E:4E:6C:24:5C:03:FE:CD:FA:48:BF:91:39:6C:BE:FE:D7:AF
Certificate issuer: /CN=65152e4e6c245c03fecdfa48bf91396cbefed7af
Certificate serial: 019F940020D639D91D2B809732D8E9C3C8DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZRUuTmwkXAP-zfpIv5E5bL7-168.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/a725e2-e715-4fd2-81ec-ea42d6c159f3/1/ZRUuTmwkXAP-zfpIv5E5bL7-168.mft
Manifest number: 0192
Signing time: Fri 24 Jul 2026 12:01:03 +0000
Manifest this update: Fri 24 Jul 2026 12:01:03 +0000
Manifest next update: Sat 25 Jul 2026 12:01:03 +0000
Files and hashes: 1: ZRUuTmwkXAP-zfpIv5E5bL7-168.crl (hash: KegjGBu2BmFSp6b8Xbzjx+3kADmsQ44OasGM1gBgaO4=)
2: zNqty2MMMtiYifN34tRpIOVX9sQ.roa (hash: yLB5f8Ek8IZkDyn4YFbsPyCUS3Yue+tSUM0kBMSr3B8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/a725e2-e715-4fd2-81ec-ea42d6c159f3/1/ZRUuTmwkXAP-zfpIv5E5bL7-168.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/a725e2-e715-4fd2-81ec-ea42d6c159f3/1/ZRUuTmwkXAP-zfpIv5E5bL7-168.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZRUuTmwkXAP-zfpIv5E5bL7-168.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:00:20:d6:39:d9:1d:2b:80:97:32:d8:e9:c3:c8:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65152e4e6c245c03fecdfa48bf91396cbefed7af
Validity
Not Before: Jul 24 12:01:03 2026 GMT
Not After : Jul 25 12:01:03 2026 GMT
Subject: CN=ddce24e055f6aac4b5d52745d88092cc6d360318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:80:fc:2d:d7:40:d4:0e:87:24:1c:45:06:c2:
0c:d0:6a:d4:e0:b8:80:24:5d:e9:ec:c8:0a:5c:c8:
1e:b1:42:ab:1c:f1:cc:8a:f0:24:19:54:0a:09:d5:
07:cd:6e:28:73:b5:21:06:75:d7:b8:f7:42:b4:96:
86:cd:0a:57:57:c3:ec:5d:0f:64:ee:bc:77:8a:91:
39:8c:b1:09:86:8d:65:ac:30:f2:33:1b:85:6b:a1:
66:c2:de:8d:32:50:c9:25:3a:c0:53:24:89:7a:be:
23:c3:e9:2e:3a:ff:1a:1b:b6:00:6a:92:1b:91:59:
7f:f9:26:aa:4c:14:0b:38:8a:56:a1:55:50:cb:a2:
c1:3e:de:34:a1:66:7c:a6:b8:d9:7f:82:2d:d7:7a:
fc:f5:9f:71:ad:f7:19:3f:18:9d:06:ee:4c:ef:4c:
2a:7b:47:68:6d:b2:10:50:8c:d0:4f:d0:f9:64:2a:
50:0f:73:31:bb:86:f3:10:c6:7d:ee:0e:1e:09:ed:
16:8a:88:1d:06:5c:79:9e:94:9c:51:6e:d2:20:3c:
b0:c1:23:78:db:1a:a3:5f:cc:3b:3f:e8:8d:4b:d3:
95:fa:41:0d:fc:7b:f8:35:63:e4:8e:4f:5a:77:11:
85:83:dc:d0:a3:82:9b:b9:8a:dd:ac:25:87:b8:ba:
60:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:CE:24:E0:55:F6:AA:C4:B5:D5:27:45:D8:80:92:CC:6D:36:03:18
X509v3 Authority Key Identifier:
keyid:65:15:2E:4E:6C:24:5C:03:FE:CD:FA:48:BF:91:39:6C:BE:FE:D7:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRUuTmwkXAP-zfpIv5E5bL7-168.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a725e2-e715-4fd2-81ec-ea42d6c159f3/1/ZRUuTmwkXAP-zfpIv5E5bL7-168.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a725e2-e715-4fd2-81ec-ea42d6c159f3/1/ZRUuTmwkXAP-zfpIv5E5bL7-168.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:da:1a:4c:f7:b2:af:68:43:7c:e7:63:31:26:59:4f:bd:9e:
96:25:84:f1:2c:53:97:15:a8:36:bb:21:53:8e:d3:a3:03:70:
9c:a6:e4:39:b6:91:cb:83:ea:b7:78:71:53:cd:85:c4:27:93:
20:68:61:ef:35:27:16:c0:c3:5b:f2:be:f6:0d:72:00:39:36:
e7:a5:fc:c7:bc:9c:b9:ef:03:2a:3c:42:a9:22:48:23:11:50:
f2:17:93:9d:2c:d9:03:73:99:83:bc:7f:6a:ec:98:e3:c2:92:
0c:6b:df:0c:4d:e9:25:a8:91:7e:3f:75:04:7f:80:88:a8:52:
a7:5a:04:83:c5:67:14:b5:35:eb:a3:76:07:de:13:90:92:66:
d7:aa:f8:d2:fd:59:45:49:88:ce:e7:64:84:f0:b0:ec:1f:5a:
3d:34:73:5c:3c:a9:12:9e:f7:ee:a1:9f:ed:2a:cb:d5:21:18:
ae:7e:99:fe:80:ea:6e:a7:d3:b9:25:6d:a2:87:a3:29:1f:68:
e7:53:c3:c5:24:18:49:22:dd:77:57:7e:aa:39:c1:1d:ca:20:
a2:57:35:51:33:4d:5d:f2:49:33:76:b8:89:12:56:cd:7e:2f:
4a:4e:e2:f2:3b:8b:03:92:1b:38:29:e7:73:3d:bc:1b:c5:86:
4c:6d:96:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:54:49 2026 by rpki-client