Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.mft
File: ZK7IAkyqEDqEEmlsfnL3eAPNhpU.mft (raw, json)
Hash identifier: 4E/9K+bTTUvfhm4fhNkGfLkFgRpWvuHkCeF43ThW9hs=
Subject key identifier: 3A:A5:08:49:FD:4E:23:79:66:B0:E4:E7:86:A6:31:B7:22:14:58:63
Authority key identifier: 64:AE:C8:02:4C:AA:10:3A:84:12:69:6C:7E:72:F7:78:03:CD:86:95
Certificate issuer: /CN=64aec8024caa103a8412696c7e72f77803cd8695
Certificate serial: 019F94365FCC2251B71BEB74DA16E9EAA228
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.mft
Manifest number: 1408
Signing time: Fri 24 Jul 2026 13:00:19 +0000
Manifest this update: Fri 24 Jul 2026 13:00:19 +0000
Manifest next update: Sat 25 Jul 2026 13:00:19 +0000
Files and hashes: 1: SWC8q5CH8zumHrflzVp4e7i8dGY.roa (hash: z98d01QAmvPs9qVeEUxQJcsgJEzGZb8FADftU7i+UZw=)
2: ZK7IAkyqEDqEEmlsfnL3eAPNhpU.crl (hash: WxZaPVJjnZjmmatLRgb1c1DJ3Aa3hslDROp7oVLnGkg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:36:5f:cc:22:51:b7:1b:eb:74:da:16:e9:ea:a2:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64aec8024caa103a8412696c7e72f77803cd8695
Validity
Not Before: Jul 24 13:00:19 2026 GMT
Not After : Jul 25 13:00:19 2026 GMT
Subject: CN=3aa50849fd4e237966b0e4e786a631b722145863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:51:df:a9:3e:6d:fa:1f:62:4c:31:51:3b:e6:
1a:f2:1d:8e:16:60:31:ae:bc:74:c9:41:b3:9c:99:
a5:1e:06:46:38:eb:80:ce:0b:6a:48:71:3f:ca:67:
93:df:9a:ce:ba:1d:a4:a7:5d:dc:3e:40:3b:69:6b:
f0:41:00:64:3f:04:9d:27:bc:86:01:63:83:f4:cd:
28:d0:b3:0c:96:a3:14:8a:57:d2:e4:de:76:0d:de:
3e:61:64:2d:61:d6:7a:c2:17:f9:68:d3:dc:22:73:
4a:e7:ce:38:94:26:fb:a9:ab:99:c2:14:ce:3a:dc:
bb:74:e9:06:3b:bb:7c:0c:51:7d:85:91:8c:52:92:
c8:02:21:d1:7b:0b:5e:09:a1:e2:22:14:9e:09:7d:
97:23:50:9f:55:d7:b4:4c:cf:2a:ae:66:e0:e5:9f:
54:f2:5a:1b:c2:f5:50:73:31:0e:07:69:9c:24:8b:
b3:07:26:e3:ec:a9:c7:56:c7:b5:76:22:bb:a7:45:
9e:26:a1:5d:08:1a:59:32:2b:84:23:5b:85:7b:97:
06:15:fd:7a:35:f9:86:4f:55:1e:99:ad:a7:8e:d0:
73:47:a1:f8:94:3c:f0:92:63:54:e4:d9:2c:50:7c:
55:eb:93:fe:0f:ae:ec:30:b6:ef:8b:8a:f5:31:67:
ba:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:A5:08:49:FD:4E:23:79:66:B0:E4:E7:86:A6:31:B7:22:14:58:63
X509v3 Authority Key Identifier:
keyid:64:AE:C8:02:4C:AA:10:3A:84:12:69:6C:7E:72:F7:78:03:CD:86:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:ec:46:e7:b5:72:63:a0:2d:dc:eb:af:16:51:fc:e5:05:0c:
75:3f:fc:d7:a1:9f:87:dc:60:8f:91:d7:eb:e3:95:fb:b2:e7:
a1:ac:f5:75:43:bb:ef:9b:9c:db:ef:9e:90:ba:ac:9a:76:33:
72:af:5e:d0:9d:63:27:f1:41:16:4f:9f:01:61:0b:ba:1b:4e:
b1:1c:09:98:ff:7d:f3:20:d7:bd:00:79:0f:12:73:f0:9b:3f:
fa:87:03:17:92:3f:30:5a:52:d9:ac:19:e9:ea:a2:ed:4d:a2:
d3:43:d0:bb:2e:03:6d:fc:2f:f4:b0:48:0b:31:1d:54:9b:14:
3a:46:45:1a:aa:25:ff:10:4f:76:bc:42:6d:f9:75:41:f8:2a:
d8:aa:dd:e0:57:f4:fa:b5:f1:02:fb:7e:ca:13:13:42:10:68:
a8:9a:cf:12:eb:4d:69:36:e0:91:74:02:3e:0d:0f:ad:61:50:
ae:a0:13:f1:8d:e5:44:7b:f1:6d:38:6e:0e:ba:9a:c8:ce:d1:
a1:ef:a9:7e:f9:2b:1d:99:9d:ac:b3:e2:1f:e7:8b:d3:52:b7:
da:ee:ef:c8:8e:4c:48:e5:4e:20:ac:7e:25:7e:f5:6a:ab:c6:
48:35:1d:39:36:ee:89:a5:47:e0:4a:5c:2f:a9:7f:8a:a0:80:
a2:8c:c0:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:45:58 2026 by rpki-client