Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/fa7711-37ff-4aec-9853-1edde6c9d96a/1/ZdCTIXKqLRx3xLuYNwqrPeasNFc.mft
File: ZdCTIXKqLRx3xLuYNwqrPeasNFc.mft (raw, json)
Hash identifier: yU2bNdnLYDMfvXEE7HxZ6gLDFSjWIH4B2WZ7C7MZTLE=
Subject key identifier: CA:4A:D1:CC:6A:49:1C:2D:A0:B8:3B:9B:8A:29:2F:1E:50:45:A5:60
Authority key identifier: 65:D0:93:21:72:AA:2D:1C:77:C4:BB:98:37:0A:AB:3D:E6:AC:34:57
Certificate issuer: /CN=65d0932172aa2d1c77c4bb98370aab3de6ac3457
Certificate serial: 019F8F46F4CCF4118C7F143986E2F94626B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZdCTIXKqLRx3xLuYNwqrPeasNFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/fa7711-37ff-4aec-9853-1edde6c9d96a/1/ZdCTIXKqLRx3xLuYNwqrPeasNFc.mft
Manifest number: 047B
Signing time: Thu 23 Jul 2026 14:00:19 +0000
Manifest this update: Thu 23 Jul 2026 14:00:19 +0000
Manifest next update: Fri 24 Jul 2026 14:00:19 +0000
Files and hashes: 1: OpiyEA7jLNoth377L3JQZRW22EA.asa (hash: r8ONgzWitytpplKZRKdun1LH8tmOWmyteR7//LNHOZ8=)
2: TBDRW3pZmuh3LqJB0SgJxwzZcn8.asa (hash: hzhoB7Z5vY10r4VrziTI+hp0NwmrNuDhAq362RHDbhc=)
3: ZdCTIXKqLRx3xLuYNwqrPeasNFc.crl (hash: b8ytyaRojiIYHyJXcxl23pgpMRrmV163NRnA1FgoufM=)
4: m0PF4BK3O9Y2-d_izx7bC-pV_Es.asa (hash: D09pxW5zPXOvJqHki3xg8YhkV/MNoANsgzWxuDtJUNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/fa7711-37ff-4aec-9853-1edde6c9d96a/1/ZdCTIXKqLRx3xLuYNwqrPeasNFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/fa7711-37ff-4aec-9853-1edde6c9d96a/1/ZdCTIXKqLRx3xLuYNwqrPeasNFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZdCTIXKqLRx3xLuYNwqrPeasNFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:46:f4:cc:f4:11:8c:7f:14:39:86:e2:f9:46:26:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65d0932172aa2d1c77c4bb98370aab3de6ac3457
Validity
Not Before: Jul 23 14:00:19 2026 GMT
Not After : Jul 24 14:00:19 2026 GMT
Subject: CN=ca4ad1cc6a491c2da0b83b9b8a292f1e5045a560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ac:73:6b:cb:2e:ea:a5:cd:7a:99:d4:c8:34:
4a:13:5b:4f:71:1e:5b:80:12:79:4b:1a:d0:5b:62:
56:fa:e2:3c:2e:2a:25:9c:89:c3:eb:57:0a:a1:00:
7c:b2:b7:c6:0a:9d:a1:7d:f9:eb:0e:d3:49:2f:dc:
36:13:75:6b:de:12:70:0e:69:4b:60:1e:1b:ff:f3:
ad:5e:57:ab:f9:32:36:53:04:7e:e6:31:c2:d4:5a:
a6:59:8d:81:13:a8:ae:25:12:3e:1d:47:97:6f:1e:
b9:fa:0a:a9:f4:86:6e:24:7a:4e:f6:78:c5:5e:ab:
d6:98:c7:5b:d5:5d:78:6f:bd:57:93:33:20:6c:0f:
53:c2:3f:ec:c2:ed:05:00:f9:7a:d3:68:27:db:b5:
6a:56:d2:63:25:11:f2:e2:87:26:81:be:e9:30:6a:
b4:d0:cf:ce:fb:cf:6f:5b:ed:e8:69:54:3f:89:c4:
26:40:3f:57:96:8a:ee:4c:cc:45:ff:39:7a:b7:c1:
bd:0e:48:31:f9:18:db:72:b1:c4:0f:8c:60:8a:bc:
d9:37:2c:ac:ea:5d:42:64:53:68:18:47:3a:f1:d7:
79:aa:b3:7c:b7:ba:7a:c0:46:9a:d3:05:28:34:74:
e8:ed:3a:5e:44:94:88:54:68:ab:3a:9a:c1:d9:9b:
dc:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:4A:D1:CC:6A:49:1C:2D:A0:B8:3B:9B:8A:29:2F:1E:50:45:A5:60
X509v3 Authority Key Identifier:
keyid:65:D0:93:21:72:AA:2D:1C:77:C4:BB:98:37:0A:AB:3D:E6:AC:34:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZdCTIXKqLRx3xLuYNwqrPeasNFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/fa7711-37ff-4aec-9853-1edde6c9d96a/1/ZdCTIXKqLRx3xLuYNwqrPeasNFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/fa7711-37ff-4aec-9853-1edde6c9d96a/1/ZdCTIXKqLRx3xLuYNwqrPeasNFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:a5:fb:74:15:03:2c:a4:3b:b0:b2:9f:bf:61:23:15:05:6c:
19:a0:c0:d0:b7:b5:8c:bb:32:61:53:b4:27:a9:36:5f:ca:e8:
0b:94:c1:77:e0:a0:14:e0:65:37:2d:e9:d2:12:62:db:17:9f:
d9:48:0c:b0:5c:3a:0e:2e:ab:14:9c:7e:34:64:1b:dd:72:d7:
5a:b8:76:9e:bf:ed:1a:31:21:06:6b:85:fc:2c:de:62:0d:c0:
15:2f:97:3e:8d:40:ad:32:18:92:b0:c8:e2:6f:97:4f:97:5c:
d3:5c:7b:8a:8c:59:e1:de:43:3b:84:96:b2:0d:79:e9:80:9c:
86:cc:9b:41:0a:e6:a2:e4:cf:b9:ff:4f:93:bc:f0:fb:ac:2e:
95:4c:38:21:fc:b9:33:fb:84:71:0a:37:06:f3:f0:80:0d:e0:
94:dc:b2:23:6c:fe:d6:e4:05:14:7d:3f:1c:0e:7a:2f:38:db:
4b:78:d5:aa:3c:15:12:0b:68:5b:31:5d:97:54:fb:ea:61:85:
cf:8b:42:62:c0:8b:74:eb:1c:8d:7c:80:dc:ab:36:12:85:53:
10:98:17:17:91:32:ae:6a:fa:a9:3f:97:69:dd:34:a6:95:b5:
08:50:98:8d:e7:da:31:be:aa:b9:92:bd:a3:7a:63:74:f1:0b:
ac:59:5a:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:08:30 2026 by rpki-client