Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2a981d-67f5-484e-be1b-ff64a9ba597c/1/ZoKJC37SM0dHjU1l2wlIw9sj6-c.mft
File: ZoKJC37SM0dHjU1l2wlIw9sj6-c.mft (raw, json)
Hash identifier: oY4bmT6Pj5d63zeBYAT1ulqpJtqFT0GQeWvTor9fBGs=
Subject key identifier: EA:40:FE:E7:EC:5A:23:33:DC:8C:A6:C4:9C:26:34:79:FD:42:B9:8D
Authority key identifier: 66:82:89:0B:7E:D2:33:47:47:8D:4D:65:DB:09:48:C3:DB:23:EB:E7
Certificate issuer: /CN=6682890b7ed23347478d4d65db0948c3db23ebe7
Certificate serial: 019F92B69C58873429886D07AE0D84F3FAB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZoKJC37SM0dHjU1l2wlIw9sj6-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/2a981d-67f5-484e-be1b-ff64a9ba597c/1/ZoKJC37SM0dHjU1l2wlIw9sj6-c.mft
Manifest number: 19CA
Signing time: Fri 24 Jul 2026 06:01:08 +0000
Manifest this update: Fri 24 Jul 2026 06:01:08 +0000
Manifest next update: Sat 25 Jul 2026 06:01:08 +0000
Files and hashes: 1: J17vSIqgoHZS2f6yqb_8iHjCu5I.roa (hash: ZkWmb6GvJuOMu21GNU2YeN23B5AtCQQY8+AStJbeGm0=)
2: XPQJlFedERmTF9acUC88HcZi7Y8.roa (hash: Np32ynKS0t+KcWpS0Dq9Cf6zaeFo8lW4iSnM2fxcrEY=)
3: ZoKJC37SM0dHjU1l2wlIw9sj6-c.crl (hash: CjGmZZMTw/bZ8aGWmL9zR71NOzuZN7wrI5aO5/tKbsU=)
4: ipCoEXo6uW0pr_TclF-YMNfjy1o.roa (hash: Vq4dXFhds74U9HS3KjpxidXdPv7ObFMg2YYb+3p543I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/2a981d-67f5-484e-be1b-ff64a9ba597c/1/ZoKJC37SM0dHjU1l2wlIw9sj6-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/2a981d-67f5-484e-be1b-ff64a9ba597c/1/ZoKJC37SM0dHjU1l2wlIw9sj6-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZoKJC37SM0dHjU1l2wlIw9sj6-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b6:9c:58:87:34:29:88:6d:07:ae:0d:84:f3:fa:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6682890b7ed23347478d4d65db0948c3db23ebe7
Validity
Not Before: Jul 24 06:01:08 2026 GMT
Not After : Jul 25 06:01:08 2026 GMT
Subject: CN=ea40fee7ec5a2333dc8ca6c49c263479fd42b98d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:09:c3:85:44:4b:de:d6:2e:11:ac:c4:cf:59:
1d:ca:cd:f7:a1:76:9b:e9:f3:69:5f:d3:7f:8e:95:
de:68:8f:7c:8b:b6:db:55:84:5a:6d:e4:61:98:c1:
74:87:ea:b1:8d:04:00:26:c1:2e:a9:7d:a7:9c:aa:
28:80:b9:1d:c8:89:b5:a0:1a:6c:7c:26:34:f5:4f:
c6:c2:96:22:51:e8:51:c8:73:ae:55:4f:0b:9b:61:
14:f6:ab:50:2a:99:5b:9d:60:b7:b6:38:49:03:50:
39:cc:91:36:ab:53:10:9f:70:21:f7:8c:2f:46:55:
0b:72:8e:67:60:59:e6:de:79:9d:c3:1c:b2:7a:f5:
a6:68:a1:d4:9e:cc:61:b3:0b:55:06:e4:e0:e3:b4:
cd:43:70:4d:cc:16:04:d5:7a:02:8d:cc:8d:4f:ee:
d4:99:7b:87:17:7b:b5:d7:fa:19:13:d4:49:16:8d:
72:0f:c4:ae:8c:d8:c9:43:2d:d9:4b:d6:c2:9f:83:
2d:aa:9a:e8:73:f7:bc:6c:22:2d:4d:b9:6c:ab:08:
01:9e:4c:9a:f5:6d:72:e4:5a:2a:9d:f8:52:ba:cc:
35:7b:25:49:53:31:00:58:e9:e9:38:00:a0:6a:27:
b0:08:47:d3:0f:8c:8e:82:a2:f8:4d:92:cb:f6:33:
7a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:40:FE:E7:EC:5A:23:33:DC:8C:A6:C4:9C:26:34:79:FD:42:B9:8D
X509v3 Authority Key Identifier:
keyid:66:82:89:0B:7E:D2:33:47:47:8D:4D:65:DB:09:48:C3:DB:23:EB:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZoKJC37SM0dHjU1l2wlIw9sj6-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2a981d-67f5-484e-be1b-ff64a9ba597c/1/ZoKJC37SM0dHjU1l2wlIw9sj6-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2a981d-67f5-484e-be1b-ff64a9ba597c/1/ZoKJC37SM0dHjU1l2wlIw9sj6-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:a0:fa:c2:7c:6b:62:cc:81:96:af:62:9b:b9:8a:ef:65:34:
aa:d6:3c:65:a2:5c:07:94:37:88:df:da:86:9d:68:b5:41:dd:
75:f5:21:de:5e:b6:19:0e:7b:45:cf:00:ad:92:04:9d:af:fd:
c5:9a:05:2b:e5:11:89:60:08:4c:79:42:b7:ea:5f:9f:83:ad:
8c:43:cf:3a:73:46:7c:4a:d6:a5:b1:5f:9b:51:ae:d4:7e:f0:
aa:6c:fc:51:90:06:24:03:38:59:c9:37:1d:5f:33:e1:2b:ec:
30:44:82:0d:da:fd:91:7b:64:a0:c3:09:8d:49:79:c6:f9:bd:
59:4f:0c:d7:2f:b8:6d:03:e5:1d:a8:2f:f6:ef:29:e4:f9:5c:
7a:d6:e8:55:98:a3:d7:e6:55:8f:ed:de:a0:47:27:a5:b3:97:
7c:89:50:9e:b8:fb:f2:a4:5c:c5:bd:40:fa:b2:39:e4:bc:c5:
f6:f4:c9:d8:5a:13:4f:f9:0c:14:06:83:87:88:0c:fc:03:2a:
a8:65:2b:b5:da:99:f7:92:32:9a:f9:4d:d5:6b:c7:8b:63:51:
0a:9c:9a:24:a1:46:62:78:d0:ba:62:5b:27:65:a9:e6:12:52:
f8:0c:59:e1:71:86:b4:43:a0:1b:25:b4:dc:b7:53:3a:b3:cc:
04:50:cf:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:45:00 2026 by rpki-client