Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.mft
File: ZJn3HhXA84zrolfTAwTtRL6ofFA.mft (raw, json)
Hash identifier: F6TZwvgL5Bj3hF7HYCTXfh4YVrpdkUi/x1PVl07RN5A=
Subject key identifier: 5D:AA:FA:90:4A:9C:99:FE:13:0B:EA:84:7E:1B:B9:57:1D:72:EC:7B
Authority key identifier: 64:99:F7:1E:15:C0:F3:8C:EB:A2:57:D3:03:04:ED:44:BE:A8:7C:50
Certificate issuer: /CN=6499f71e15c0f38ceba257d30304ed44bea87c50
Certificate serial: 019F9211AA04B07E3BCE2DE24A2FA05D8DFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZJn3HhXA84zrolfTAwTtRL6ofFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.mft
Manifest number: 19C5
Signing time: Fri 24 Jul 2026 03:00:58 +0000
Manifest this update: Fri 24 Jul 2026 03:00:58 +0000
Manifest next update: Sat 25 Jul 2026 03:00:58 +0000
Files and hashes: 1: ZJn3HhXA84zrolfTAwTtRL6ofFA.crl (hash: qad8yE/6Krd8S+o+BGf0SaYhYumjLdh59YofULMYnKY=)
2: jq3mq-50R-JOu-sxSGPaEm55e08.roa (hash: taGtXrf0l3O9eeA97Wyzm9CoWyPxNXpqgCP99+lV8Hk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZJn3HhXA84zrolfTAwTtRL6ofFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 03:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:aa:04:b0:7e:3b:ce:2d:e2:4a:2f:a0:5d:8d:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6499f71e15c0f38ceba257d30304ed44bea87c50
Validity
Not Before: Jul 24 03:00:58 2026 GMT
Not After : Jul 25 03:00:58 2026 GMT
Subject: CN=5daafa904a9c99fe130bea847e1bb9571d72ec7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:92:29:76:73:85:f2:49:15:45:34:4b:34:1a:
b0:f9:2f:e6:5d:07:4a:15:36:57:6b:8c:36:c0:f0:
b7:40:91:04:99:f7:07:4f:35:55:0b:08:54:7c:d2:
fa:8f:6d:84:08:08:bd:99:a6:56:d8:15:00:e5:b4:
85:62:aa:74:f6:41:f3:1c:b1:2d:37:12:cb:66:79:
2d:15:7c:e7:99:95:dd:27:1e:49:1c:70:97:da:d2:
99:97:a2:d7:46:f5:77:9b:24:25:ec:07:e7:ed:86:
87:a0:9f:04:da:3a:9d:13:8b:8f:44:c7:d1:f7:f1:
ca:ac:cf:24:0e:a9:a8:5f:3e:e9:71:40:90:f3:ff:
a9:fe:79:af:f9:61:80:ac:ce:81:16:98:6b:80:e1:
78:2a:7a:e0:0e:28:f0:32:9b:8e:3e:83:be:26:8b:
16:24:a3:35:ca:92:dd:d5:b3:f0:cb:a1:2a:c7:1c:
68:3a:3b:a5:a3:98:84:3a:b6:32:a2:df:0c:74:2f:
a3:3f:a2:37:01:a4:75:11:98:b0:ae:24:8d:b6:71:
0e:ce:12:cb:35:bc:3b:f6:92:1f:4a:fd:24:76:f4:
2e:09:f0:bf:84:61:9c:6d:c0:a6:df:c1:9a:53:65:
d8:3b:0c:a7:27:c5:d2:1f:5a:15:9d:c5:5b:3a:9b:
f0:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:AA:FA:90:4A:9C:99:FE:13:0B:EA:84:7E:1B:B9:57:1D:72:EC:7B
X509v3 Authority Key Identifier:
keyid:64:99:F7:1E:15:C0:F3:8C:EB:A2:57:D3:03:04:ED:44:BE:A8:7C:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZJn3HhXA84zrolfTAwTtRL6ofFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:62:18:21:27:a0:be:d9:b6:f2:98:0a:eb:07:9b:f3:35:21:
64:40:a5:a2:62:9d:58:2f:08:88:a8:92:31:5f:a3:f5:72:6e:
04:07:ee:12:3d:ff:5f:8a:0f:df:12:d1:56:51:66:30:d0:53:
55:0b:90:13:81:02:70:f6:a8:b4:42:8e:b1:0c:e9:04:84:c4:
e8:7d:75:a3:c7:f7:55:42:2a:e4:94:36:df:cf:10:5b:9c:1a:
2b:74:77:2a:5c:cf:a0:a0:79:d5:a4:85:54:ac:30:b8:e5:ca:
59:fb:05:53:94:0e:8a:ea:ad:3d:53:5e:73:cf:10:81:75:16:
5f:90:c0:01:e7:54:d8:9e:7a:c7:43:df:76:d9:40:fa:b6:22:
65:38:45:0e:af:0b:4d:6c:63:ac:d0:65:33:d3:36:2d:86:8e:
0f:12:52:dd:20:40:41:c5:69:a2:e1:7b:3d:d0:0f:cd:7e:e7:
6b:00:69:94:39:b0:f0:96:35:3c:ce:b1:60:a6:de:81:ff:36:
4e:6e:6e:85:c1:f8:9c:e4:cd:50:b1:52:c8:eb:81:fe:09:69:
af:92:e5:7b:a8:47:7a:af:9f:34:c8:88:7d:e3:b3:80:a1:d8:
6d:62:b7:09:ee:e4:42:0a:db:70:31:33:70:05:2c:eb:0a:85:
9d:1b:15:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:25:59 2026 by rpki-client