Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/4bba08-be36-47eb-ab2c-6359f92e1d2f/1/zK1o9-irrfRHJiM0OjJWFQciQYk.mft
File: zK1o9-irrfRHJiM0OjJWFQciQYk.mft (raw, json)
Hash identifier: ZtRTnUGOkdke1dq864EEHkMefspdsYTEd7Grttqm49E=
Subject key identifier: 77:91:D6:E8:BD:E3:46:D0:0D:FF:BE:8B:39:BC:F2:50:74:70:38:AB
Authority key identifier: CC:AD:68:F7:E8:AB:AD:F4:47:26:23:34:3A:32:56:15:07:22:41:89
Certificate issuer: /CN=ccad68f7e8abadf4472623343a32561507224189
Certificate serial: 019F924882E75D320D117676538AE28934EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zK1o9-irrfRHJiM0OjJWFQciQYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/4bba08-be36-47eb-ab2c-6359f92e1d2f/1/zK1o9-irrfRHJiM0OjJWFQciQYk.mft
Manifest number: 0B39
Signing time: Fri 24 Jul 2026 04:00:53 +0000
Manifest this update: Fri 24 Jul 2026 04:00:53 +0000
Manifest next update: Sat 25 Jul 2026 04:00:53 +0000
Files and hashes: 1: GvdosnM4oTQr42AAbs5kaRK7G5k.asa (hash: +q7C0091/BCLWI1y72MQuuHCj669pr/poTHiNIbXYFE=)
2: wEZZX0o5N8nlP47tu1RwoQ2y0AY.roa (hash: ddJPky6VMI6qp8TK3QriFAzhCSzbyfK/JMSPvgj4FCE=)
3: zK1o9-irrfRHJiM0OjJWFQciQYk.crl (hash: s+QJRq3kPTe9y57lMdBViOok3k7SbdX8bgNyl0CY7qI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/4bba08-be36-47eb-ab2c-6359f92e1d2f/1/zK1o9-irrfRHJiM0OjJWFQciQYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/4bba08-be36-47eb-ab2c-6359f92e1d2f/1/zK1o9-irrfRHJiM0OjJWFQciQYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/zK1o9-irrfRHJiM0OjJWFQciQYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:82:e7:5d:32:0d:11:76:76:53:8a:e2:89:34:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccad68f7e8abadf4472623343a32561507224189
Validity
Not Before: Jul 24 04:00:53 2026 GMT
Not After : Jul 25 04:00:53 2026 GMT
Subject: CN=7791d6e8bde346d00dffbe8b39bcf250747038ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d8:a4:d5:bc:b7:e8:e4:aa:a6:09:fb:b9:f0:
38:ee:9b:41:b1:c8:b5:e9:04:51:cc:dc:c9:6c:4d:
1a:84:45:63:9e:09:51:7c:b5:55:5e:03:56:11:32:
b7:f9:81:a9:09:ce:21:00:a7:97:26:e3:55:a2:e9:
90:19:78:b4:99:1e:0c:d6:ea:53:42:88:ca:4b:44:
e3:ed:fe:6e:f7:44:04:a9:2b:59:e6:ef:98:56:49:
31:02:ef:6a:c5:1e:d8:39:07:b0:0a:59:f4:5c:d0:
df:7d:d4:5c:e7:60:48:f6:a1:70:c8:b4:61:63:ce:
66:f3:8e:e8:06:3e:c1:ad:9b:a0:f6:42:a0:88:b0:
53:20:dd:41:2a:f4:0b:ec:9d:34:c4:d7:28:8f:c5:
05:b6:7d:76:ad:98:b6:27:b0:48:53:11:f7:81:90:
ca:54:7c:5d:c1:52:b7:23:60:5b:25:e2:e3:a4:4a:
e3:82:3c:6b:62:4d:33:00:00:54:3f:30:bf:26:89:
9e:64:21:a7:68:ab:84:ac:76:24:4a:a0:12:46:88:
21:fa:9b:23:ad:aa:f3:b0:ca:0f:9b:32:6d:be:0d:
e3:01:b9:1b:bd:3c:32:d8:1a:b7:ec:23:34:da:c0:
01:b3:ec:d0:2d:ac:e3:3d:77:df:68:b0:9f:8e:24:
86:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:91:D6:E8:BD:E3:46:D0:0D:FF:BE:8B:39:BC:F2:50:74:70:38:AB
X509v3 Authority Key Identifier:
keyid:CC:AD:68:F7:E8:AB:AD:F4:47:26:23:34:3A:32:56:15:07:22:41:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zK1o9-irrfRHJiM0OjJWFQciQYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4bba08-be36-47eb-ab2c-6359f92e1d2f/1/zK1o9-irrfRHJiM0OjJWFQciQYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4bba08-be36-47eb-ab2c-6359f92e1d2f/1/zK1o9-irrfRHJiM0OjJWFQciQYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:f0:ca:80:e6:87:0f:15:ae:70:da:51:83:7f:6b:74:14:4b:
f6:69:93:7b:27:1d:a1:da:bf:5d:dd:f1:75:be:a3:e1:ab:d4:
68:d3:22:29:62:92:3f:91:fe:76:eb:60:ad:bb:5e:14:61:dd:
01:52:64:83:85:88:16:9d:dc:42:58:cf:e4:74:57:99:50:fb:
58:5e:da:fd:43:bc:46:18:c9:ed:fd:fa:b9:2d:5a:44:92:da:
9a:dc:3a:57:8b:eb:8f:e7:48:74:1d:0a:00:82:07:5c:e0:3d:
e6:40:36:38:28:d4:60:78:9f:1b:ee:10:1c:9d:aa:f8:3b:aa:
9e:4c:2a:cc:8d:b7:b5:96:e8:5b:fe:96:43:81:40:bb:9c:ed:
3a:6e:68:79:ef:6a:d2:7c:2e:22:af:78:33:0a:31:05:a6:af:
8c:72:40:8b:d0:65:75:bd:70:95:19:d2:ae:dc:fb:17:3b:e2:
11:1a:47:57:37:b5:8f:92:1e:93:7c:c1:6c:bc:f0:90:9f:05:
e0:79:87:73:b1:38:23:65:74:a7:f9:6d:44:7f:57:c1:67:94:
5c:d7:a5:9e:f9:ac:5a:11:a7:2c:b9:79:14:4c:26:90:64:24:
11:82:91:46:ca:bc:6f:18:de:88:ea:e1:be:78:a8:9c:9d:a0:
5b:8b:df:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:01:19 2026 by rpki-client