Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/04ec6b-251a-4eb7-9199-25194525d516/1/zdzhKuUOgKRTTYD3hqgkSXsm-ts.mft
File: zdzhKuUOgKRTTYD3hqgkSXsm-ts.mft (raw, json)
Hash identifier: 5LG2mR+eRYZCgINwNZoRoq1FDSWLY2vpNZRBpxSMKTM=
Subject key identifier: B9:3D:76:12:BB:62:2D:64:A5:09:A3:4E:70:A1:5E:25:70:B2:79:08
Authority key identifier: CD:DC:E1:2A:E5:0E:80:A4:53:4D:80:F7:86:A8:24:49:7B:26:FA:DB
Certificate issuer: /CN=cddce12ae50e80a4534d80f786a824497b26fadb
Certificate serial: 019F93FFC29A164347495A420D9AB2BF5DDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zdzhKuUOgKRTTYD3hqgkSXsm-ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/04ec6b-251a-4eb7-9199-25194525d516/1/zdzhKuUOgKRTTYD3hqgkSXsm-ts.mft
Manifest number: C8
Signing time: Fri 24 Jul 2026 12:00:39 +0000
Manifest this update: Fri 24 Jul 2026 12:00:39 +0000
Manifest next update: Sat 25 Jul 2026 12:00:39 +0000
Files and hashes: 1: pYYR9UI_sLtKcyNmvvaeAyGho10.roa (hash: Visrk6MwePbwviSVCYu3l4j6eSQ3jEUFOOu9154zYk0=)
2: zdzhKuUOgKRTTYD3hqgkSXsm-ts.crl (hash: gnzkoL1K7/S8tEMTxriDVJICzA8pRR+mVZstErhUkvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/04ec6b-251a-4eb7-9199-25194525d516/1/zdzhKuUOgKRTTYD3hqgkSXsm-ts.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/04ec6b-251a-4eb7-9199-25194525d516/1/zdzhKuUOgKRTTYD3hqgkSXsm-ts.mft
rsync://rpki.ripe.net/repository/DEFAULT/zdzhKuUOgKRTTYD3hqgkSXsm-ts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 12:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:ff:c2:9a:16:43:47:49:5a:42:0d:9a:b2:bf:5d:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cddce12ae50e80a4534d80f786a824497b26fadb
Validity
Not Before: Jul 24 12:00:39 2026 GMT
Not After : Jul 25 12:00:39 2026 GMT
Subject: CN=b93d7612bb622d64a509a34e70a15e2570b27908
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:cd:74:b2:0f:c7:d4:8e:5f:ed:1f:7b:3c:a0:
d3:f4:f9:fb:94:3b:f6:92:f2:ae:50:e5:dd:ae:77:
c6:c9:41:83:41:84:b4:54:d4:db:2a:1a:9b:ab:75:
9f:9d:cf:e3:e6:7c:c4:f0:37:da:60:ad:3e:dc:94:
d0:a8:3c:65:10:04:de:e9:e8:ec:7f:c8:fa:cc:b6:
d8:1e:85:10:9c:14:c6:cf:1b:73:93:69:9d:6a:1f:
81:3f:08:38:dc:8b:ff:7f:c3:be:78:e1:f8:95:80:
ff:94:55:0a:76:6b:b3:9a:92:15:9f:35:03:3e:cc:
59:b8:db:53:d9:15:fa:33:15:72:82:f8:65:1b:e2:
c8:3c:87:32:55:3c:cc:98:26:23:c1:73:4e:6d:6c:
54:f5:be:0a:fc:3b:4f:a1:42:85:72:2d:bd:0b:08:
b4:4d:d5:08:cc:49:22:a2:08:a4:71:22:e0:de:03:
d4:2d:cc:d9:c5:ee:ed:4e:06:09:4d:b5:1c:77:59:
b0:b1:3d:23:5f:28:ae:50:fa:ed:64:98:32:18:be:
2e:a5:ba:44:64:da:e0:22:94:08:c8:bc:0d:35:5a:
70:71:28:7e:e9:cf:45:40:8e:ef:73:0e:20:35:3a:
d4:e3:7c:5b:c9:54:c5:2f:a8:8e:a7:44:1a:6c:e4:
cc:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:3D:76:12:BB:62:2D:64:A5:09:A3:4E:70:A1:5E:25:70:B2:79:08
X509v3 Authority Key Identifier:
keyid:CD:DC:E1:2A:E5:0E:80:A4:53:4D:80:F7:86:A8:24:49:7B:26:FA:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zdzhKuUOgKRTTYD3hqgkSXsm-ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/04ec6b-251a-4eb7-9199-25194525d516/1/zdzhKuUOgKRTTYD3hqgkSXsm-ts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/04ec6b-251a-4eb7-9199-25194525d516/1/zdzhKuUOgKRTTYD3hqgkSXsm-ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:83:68:0f:d8:19:01:68:c2:be:f5:b9:43:14:34:f8:1f:10:
6c:b5:0e:1b:fb:1a:9f:89:52:bc:0c:8b:50:7e:10:70:17:49:
9d:fa:0b:99:00:62:e5:40:3b:87:e3:46:c7:3e:63:89:6b:23:
76:af:2d:7a:6d:64:df:e2:f2:dd:d6:8c:92:79:29:26:8a:f0:
e8:4b:4b:b8:04:75:ce:53:59:69:5b:31:cc:95:55:65:93:be:
cb:9d:54:71:c6:db:1e:1e:33:8f:3a:52:53:05:5d:f4:e0:c6:
8a:50:f0:43:c0:6f:df:ba:85:36:db:fa:45:96:a7:cd:e1:3f:
e7:cd:6f:f4:95:2a:63:b3:47:4c:65:a6:ab:f6:e9:f2:5d:2b:
21:cd:37:b4:42:f2:a3:eb:97:86:79:83:5f:a1:ca:66:4f:0f:
61:b9:25:ac:2a:69:42:77:3e:d9:40:82:bd:5a:9e:ea:e0:71:
3b:00:19:7b:27:71:5b:aa:1f:f0:0d:96:bc:a1:e2:0e:f1:ac:
a2:16:a6:75:f0:4c:fa:66:0f:83:e1:b8:e7:28:b8:29:0d:58:
05:9e:bc:7d:94:27:01:e7:5a:cd:d8:10:7a:ce:88:4e:33:52:
57:b9:ee:c8:71:93:ad:2d:2b:dc:72:8e:f3:fb:1e:4b:2e:6b:
15:05:a2:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:50:12 2026 by rpki-client