Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.mft
File: zs05HGYMPlfFO4fAtS7A0vL0J3U.mft (raw, json)
Hash identifier: z3Eak7zxC8RyIOERI9gb1HKPvKFVjEO/bU3gqBXx8Uc=
Subject key identifier: DF:DE:DF:ED:4A:41:DB:19:6C:F6:51:74:F4:12:BD:26:F2:5E:F2:B4
Authority key identifier: CE:CD:39:1C:66:0C:3E:57:C5:3B:87:C0:B5:2E:C0:D2:F2:F4:27:75
Certificate issuer: /CN=cecd391c660c3e57c53b87c0b52ec0d2f2f42775
Certificate serial: 019F916C86573514A185D39BC014845CF381
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zs05HGYMPlfFO4fAtS7A0vL0J3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.mft
Manifest number: 097F
Signing time: Fri 24 Jul 2026 00:00:36 +0000
Manifest this update: Fri 24 Jul 2026 00:00:36 +0000
Manifest next update: Sat 25 Jul 2026 00:00:36 +0000
Files and hashes: 1: K1WYHWxT9hUhyCzFRd3qp6J1SRo.roa (hash: ofCgYNoPNZP6vNBlI2XsxCW6wFsFBZey/s584doB1q4=)
2: nNBG6JVVM3hu0P20Vu06-SMt-9I.roa (hash: M+TeIwkxE9H/4NhfymMWaPcB1L3//0ChdU6G+C5A8KM=)
3: zs05HGYMPlfFO4fAtS7A0vL0J3U.crl (hash: buC7P/4tWAZGnZj6JfYDrUbFPvz3F6vATew0ya7SJlA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/zs05HGYMPlfFO4fAtS7A0vL0J3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:86:57:35:14:a1:85:d3:9b:c0:14:84:5c:f3:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cecd391c660c3e57c53b87c0b52ec0d2f2f42775
Validity
Not Before: Jul 24 00:00:36 2026 GMT
Not After : Jul 25 00:00:36 2026 GMT
Subject: CN=dfdedfed4a41db196cf65174f412bd26f25ef2b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8f:7c:cb:83:34:f1:be:ad:7e:f8:20:8f:17:
66:97:c1:71:c9:e2:3b:55:8e:5e:62:18:ba:d9:70:
72:6c:6e:32:30:ad:0a:fd:5e:80:3a:0d:82:d7:22:
72:f6:33:c7:2a:25:65:7f:0e:57:20:e1:b3:30:22:
60:c0:74:11:32:3d:56:6e:0b:cf:27:2e:48:6b:aa:
22:b5:0d:67:05:03:66:52:b9:b0:8a:bf:45:c7:30:
27:45:18:7f:af:08:1e:38:92:a5:7c:91:88:ad:7f:
e6:3b:d3:60:be:5f:ea:63:94:9a:5b:23:80:b1:52:
14:26:5d:93:ca:de:e6:13:80:6a:74:c4:a5:1b:b2:
16:4a:6c:3a:39:55:67:fc:8f:0f:49:0d:a1:2d:85:
33:1b:fc:60:02:2f:0d:c1:9a:fc:3d:51:60:17:99:
4c:a0:03:a5:e8:1c:53:43:b0:19:f4:c9:c8:90:2a:
61:72:95:47:f9:6d:a6:cb:cf:a1:5f:07:04:67:d7:
2a:11:b5:8e:82:c0:3e:e2:b8:db:1a:db:b7:f3:af:
55:59:dd:fb:e3:9c:31:bc:29:87:20:5e:d1:8c:66:
ec:ce:cf:6e:9e:01:06:b4:ff:34:54:1a:bb:7d:c9:
3b:e1:e0:6c:52:67:0f:e3:70:19:03:49:a3:85:53:
19:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:DE:DF:ED:4A:41:DB:19:6C:F6:51:74:F4:12:BD:26:F2:5E:F2:B4
X509v3 Authority Key Identifier:
keyid:CE:CD:39:1C:66:0C:3E:57:C5:3B:87:C0:B5:2E:C0:D2:F2:F4:27:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zs05HGYMPlfFO4fAtS7A0vL0J3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ec:36:09:a8:9c:53:12:39:50:ee:b2:2d:6e:8c:af:1d:e5:b6:
52:f6:46:8b:cd:78:0e:b9:94:61:81:d1:0e:73:28:bd:33:a0:
09:fe:6d:f7:d2:f7:13:ed:ec:c7:43:77:80:44:fd:f6:3c:af:
9a:21:da:03:4d:d4:1f:b3:d1:f1:19:9d:f7:44:83:12:f9:c4:
c8:40:e3:02:ea:77:41:67:bd:f7:ef:20:53:5c:31:b2:00:65:
90:20:47:7f:4e:5c:9c:ca:ef:ef:a6:cf:a9:5e:78:81:83:9a:
43:12:27:60:ca:f9:23:81:96:c0:e1:9c:c9:71:43:c2:3d:71:
93:8b:8a:92:02:85:e1:ae:73:79:69:b0:8a:a7:50:bc:1f:d9:
12:96:68:be:d2:88:7f:af:43:67:97:c7:03:d4:4d:ef:2f:56:
c7:b3:4e:29:bb:11:ce:69:39:a3:fe:4c:4d:d9:48:31:9b:12:
4f:b4:aa:a6:36:c2:c1:78:78:fa:7f:79:e6:ca:13:77:6c:f2:
e9:27:29:58:84:a0:3a:55:46:59:74:c1:ea:9c:64:3e:7b:a1:
b1:9f:54:27:1e:f0:69:33:70:b5:92:ae:62:b7:28:c1:cc:a6:
12:9d:60:01:a0:2f:cd:f7:4a:19:57:b2:a6:17:79:85:e4:0f:
0d:d3:ec:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:59:35 2026 by rpki-client