Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/cfd41e-398d-4f1b-9995-1a3ff532bc20/1/zQPRPdJvAESig_xqEedWoqK1aRs.mft
File: zQPRPdJvAESig_xqEedWoqK1aRs.mft (raw, json)
Hash identifier: /i07wCkkm2Dg0NRrAEz2IixzexiK0CEi+nHJ/Gw35+A=
Subject key identifier: 15:AE:71:C6:D1:A0:32:01:AD:A7:FE:48:08:C7:DD:F8:EA:B4:DA:E2
Authority key identifier: CD:03:D1:3D:D2:6F:00:44:A2:83:FC:6A:11:E7:56:A2:A2:B5:69:1B
Certificate issuer: /CN=cd03d13dd26f0044a283fc6a11e756a2a2b5691b
Certificate serial: 019F927F17C87ACC8764803D9D3CB20BF89B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQPRPdJvAESig_xqEedWoqK1aRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/cfd41e-398d-4f1b-9995-1a3ff532bc20/1/zQPRPdJvAESig_xqEedWoqK1aRs.mft
Manifest number: 04CD
Signing time: Fri 24 Jul 2026 05:00:30 +0000
Manifest this update: Fri 24 Jul 2026 05:00:30 +0000
Manifest next update: Sat 25 Jul 2026 05:00:30 +0000
Files and hashes: 1: DV_1PU5sghttOAyD5Fk0auja6M4.roa (hash: vyYX2XFHKs4PfXvL2MDa+XaKNUQzIY/+9Y9TmVp9CiU=)
2: zQPRPdJvAESig_xqEedWoqK1aRs.crl (hash: nQemkIt9qOd6ECfRai6kASGjp/0Grk/v8jLJKEqa7F8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/cfd41e-398d-4f1b-9995-1a3ff532bc20/1/zQPRPdJvAESig_xqEedWoqK1aRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/cfd41e-398d-4f1b-9995-1a3ff532bc20/1/zQPRPdJvAESig_xqEedWoqK1aRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/zQPRPdJvAESig_xqEedWoqK1aRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7f:17:c8:7a:cc:87:64:80:3d:9d:3c:b2:0b:f8:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd03d13dd26f0044a283fc6a11e756a2a2b5691b
Validity
Not Before: Jul 24 05:00:30 2026 GMT
Not After : Jul 25 05:00:30 2026 GMT
Subject: CN=15ae71c6d1a03201ada7fe4808c7ddf8eab4dae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5e:89:ca:88:a1:ae:26:35:96:87:2b:4b:ee:
b1:a6:a4:3a:ff:25:a1:ac:a5:82:37:c1:1b:81:a0:
3b:bd:04:92:33:3a:cf:29:97:4b:9e:a1:00:d4:63:
31:25:eb:95:7b:a8:12:07:ee:d3:a1:78:40:29:17:
28:3a:77:b6:eb:d2:56:63:b1:53:93:e8:26:80:4e:
91:a4:8e:de:be:20:a3:a9:7a:78:8a:b9:04:ee:de:
05:6e:4c:dc:7b:5a:9b:5e:a4:d0:03:2d:8f:c8:ec:
f9:9d:82:86:b8:e2:72:4e:19:bc:10:aa:8c:41:b9:
ad:ae:8f:bc:5f:02:02:be:8b:0b:df:17:3b:ea:d0:
b2:e7:69:6b:eb:b0:4b:1f:37:14:ed:41:f1:52:db:
36:59:56:38:4a:1e:66:44:49:70:0d:44:0c:7c:f8:
05:73:bb:8c:85:59:66:36:aa:e2:70:10:f1:ae:84:
0b:fc:46:1c:bb:30:98:ae:37:0a:62:91:0b:70:6a:
48:95:f6:00:f3:e9:8a:d3:d4:c2:a6:77:53:17:6d:
c3:78:80:42:f9:97:c0:e1:e7:38:ab:3a:33:37:04:
a4:be:f1:50:ad:fc:f7:46:8b:cc:38:a5:47:1d:c0:
b5:9a:3d:8a:cd:dc:61:d4:91:b8:41:71:31:f8:76:
bb:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:AE:71:C6:D1:A0:32:01:AD:A7:FE:48:08:C7:DD:F8:EA:B4:DA:E2
X509v3 Authority Key Identifier:
keyid:CD:03:D1:3D:D2:6F:00:44:A2:83:FC:6A:11:E7:56:A2:A2:B5:69:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQPRPdJvAESig_xqEedWoqK1aRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/cfd41e-398d-4f1b-9995-1a3ff532bc20/1/zQPRPdJvAESig_xqEedWoqK1aRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/cfd41e-398d-4f1b-9995-1a3ff532bc20/1/zQPRPdJvAESig_xqEedWoqK1aRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:ac:93:ba:a3:cb:34:78:f0:5b:8c:64:66:90:21:e8:e7:1a:
e2:ea:30:0c:d5:91:13:41:37:ac:9e:6f:33:c0:53:65:f3:33:
ee:5a:2a:d5:f3:9c:e1:21:20:f1:69:e6:37:eb:b5:8e:ce:93:
0b:cd:a3:cb:d0:ec:7c:a1:de:99:46:8c:fd:bc:a7:a9:5f:16:
c2:55:82:e7:40:b7:a5:77:95:0e:a8:e2:ae:b4:99:7f:9d:62:
87:e3:98:c2:a1:43:4c:4d:6c:9e:1e:18:f7:77:f6:1f:49:db:
b4:09:ef:49:d8:ee:41:4a:52:97:85:a1:bc:86:cb:39:f4:46:
82:a2:75:4e:ac:11:f7:e2:b5:80:02:f6:2b:98:69:fc:0b:3d:
e2:95:08:f6:f8:e9:3e:c7:c7:1f:6f:0b:22:af:9d:5b:bc:4f:
18:ed:27:3d:44:ae:8f:d0:d8:2d:2b:ad:8b:44:d9:58:10:b9:
e4:6f:8c:53:71:22:5e:f5:59:8f:d5:a4:cf:ac:9a:ca:ab:75:
e1:1c:3b:c1:76:37:a4:37:5c:ad:61:54:d2:bf:f8:c3:7f:80:
ca:ed:bd:f3:a3:6e:e1:ab:eb:a4:44:7a:ce:cf:7e:7f:b1:89:
14:8e:0b:a6:00:db:57:40:c8:ae:71:65:f0:62:b5:e2:a2:67:
50:37:aa:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:18:06 2026 by rpki-client