
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.mft
File: rZr63kGDroAEjWuEgY7sRvaA-iY.mft (raw, json)
Hash identifier: QMXW5qCrYzTnfJpUOCbAm2PE6Mhf3HYDf0DF0w7g26Y=
Subject key identifier: 6F:9E:55:45:82:2A:F8:00:AD:D4:7E:3D:CB:EE:C3:06:17:E0:CC:53
Authority key identifier: AD:9A:FA:DE:41:83:AE:80:04:8D:6B:84:81:8E:EC:46:F6:80:FA:26
Certificate issuer: /CN=ad9afade4183ae80048d6b84818eec46f680fa26
Certificate serial: 019F9248E090227C3331E8BE7A575448ECF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rZr63kGDroAEjWuEgY7sRvaA-iY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.mft
Manifest number: 17FA
Signing time: Fri 24 Jul 2026 04:01:17 +0000
Manifest this update: Fri 24 Jul 2026 04:01:17 +0000
Manifest next update: Sat 25 Jul 2026 04:01:17 +0000
Files and hashes: 1: YhV2RPOqPZXVdAMRyoGhsYcqg5o.roa (hash: +2OSyQukbn8Ac2KWdiYjJtwI1C2RFg/LbfJyv2kiAaQ=)
2: rZr63kGDroAEjWuEgY7sRvaA-iY.crl (hash: mF8bzHCdI3fjUIUvDn3o9jwKnL7Cg5wQgJ1yP+KG+vY=)
3: zymQ8lQH58g9kZdGDaCuBYAYQI4.roa (hash: UsBi140YQptoK8CMotM0bOiYKyUZpHcPLjWyz1MACI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rZr63kGDroAEjWuEgY7sRvaA-iY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:e0:90:22:7c:33:31:e8:be:7a:57:54:48:ec:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad9afade4183ae80048d6b84818eec46f680fa26
Validity
Not Before: Jul 24 04:01:17 2026 GMT
Not After : Jul 25 04:01:17 2026 GMT
Subject: CN=6f9e5545822af800add47e3dcbeec30617e0cc53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c7:3d:54:be:f7:b2:e0:de:c2:b3:f4:a1:bd:
b8:ed:3a:9b:87:fb:db:b7:c0:fb:a7:72:08:cf:b9:
29:b7:86:4d:5c:94:fb:35:e4:6c:30:7e:d5:6b:e3:
e2:4d:57:c3:00:7e:99:89:99:c4:af:9e:f0:11:24:
be:4b:90:41:bd:7a:d1:69:b7:9a:9c:57:1c:95:8f:
da:2b:b3:0f:b9:80:b5:61:8e:04:31:84:e2:55:68:
89:b7:2e:54:af:de:11:38:cd:0c:c3:6b:33:67:8d:
4e:b8:7f:a1:12:74:d2:ef:a7:8b:9d:a6:55:82:19:
91:63:8c:40:e7:c4:55:90:be:cf:a7:20:ea:85:ff:
64:62:b3:50:d5:a1:ad:f8:8c:4c:0e:2c:d9:63:98:
77:5d:32:1d:9d:d4:e9:83:9a:31:38:49:6b:b4:a9:
60:ae:b5:b4:bc:75:2b:27:e1:52:2d:87:79:6c:b2:
8f:2b:a7:62:d0:4c:92:95:47:29:ae:c4:5c:3a:6c:
f6:ec:03:79:34:59:2b:5e:b8:d2:da:05:54:67:09:
11:75:5a:d8:d8:b8:b4:2f:24:88:8a:50:24:0f:26:
4e:3f:cd:9d:90:44:b5:81:2a:06:d2:b2:c8:a3:76:
ee:ee:7c:c4:2b:3b:29:1c:50:6f:53:f2:ae:55:0f:
3c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:9E:55:45:82:2A:F8:00:AD:D4:7E:3D:CB:EE:C3:06:17:E0:CC:53
X509v3 Authority Key Identifier:
keyid:AD:9A:FA:DE:41:83:AE:80:04:8D:6B:84:81:8E:EC:46:F6:80:FA:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rZr63kGDroAEjWuEgY7sRvaA-iY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:95:5c:85:8f:96:9b:6a:d1:6e:69:6d:ff:ab:3b:8b:2b:51:
b3:8c:96:d4:13:b0:be:3f:42:99:a4:bd:df:7b:14:8d:db:96:
3b:df:f8:b0:de:47:76:20:a9:9c:72:20:f6:dd:05:23:bb:d1:
cb:6e:e0:a4:c6:87:eb:5d:07:8d:0d:f2:f7:63:42:82:e4:39:
56:0a:84:a1:24:ec:2a:ea:25:06:9d:74:fb:c3:0e:55:a9:c4:
f4:d6:6f:88:8a:13:2a:3e:b7:10:03:8b:66:ab:53:e9:39:65:
93:e7:5a:23:a4:cc:c8:12:4a:fe:4d:2a:3a:d5:c0:a2:83:b5:
88:26:bf:ba:6d:b1:54:8a:12:c4:a1:7a:72:cb:5b:01:8c:3a:
2f:27:89:14:58:be:f8:d1:0d:e4:f2:ee:7f:9c:5c:9f:88:4c:
fd:07:62:44:23:fd:ce:b8:e5:3f:16:a5:44:b9:6b:63:f7:e4:
61:7c:c4:cc:31:7c:72:ca:98:4b:51:b4:43:74:37:65:8f:bd:
87:f9:c6:65:f0:2a:3e:ce:3b:f8:b5:37:2e:9e:ed:c9:4e:3b:
7f:c5:7c:be:47:fb:21:f4:c3:ea:18:77:dd:ea:e5:dc:a4:6c:
67:cd:53:1a:15:d2:bc:04:f0:e7:0a:de:68:23:eb:9f:42:5b:
59:67:2f:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:28:48 2026 by rpki-client