Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/ZnKfnQeG9ooezVxakrw5LYaRl14.mft
File: ZnKfnQeG9ooezVxakrw5LYaRl14.mft (raw, json)
Hash identifier: B9oIGi0zfM8CFeGxXvb8ADZTpI/LToE7uQaIRbeBtjY=
Subject key identifier: 3D:37:DA:40:F1:53:6A:4F:36:73:E5:1B:90:0F:D2:B8:04:AC:C0:7D
Authority key identifier: 66:72:9F:9D:07:86:F6:8A:1E:CD:5C:5A:92:BC:39:2D:86:91:97:5E
Certificate issuer: /CN=66729f9d0786f68a1ecd5c5a92bc392d8691975e
Certificate serial: 019F95EE7F503D7211A22317250271CFB302
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZnKfnQeG9ooezVxakrw5LYaRl14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/ZnKfnQeG9ooezVxakrw5LYaRl14.mft
Manifest number: 15AC
Signing time: Fri 24 Jul 2026 21:01:02 +0000
Manifest this update: Fri 24 Jul 2026 21:01:02 +0000
Manifest next update: Sat 25 Jul 2026 21:01:02 +0000
Files and hashes: 1: ZnKfnQeG9ooezVxakrw5LYaRl14.crl (hash: gY3uyoZllYKTTtIqLLZXTzD0Ltyg8gHwDeeVXtNhFek=)
2: uoe5Gtg5RLHmca7orVX_kgMJ6LA.roa (hash: fAkGAUFUUGm9PtxJMnL3fGCs6QplpIcm9Vtk+9FgVDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/ZnKfnQeG9ooezVxakrw5LYaRl14.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/ZnKfnQeG9ooezVxakrw5LYaRl14.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZnKfnQeG9ooezVxakrw5LYaRl14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:ee:7f:50:3d:72:11:a2:23:17:25:02:71:cf:b3:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66729f9d0786f68a1ecd5c5a92bc392d8691975e
Validity
Not Before: Jul 24 21:01:02 2026 GMT
Not After : Jul 25 21:01:02 2026 GMT
Subject: CN=3d37da40f1536a4f3673e51b900fd2b804acc07d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:dd:3e:f5:64:1d:76:0d:77:70:9c:77:a0:e9:
87:18:94:88:fe:46:4d:5a:d5:1e:f6:81:67:55:fd:
94:98:a0:d2:e4:11:ce:35:6b:59:bc:bd:74:d4:7c:
03:87:28:3c:a5:90:4a:37:b8:aa:10:82:42:72:4b:
51:7e:3d:72:2f:63:e7:30:4f:4f:b4:7d:8f:15:49:
d2:9a:6f:bb:0e:18:3b:de:09:eb:72:bb:33:95:65:
6f:04:f2:07:ed:b8:9e:e5:2c:6b:c0:df:7b:b2:ac:
49:7a:70:de:48:18:d3:58:65:c5:ee:fc:e8:74:55:
b0:3c:25:fa:d4:db:2e:63:03:81:e2:f9:b2:d8:82:
72:88:5a:ea:97:da:45:20:bc:c9:cb:fe:86:cd:bd:
de:41:db:59:ca:58:5c:7a:a9:98:5d:56:a2:1b:69:
1b:18:b6:c4:5a:02:34:27:87:28:e9:dc:19:43:e1:
7d:4e:d4:49:3e:92:22:cd:32:99:48:bf:4a:e5:e8:
90:43:55:82:f7:eb:6f:aa:67:fc:9d:ac:d0:36:2f:
63:f8:c4:07:18:c5:bf:a1:a7:af:96:c4:59:af:08:
a3:35:11:dd:da:4c:f1:d7:c9:9b:bc:a6:56:0f:d1:
4b:cd:6d:6d:3e:22:2d:ef:e0:d8:94:01:5f:cb:e5:
0a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:37:DA:40:F1:53:6A:4F:36:73:E5:1B:90:0F:D2:B8:04:AC:C0:7D
X509v3 Authority Key Identifier:
keyid:66:72:9F:9D:07:86:F6:8A:1E:CD:5C:5A:92:BC:39:2D:86:91:97:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZnKfnQeG9ooezVxakrw5LYaRl14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/ZnKfnQeG9ooezVxakrw5LYaRl14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/ZnKfnQeG9ooezVxakrw5LYaRl14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:bb:93:94:33:92:b4:e2:5b:e3:cc:b3:9d:5b:fd:d1:95:89:
01:2d:09:c3:b2:7d:29:3e:03:e9:69:4b:31:7f:73:9a:d0:85:
cb:77:1c:53:43:ec:00:99:33:81:21:72:84:d9:76:ce:ba:6d:
e8:15:df:c9:c5:93:b0:0f:aa:3d:e0:b6:65:73:20:5a:55:ab:
b2:82:a5:0b:c7:56:7d:32:f2:c5:ba:9b:3a:c4:9b:7f:63:08:
44:f6:fd:04:72:07:8c:28:33:9e:67:51:00:79:cb:de:11:d6:
8f:ca:d4:4a:ce:37:eb:43:db:3e:b6:ce:ec:61:78:77:6c:08:
bb:71:ab:46:08:e8:c7:09:21:57:fc:4e:82:ce:9f:a7:99:3b:
31:eb:c1:01:15:70:37:d3:06:a8:cf:b1:9d:3e:5e:a7:b9:95:
98:b5:fa:72:f2:cb:45:67:f1:1e:d5:00:81:84:57:c5:0f:5f:
48:38:2c:50:dc:d3:e8:de:23:34:0c:85:01:f1:77:cc:8e:55:
46:94:ed:d7:5e:29:84:03:83:d2:1b:03:2a:60:4e:b9:a0:ed:
ef:32:ae:a0:4b:55:d5:3e:b3:f9:d2:f7:c9:5e:ac:4f:d7:c5:
08:de:ad:8d:b3:26:78:a6:ee:10:05:a8:42:c5:73:74:a1:84:
0d:18:83:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:50:32 2026 by rpki-client