Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/550bb2-5a50-4784-8dab-3d0e9fe01bd8/1/_zVCuU4Ii793ruGzOUIxUtrvXg0.mft
File: _zVCuU4Ii793ruGzOUIxUtrvXg0.mft (raw, json)
Hash identifier: IDFEhZnq6PW2NXiKugCm4NK+h2nz6ZFHzhgHXX3qvOw=
Subject key identifier: 64:7F:FB:BF:C3:96:10:F2:67:B8:93:6F:CB:F2:0C:B0:63:A5:C0:DC
Authority key identifier: FF:35:42:B9:4E:08:8B:BF:77:AE:E1:B3:39:42:31:52:DA:EF:5E:0D
Certificate issuer: /CN=ff3542b94e088bbf77aee1b339423152daef5e0d
Certificate serial: 019F8F46E3138C6CC70478669A81EE10B6FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zVCuU4Ii793ruGzOUIxUtrvXg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/550bb2-5a50-4784-8dab-3d0e9fe01bd8/1/_zVCuU4Ii793ruGzOUIxUtrvXg0.mft
Manifest number: D2
Signing time: Thu 23 Jul 2026 14:00:15 +0000
Manifest this update: Thu 23 Jul 2026 14:00:15 +0000
Manifest next update: Fri 24 Jul 2026 14:00:15 +0000
Files and hashes: 1: LXC_nzvi4Cb7lHD4Py9XKzLtC38.roa (hash: M58JQtuK6LdfZlu8eoP3dvPBwwWOzHNzghjNI4pN5m4=)
2: _zVCuU4Ii793ruGzOUIxUtrvXg0.crl (hash: 2Vu1r7kX5xmrYFwpawCzc+nzTpzaksAs1ITnH61T7qc=)
3: mGBvIwQwu2rqSEgMM78Outc8oKI.asa (hash: OAcgoQTH6aR8Gafn8lP+RELlUaY4N3e0LLrENbEm6VE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/550bb2-5a50-4784-8dab-3d0e9fe01bd8/1/_zVCuU4Ii793ruGzOUIxUtrvXg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/550bb2-5a50-4784-8dab-3d0e9fe01bd8/1/_zVCuU4Ii793ruGzOUIxUtrvXg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_zVCuU4Ii793ruGzOUIxUtrvXg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:46:e3:13:8c:6c:c7:04:78:66:9a:81:ee:10:b6:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff3542b94e088bbf77aee1b339423152daef5e0d
Validity
Not Before: Jul 23 14:00:15 2026 GMT
Not After : Jul 24 14:00:15 2026 GMT
Subject: CN=647ffbbfc39610f267b8936fcbf20cb063a5c0dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:41:39:b0:c9:a0:04:d6:ab:45:23:ce:c4:dd:
6e:c9:66:4a:80:79:bb:41:a8:28:98:85:85:99:9b:
d5:4c:28:c5:25:4a:27:6b:0a:23:d0:0f:70:c4:ce:
4d:db:85:4e:24:a0:e3:0c:55:e3:f3:46:d3:2c:f7:
da:79:4c:80:bd:f1:76:c4:82:56:3a:0e:ef:78:2f:
ec:42:0b:0a:26:2b:1a:7e:e3:ac:f1:cd:f7:5d:50:
81:da:7c:06:aa:f5:d9:ec:b8:07:53:8d:e9:33:17:
3a:23:7b:9b:dc:a7:63:7d:ab:4f:59:a3:aa:10:bc:
e8:39:03:bb:8c:1a:65:9f:6f:0c:15:45:9a:05:16:
8f:b4:68:3a:17:00:e7:9c:1b:ec:57:cb:7e:7c:11:
87:47:9b:c8:97:55:8f:bf:a5:a7:07:95:71:0c:2a:
63:60:94:f0:d1:7e:72:bf:6d:eb:0d:b2:07:72:d7:
bf:94:bd:88:be:6d:39:bd:57:d1:f9:80:14:d6:e3:
4c:ac:99:dd:10:51:c8:e2:ac:4a:10:55:54:52:25:
1e:39:db:cc:72:49:d3:61:33:22:c4:51:57:3e:55:
2a:34:b9:f9:10:9d:a2:05:16:46:6d:d2:7f:29:81:
05:73:59:2e:47:16:54:2a:ea:11:cd:1d:58:39:b7:
d7:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:7F:FB:BF:C3:96:10:F2:67:B8:93:6F:CB:F2:0C:B0:63:A5:C0:DC
X509v3 Authority Key Identifier:
keyid:FF:35:42:B9:4E:08:8B:BF:77:AE:E1:B3:39:42:31:52:DA:EF:5E:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zVCuU4Ii793ruGzOUIxUtrvXg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/550bb2-5a50-4784-8dab-3d0e9fe01bd8/1/_zVCuU4Ii793ruGzOUIxUtrvXg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/550bb2-5a50-4784-8dab-3d0e9fe01bd8/1/_zVCuU4Ii793ruGzOUIxUtrvXg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:23:76:88:3a:4a:7a:90:d8:bd:b5:09:8c:b1:13:68:37:2b:
2c:dc:e3:78:b9:37:1b:9f:26:7c:3c:53:c0:ba:32:a3:c5:b6:
5e:36:cc:14:cf:88:cb:51:66:e3:42:1d:30:77:8b:7d:89:63:
e7:f5:ad:16:b2:71:b5:b4:eb:13:0d:49:4e:b0:54:f1:f9:a8:
a6:a4:73:c1:66:36:c0:fe:8d:7b:27:8c:c2:f4:cf:1f:c9:9c:
3e:18:0c:a3:1f:ba:df:67:25:96:d6:25:ec:13:ab:55:4b:14:
bc:d6:e6:88:c6:fd:34:d6:b6:f6:be:f0:3d:ae:93:f2:9f:55:
e1:0d:4b:8d:87:1b:64:44:fc:2b:91:d8:ae:53:59:fc:45:36:
c2:96:b7:95:2c:e1:a3:14:34:0a:9a:ea:0f:fc:df:42:94:8d:
dd:2b:4d:4f:ef:84:7d:9b:ae:f2:0b:92:4f:5f:e4:4a:98:5b:
af:e9:9d:8b:b2:69:29:bc:85:71:40:b0:86:90:78:b4:fa:5f:
76:16:8e:da:45:8f:d8:ea:94:b3:f1:3f:4c:dc:75:71:39:b2:
56:e4:f6:a3:00:c4:02:eb:9a:aa:12:5c:b0:e9:92:85:e7:9c:
99:4f:d1:28:a9:dc:bf:62:c8:65:1b:15:03:c7:ef:5c:83:f8:
89:6e:2b:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:08:17 2026 by rpki-client