Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft
File: Zw5gd5881NA9XlB4QPX6KjGmq40.mft (raw, json)
Hash identifier: qmFjejNCziihwPVgvldGVpIPw+ws3ZaaauBaMz4cFyk=
Subject key identifier: 5F:44:99:9C:AF:0B:95:92:6B:BE:F1:F8:AA:FB:2A:87:23:B6:FB:A4
Authority key identifier: 67:0E:60:77:9F:3C:D4:D0:3D:5E:50:78:40:F5:FA:2A:31:A6:AB:8D
Certificate issuer: /CN=670e60779f3cd4d03d5e507840f5fa2a31a6ab8d
Certificate serial: 019F93C8ACFD3C46F720D77436BC4BCEFCEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zw5gd5881NA9XlB4QPX6KjGmq40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft
Manifest number: 0827
Signing time: Fri 24 Jul 2026 11:00:29 +0000
Manifest this update: Fri 24 Jul 2026 11:00:29 +0000
Manifest next update: Sat 25 Jul 2026 11:00:29 +0000
Files and hashes: 1: 99ql3Nj_XXqdJBUKyH1zSjprsmk.roa (hash: 8Q5g46XQnTAlgbAY9G1RdWl4ij89rLN6KeETKWp4UX4=)
2: UKvSxhXp6UeN9PA2d7zmzONW8dI.roa (hash: U2Kl3dxAuyKIqhwNvATcE57d94w+8GaKrGRAFwd2pQQ=)
3: Zw5gd5881NA9XlB4QPX6KjGmq40.crl (hash: kF1DgfxgxSV4bEM9ZVr0ytCxkADR7e7utiq4pX6RwE0=)
4: yGnTUZ-K5iZvv_QJlyjyr1Vifo0.roa (hash: 3NvMCRIYGPgbO9Y+3R7bmJF+C6D6NUF59+RrT9ZBe2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zw5gd5881NA9XlB4QPX6KjGmq40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c8:ac:fd:3c:46:f7:20:d7:74:36:bc:4b:ce:fc:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=670e60779f3cd4d03d5e507840f5fa2a31a6ab8d
Validity
Not Before: Jul 24 11:00:29 2026 GMT
Not After : Jul 25 11:00:29 2026 GMT
Subject: CN=5f44999caf0b95926bbef1f8aafb2a8723b6fba4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:91:cc:44:e4:26:bc:b7:fb:37:f5:69:ce:0d:
27:d5:3c:34:79:e5:eb:62:60:6a:72:68:e9:6a:35:
b6:5c:48:74:9e:a9:19:24:cd:57:68:53:be:53:55:
e9:f7:4b:18:f0:53:19:1f:58:bd:5a:28:2e:76:73:
64:4e:44:9a:f7:1a:01:56:cc:80:c8:ea:7f:77:32:
04:d1:78:03:eb:5e:06:05:93:ea:06:4e:63:e9:c9:
7e:46:c2:fd:b6:fe:ca:a1:58:74:b0:93:24:1e:9a:
c1:8d:f7:b9:9b:0c:00:fd:2e:33:10:41:0d:7f:df:
1e:01:88:e0:e1:00:8f:3a:41:ba:e8:c3:47:5d:03:
15:54:5c:3a:46:c3:c3:e5:9a:95:e9:d5:ad:6a:db:
d0:be:40:69:7d:32:92:4b:22:00:41:33:29:73:39:
21:7a:3b:04:9e:4a:6d:c2:81:9f:10:35:34:ae:88:
8f:78:2a:31:7d:03:ed:55:31:e4:95:57:d3:71:b1:
ea:61:b2:2d:e7:ab:9d:4b:1f:43:4a:d3:73:48:fd:
ba:a1:c1:ab:10:52:3c:4f:0a:df:f0:82:99:97:6e:
ac:e9:93:8b:e8:5f:63:f5:ce:73:e0:af:c1:05:5c:
83:5c:f9:6e:96:b7:7b:ee:c0:b6:5a:fa:2b:8b:03:
63:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:44:99:9C:AF:0B:95:92:6B:BE:F1:F8:AA:FB:2A:87:23:B6:FB:A4
X509v3 Authority Key Identifier:
keyid:67:0E:60:77:9F:3C:D4:D0:3D:5E:50:78:40:F5:FA:2A:31:A6:AB:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zw5gd5881NA9XlB4QPX6KjGmq40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:7b:d2:af:21:15:39:86:53:24:44:fb:b5:f7:02:1c:0f:c6:
7d:2b:6c:a7:da:36:db:8f:11:b2:7a:fb:59:a1:f0:1e:49:2b:
aa:e6:c1:f1:b4:db:e6:ad:12:cc:df:10:e9:36:4a:f0:04:7a:
5d:65:02:36:f9:41:ce:b9:a5:d6:d9:21:1a:f5:9c:8f:ba:71:
a4:6c:f7:f9:a9:8b:1d:c5:83:63:b6:26:bd:da:5f:f2:d8:c0:
b8:62:fe:db:41:5b:5a:69:45:26:ad:aa:ce:01:00:a9:63:8c:
b9:4c:b2:8e:ef:f6:f1:38:7d:39:21:1f:fa:0c:2b:c0:bf:3f:
72:38:58:b9:7c:94:ee:1e:b3:ed:67:94:b8:ab:3f:ca:59:55:
eb:28:a7:8f:bb:53:dc:cb:b7:d9:a5:34:c7:55:f0:3d:4a:12:
74:c1:47:a1:48:50:f3:52:f4:ea:88:c6:9d:35:65:77:cd:fa:
e0:7f:d8:6c:1c:2a:72:4f:a5:db:a3:0c:e7:e3:82:bc:51:39:
5f:7e:82:a0:d6:bf:66:5f:18:83:b0:76:8f:b2:9f:d0:19:1f:
3d:26:22:13:e6:cf:0a:17:1b:db:56:d4:a3:45:79:ba:e5:09:
ad:93:3f:f9:a7:4b:10:3b:a7:9d:08:ef:1b:d0:0c:2e:32:74:
5c:53:3e:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:13:25 2026 by rpki-client