Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/ZiEKIeTkbpksh_aziCYLb8xi77c.mft
File: ZiEKIeTkbpksh_aziCYLb8xi77c.mft (raw, json)
Hash identifier: eUFl7KdIeFXQs1FZ5hbprqSuLI14032U3wNnpAPSnjc=
Subject key identifier: A5:C7:B4:3E:2B:92:D4:71:11:00:8C:CF:BD:22:6A:10:46:FD:78:1B
Authority key identifier: 66:21:0A:21:E4:E4:6E:99:2C:87:F6:B3:88:26:0B:6F:CC:62:EF:B7
Certificate issuer: /CN=66210a21e4e46e992c87f6b388260b6fcc62efb7
Certificate serial: 019F916C543E02DCAF7CE81442B9761D078A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZiEKIeTkbpksh_aziCYLb8xi77c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/ZiEKIeTkbpksh_aziCYLb8xi77c.mft
Manifest number: 40
Signing time: Fri 24 Jul 2026 00:00:23 +0000
Manifest this update: Fri 24 Jul 2026 00:00:23 +0000
Manifest next update: Sat 25 Jul 2026 00:00:23 +0000
Files and hashes: 1: 7hxycR97F6II7DC0Vj37aerZ5oQ.roa (hash: KZSoHAwVwfiAoSXeYAVjqNq4+GGagnZ4C5DwWpPA1wQ=)
2: ZiEKIeTkbpksh_aziCYLb8xi77c.crl (hash: ApBgDEjFoeWZATZmIS/zKLGOGPEYNyx3OgHD3xHQ2sM=)
3: qxo3ePZzVemzYTrsxmbd-aDG0xQ.roa (hash: Ts2ye0fisSWfvRXQ8xO3p21sDayxpAX1ycZX2DBkKX8=)
4: uYVzId5kHuAZNJSNCwDKcMz7_xY.roa (hash: c9bVVqZsVrLii9K2d4d5uBshO4e4alJujzyjDVg0Pr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/ZiEKIeTkbpksh_aziCYLb8xi77c.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/ZiEKIeTkbpksh_aziCYLb8xi77c.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZiEKIeTkbpksh_aziCYLb8xi77c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:54:3e:02:dc:af:7c:e8:14:42:b9:76:1d:07:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66210a21e4e46e992c87f6b388260b6fcc62efb7
Validity
Not Before: Jul 24 00:00:23 2026 GMT
Not After : Jul 25 00:00:23 2026 GMT
Subject: CN=a5c7b43e2b92d47111008ccfbd226a1046fd781b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:e8:30:d7:32:4a:79:e1:4d:3c:0c:eb:f8:87:
74:23:64:89:be:35:56:1c:c3:a6:7b:da:3c:40:de:
e4:0f:cd:7c:69:ec:74:55:6c:55:e0:cf:80:07:c3:
87:2b:65:b0:7c:53:aa:a0:28:ee:df:c3:87:31:2e:
63:8f:3d:93:8a:6e:d2:e9:88:a3:30:4d:21:f9:0a:
79:3e:d1:fd:e8:32:8a:1f:b4:c1:19:a2:ec:e3:d3:
f4:0d:ea:36:0d:d2:f9:4b:41:e7:b2:d8:20:cd:f6:
59:cd:e7:5a:17:78:09:2a:30:12:a4:76:1f:8f:7a:
ed:43:67:83:32:18:8f:d5:81:c0:41:97:66:16:04:
3e:a2:91:22:fd:29:87:d5:da:a5:9e:58:b1:d5:c0:
ce:2b:ff:40:f4:b5:7f:24:f9:0f:57:52:ae:55:19:
34:a5:24:7d:0e:c3:73:1e:38:65:55:38:f8:45:c9:
bf:cb:0f:7a:7f:45:46:dd:4d:b6:39:7e:e2:ef:b4:
0d:ae:52:c5:ba:10:f5:90:03:e0:b8:9c:03:e3:9c:
9f:c8:d4:f6:16:97:22:ec:42:26:10:57:f6:6e:ce:
17:91:dc:a0:2b:92:97:9f:ac:99:67:89:a5:e2:31:
ea:71:60:40:26:fa:9f:b4:2b:96:01:7a:b1:11:d9:
93:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:C7:B4:3E:2B:92:D4:71:11:00:8C:CF:BD:22:6A:10:46:FD:78:1B
X509v3 Authority Key Identifier:
keyid:66:21:0A:21:E4:E4:6E:99:2C:87:F6:B3:88:26:0B:6F:CC:62:EF:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZiEKIeTkbpksh_aziCYLb8xi77c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/ZiEKIeTkbpksh_aziCYLb8xi77c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/ZiEKIeTkbpksh_aziCYLb8xi77c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:43:16:49:ad:8a:fe:d7:64:a2:11:ab:ca:0a:38:88:2b:45:
cf:00:9f:9c:9d:f1:8a:8a:ca:62:7e:41:04:bc:bb:a3:d7:25:
4f:46:61:0e:8c:11:06:c7:29:70:15:85:2e:ea:7d:9c:b9:bb:
b6:68:6b:e3:88:8f:51:cf:db:74:d0:85:ec:41:6e:08:12:89:
42:5d:c4:81:30:5d:89:d6:2e:7f:1c:8e:24:54:dd:bf:ff:aa:
7f:b7:a0:4e:a6:2a:b7:d4:a4:d6:6c:36:35:bf:12:bf:9a:e0:
c6:80:86:d8:b2:0b:bc:5a:c1:33:7e:6c:07:9c:01:e0:73:d2:
71:ab:ce:33:97:fb:85:bc:14:26:6e:db:37:df:b9:67:8f:1c:
99:54:63:42:bc:19:5e:6e:07:ed:0f:d3:63:a6:82:1f:54:34:
85:a2:30:12:ee:c8:b9:9d:26:c0:76:10:2f:f0:58:d2:6a:59:
c3:18:60:8c:19:25:22:f4:58:70:bc:0f:37:ac:e6:d8:88:6a:
32:71:86:66:a5:ec:9f:d0:42:54:f1:a5:31:a1:9d:e3:2d:c6:
3c:e7:99:e1:18:f9:41:b4:ed:bf:f4:26:1c:df:cd:67:44:e2:
22:91:7a:4c:aa:cd:b3:cb:20:34:06:4f:d7:8c:5c:84:25:d1:
dc:29:85:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:30:33 2026 by rpki-client