Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/b2dd00-a621-49a9-bbab-37f9bf7861b6/1/Zckgon4-U6Nn-eqW23uve9Zag-o.mft
File: Zckgon4-U6Nn-eqW23uve9Zag-o.mft (raw, json)
Hash identifier: 5lprDbO+8ADIPkeZauKLMa42QOJU0kAPn1M4WP9hxzQ=
Subject key identifier: C0:C9:3F:24:5B:F9:BF:6E:C1:24:E0:01:10:3B:37:3E:2C:11:7E:6B
Authority key identifier: 65:C9:20:A2:7E:3E:53:A3:67:F9:EA:96:DB:7B:AF:7B:D6:5A:83:EA
Certificate issuer: /CN=65c920a27e3e53a367f9ea96db7baf7bd65a83ea
Certificate serial: 019F91DB2F6752420B0550F3FE03E76F678A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zckgon4-U6Nn-eqW23uve9Zag-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/b2dd00-a621-49a9-bbab-37f9bf7861b6/1/Zckgon4-U6Nn-eqW23uve9Zag-o.mft
Manifest number: 156B
Signing time: Fri 24 Jul 2026 02:01:28 +0000
Manifest this update: Fri 24 Jul 2026 02:01:28 +0000
Manifest next update: Sat 25 Jul 2026 02:01:28 +0000
Files and hashes: 1: Zckgon4-U6Nn-eqW23uve9Zag-o.crl (hash: oyGIwI5O9hLbANIqBTRxuSwU0v8r4pZpXw07gzOZcoY=)
2: qvAyroJETTvqQMM_MVkdoGYncxA.roa (hash: nmTwuA7cbFKwFpXIGdTjihs7A1gDgSqO3ta9jqth4L8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/b2dd00-a621-49a9-bbab-37f9bf7861b6/1/Zckgon4-U6Nn-eqW23uve9Zag-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/b2dd00-a621-49a9-bbab-37f9bf7861b6/1/Zckgon4-U6Nn-eqW23uve9Zag-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zckgon4-U6Nn-eqW23uve9Zag-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 02:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:db:2f:67:52:42:0b:05:50:f3:fe:03:e7:6f:67:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65c920a27e3e53a367f9ea96db7baf7bd65a83ea
Validity
Not Before: Jul 24 02:01:28 2026 GMT
Not After : Jul 25 02:01:28 2026 GMT
Subject: CN=c0c93f245bf9bf6ec124e001103b373e2c117e6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:02:38:41:37:9b:4d:b9:4c:28:8a:fa:d2:9b:
69:6f:73:7b:ca:40:d6:9d:28:ce:56:4b:73:54:ac:
74:56:bf:be:b5:51:f3:c2:37:ae:46:f2:32:1f:9e:
43:1d:f9:f8:65:59:7b:35:5a:ad:94:fd:25:4a:8c:
62:76:df:a2:19:e1:5e:4c:a9:78:04:7a:e2:96:89:
70:0e:65:0a:8a:5f:74:3f:fa:b5:36:44:03:14:8d:
8b:89:65:bb:14:e7:ff:e8:62:9f:39:05:11:df:fc:
04:64:71:39:24:20:6b:d2:1e:fc:10:5c:23:24:73:
92:6a:ac:10:7b:3f:2a:c2:ac:2b:d1:e9:30:ab:3a:
6d:49:2f:d9:3d:52:69:d7:29:57:5a:11:d2:cd:9f:
d1:b2:23:90:19:2c:02:b9:3e:37:6b:cb:c1:c6:ed:
f0:76:84:9f:3d:24:93:b1:9e:c5:c3:65:de:66:4d:
28:b2:e5:2b:ea:52:54:14:76:a7:0e:5b:0f:4c:8c:
e8:1a:90:07:bd:b6:31:4c:4d:60:e2:1e:1e:ed:f3:
a9:3b:7d:ea:b0:8b:f0:2b:fc:06:85:b9:d8:8f:cf:
2d:95:11:6b:8e:63:4c:82:51:bf:a9:51:0e:60:3e:
97:9a:78:c0:f6:e0:a4:25:92:50:d2:49:1d:ed:b3:
a2:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:C9:3F:24:5B:F9:BF:6E:C1:24:E0:01:10:3B:37:3E:2C:11:7E:6B
X509v3 Authority Key Identifier:
keyid:65:C9:20:A2:7E:3E:53:A3:67:F9:EA:96:DB:7B:AF:7B:D6:5A:83:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zckgon4-U6Nn-eqW23uve9Zag-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b2dd00-a621-49a9-bbab-37f9bf7861b6/1/Zckgon4-U6Nn-eqW23uve9Zag-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b2dd00-a621-49a9-bbab-37f9bf7861b6/1/Zckgon4-U6Nn-eqW23uve9Zag-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:45:ad:55:d7:67:c1:62:a1:58:66:f1:a8:e8:26:d4:08:78:
e2:8c:56:81:f0:44:a7:9d:95:ea:ed:9c:5f:51:c3:f0:35:a0:
6c:07:95:6f:ef:e1:4f:de:b1:8e:c5:12:60:7c:e5:01:1b:77:
c7:1f:96:b9:38:0d:da:c4:29:b6:4a:52:66:a0:2b:8b:db:fd:
74:47:00:f4:90:8f:48:9a:0d:37:b6:8f:c0:ba:7b:86:db:67:
05:67:ee:88:fc:63:3a:e7:a6:5e:9a:74:d8:ce:3e:45:ae:c8:
8a:72:0f:62:27:3e:a4:aa:78:53:7d:d5:11:b5:d9:ff:4f:54:
a7:d4:cd:47:51:e8:e5:b3:dd:af:83:df:d8:bc:cc:cc:23:93:
d9:73:90:f3:41:a2:e2:13:6c:35:dc:2b:76:e1:d0:07:2d:01:
dd:8f:d5:1b:32:ab:c8:e0:53:89:13:eb:f9:87:68:ff:29:92:
dc:d4:9b:4a:1a:c0:42:99:6f:10:cc:e8:bf:02:9e:72:8c:9f:
b6:e3:6d:58:6d:a2:03:19:ca:fe:a7:c9:ab:81:6c:49:88:24:
e8:75:e1:f6:ab:58:29:d8:c1:f1:17:71:39:46:6a:21:f2:23:
1c:94:6a:31:c8:8a:c2:f7:fc:29:97:80:d0:b9:e4:fc:dc:dc:
32:ce:c8:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:28:47 2026 by rpki-client