Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.mft
File: ZjhRXzKUSWmuADG94C0fTL0NK5g.mft (raw, json)
Hash identifier: ZFJAOyfIyJvzY0tKkv+N0KS2/8cJsvwQ9IxK1bp6Lyg=
Subject key identifier: EA:B9:CE:CF:91:09:BB:43:52:85:78:5A:3B:B2:3E:05:E5:23:B4:2A
Authority key identifier: 66:38:51:5F:32:94:49:69:AE:00:31:BD:E0:2D:1F:4C:BD:0D:2B:98
Certificate issuer: /CN=6638515f32944969ae0031bde02d1f4cbd0d2b98
Certificate serial: 019F924832860DEFF5C9877521E5E320132D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZjhRXzKUSWmuADG94C0fTL0NK5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.mft
Manifest number: 0527
Signing time: Fri 24 Jul 2026 04:00:32 +0000
Manifest this update: Fri 24 Jul 2026 04:00:32 +0000
Manifest next update: Sat 25 Jul 2026 04:00:32 +0000
Files and hashes: 1: EQIS8hUY1cmRXKR2EV3HGZu3pAA.roa (hash: Wp9jKVUnjH19KZBMjioHvcWYEkt9n8/MKYDMHRVjrW8=)
2: U6_BOZR92hnw_a9L4P6TzqeXhec.roa (hash: g5QjwrMvRa/952IazG0KYw2xw/6dTSo8fap6F5NGQ7c=)
3: ZjhRXzKUSWmuADG94C0fTL0NK5g.crl (hash: U3w2G/tWjtxm4CFSljj9PVZQl9qXxOWLmItgzOVv2l4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZjhRXzKUSWmuADG94C0fTL0NK5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:32:86:0d:ef:f5:c9:87:75:21:e5:e3:20:13:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6638515f32944969ae0031bde02d1f4cbd0d2b98
Validity
Not Before: Jul 24 04:00:32 2026 GMT
Not After : Jul 25 04:00:32 2026 GMT
Subject: CN=eab9cecf9109bb435285785a3bb23e05e523b42a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f4:98:69:1e:33:b0:53:f5:b4:fc:e8:5f:81:
89:28:1b:cb:06:77:99:52:d2:aa:e6:2e:b0:34:2a:
44:20:0d:f0:9e:35:c3:3b:aa:27:ac:c0:88:bc:e4:
7f:9b:86:76:4b:2d:13:9b:99:81:13:e5:fd:8d:4f:
1c:c7:fe:2a:6c:00:d0:ac:4b:11:1f:de:d4:2e:77:
98:4d:4f:57:58:d4:dd:3e:0d:47:59:d1:56:64:17:
fc:9b:07:9d:5e:77:01:8a:b4:cf:6e:65:a2:b2:fe:
0a:4e:32:12:e7:45:f6:9c:da:90:79:55:a4:6b:c5:
aa:3a:a8:aa:ce:a1:e5:f2:69:87:e2:a8:4e:1d:04:
4b:0f:13:0e:f0:bc:cd:c6:08:02:99:67:d4:34:6b:
6a:a5:92:ac:64:c6:14:53:97:e4:f9:ca:0d:86:60:
91:48:b3:b4:33:e4:6c:ed:b9:31:5a:01:c9:97:1c:
b6:a7:0e:15:5e:49:a0:ae:4d:9f:95:2e:ef:3a:df:
b2:ca:bd:4e:69:7e:43:ca:cb:d5:bf:e5:12:70:30:
2f:4b:21:1f:ea:07:34:dc:25:7e:3c:11:9e:74:69:
38:fd:5c:63:58:d0:8e:24:f6:db:50:ee:29:e6:1f:
e2:61:87:cd:4a:9c:e7:d4:bf:02:a0:99:98:2b:f3:
1a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:B9:CE:CF:91:09:BB:43:52:85:78:5A:3B:B2:3E:05:E5:23:B4:2A
X509v3 Authority Key Identifier:
keyid:66:38:51:5F:32:94:49:69:AE:00:31:BD:E0:2D:1F:4C:BD:0D:2B:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZjhRXzKUSWmuADG94C0fTL0NK5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:59:c3:6e:51:c4:53:bc:f0:b6:08:43:0b:4d:55:09:43:56:
3d:6a:16:35:af:b8:94:96:f7:e7:b1:ed:fb:ea:37:ab:7c:c8:
9a:08:02:33:41:6d:5d:c1:1f:93:5c:86:75:11:97:7d:52:a0:
a7:43:fb:77:a1:c5:70:2c:81:4d:9e:e6:9b:be:38:c7:2d:7d:
12:dd:d4:66:49:54:f4:85:a2:df:f2:18:4d:e5:aa:44:18:91:
66:13:b6:1d:1c:71:c4:84:0d:a0:85:b7:cf:c7:74:d2:ed:06:
76:99:71:1c:db:6a:1f:f0:87:e5:9d:d2:34:d4:90:04:a6:8d:
f8:0b:9f:08:c6:b6:28:91:b0:54:6e:aa:92:fe:f3:bd:8c:ad:
c9:cc:7e:6b:75:80:dd:45:a9:c7:c8:73:37:8a:07:de:ec:9f:
59:2b:f9:bf:78:a0:88:b6:71:d8:8a:b8:e9:fd:21:c0:6a:a6:
f6:3b:37:ba:44:f4:42:d3:32:65:e6:65:08:fd:75:55:fc:40:
82:d7:a8:55:d6:ef:19:76:55:39:9c:87:1e:c5:b3:c5:ca:97:
26:b5:67:20:13:81:c5:da:a8:f9:1a:25:71:f5:b0:2d:39:76:
a3:cb:e2:f6:8a:aa:49:14:10:7b:01:05:09:fb:f1:75:fd:8e:
e7:1d:76:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:10:32 2026 by rpki-client