Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/a5e8d5-3264-46b2-8026-a39a9c775a50/1/dZx6SnoOrkiBN3Ob7HGisyRw-O0.mft
File: dZx6SnoOrkiBN3Ob7HGisyRw-O0.mft (raw, json)
Hash identifier: A415j4JxTG4+gNVnThkX9nmIhTOaAxysMULGBOFty78=
Subject key identifier: 4E:0A:DC:08:C5:BA:6D:CD:A5:CA:C4:C8:A8:4D:9F:68:EA:58:EC:B4
Authority key identifier: 75:9C:7A:4A:7A:0E:AE:48:81:37:73:9B:EC:71:A2:B3:24:70:F8:ED
Certificate issuer: /CN=759c7a4a7a0eae488137739bec71a2b32470f8ed
Certificate serial: 019F91DA36EE48B993FAB01093723293D82E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dZx6SnoOrkiBN3Ob7HGisyRw-O0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/a5e8d5-3264-46b2-8026-a39a9c775a50/1/dZx6SnoOrkiBN3Ob7HGisyRw-O0.mft
Manifest number: 021A
Signing time: Fri 24 Jul 2026 02:00:24 +0000
Manifest this update: Fri 24 Jul 2026 02:00:24 +0000
Manifest next update: Sat 25 Jul 2026 02:00:24 +0000
Files and hashes: 1: 5vgf_9aZThkj_7VAzPV1SdycQ9s.roa (hash: WWuwQNMz2jPS1Lz9ZyTa8kKgvLVWvH3DolJRQpBYZVw=)
2: ZUFdt76XEIRqjB1ZsCU8KDPIIeE.roa (hash: +22Qmq4Y9pNmDRsynGIXRX9EtOmlc0lMrcEc8jeBxvw=)
3: dZx6SnoOrkiBN3Ob7HGisyRw-O0.crl (hash: 9VZUiFP9jlnjXpcwFeirBt2ovmNfgMHDwj/SLwwO4zo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/a5e8d5-3264-46b2-8026-a39a9c775a50/1/dZx6SnoOrkiBN3Ob7HGisyRw-O0.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/a5e8d5-3264-46b2-8026-a39a9c775a50/1/dZx6SnoOrkiBN3Ob7HGisyRw-O0.mft
rsync://rpki.ripe.net/repository/DEFAULT/dZx6SnoOrkiBN3Ob7HGisyRw-O0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:36:ee:48:b9:93:fa:b0:10:93:72:32:93:d8:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=759c7a4a7a0eae488137739bec71a2b32470f8ed
Validity
Not Before: Jul 24 02:00:24 2026 GMT
Not After : Jul 25 02:00:24 2026 GMT
Subject: CN=4e0adc08c5ba6dcda5cac4c8a84d9f68ea58ecb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:56:c6:d5:88:04:a5:39:49:3a:03:4a:4a:c3:
c9:5a:59:e9:4e:cb:21:e8:df:7f:ea:3c:08:2b:a8:
12:f6:63:fe:f9:9b:b5:69:a9:86:b0:18:58:a4:c9:
7c:fb:e3:d9:92:37:00:90:b1:37:b8:24:35:7c:68:
e1:09:68:90:8c:bf:02:b2:be:3f:c4:c9:75:bc:14:
0e:f7:7c:c5:8e:8d:10:fa:42:40:03:16:28:06:be:
7a:67:b1:ad:23:fa:5c:68:d0:c6:66:a7:e3:06:48:
2b:d9:05:bb:7f:16:83:d2:40:29:89:02:16:6e:1a:
4d:21:6d:c4:22:51:ae:c7:cc:91:65:58:7c:8c:1c:
7c:cb:8c:f1:65:84:61:e5:23:65:d7:00:72:1f:e0:
30:14:a1:50:ce:9b:40:ab:80:b0:6e:dd:b5:e3:a9:
04:1c:6a:c4:86:bc:79:68:63:2c:9d:98:22:02:1c:
64:22:59:43:92:93:04:18:d6:89:9a:de:f9:91:14:
fe:8c:41:92:9d:67:fe:89:df:87:ea:95:1e:12:34:
59:1c:8b:7a:1c:fd:9b:26:cf:24:7f:7a:ba:cb:0c:
8c:09:4f:5b:8b:33:ed:f4:95:b8:2b:63:4f:df:7e:
28:99:5e:fd:93:ea:cd:e7:30:9b:6f:5b:4e:31:9b:
0c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:0A:DC:08:C5:BA:6D:CD:A5:CA:C4:C8:A8:4D:9F:68:EA:58:EC:B4
X509v3 Authority Key Identifier:
keyid:75:9C:7A:4A:7A:0E:AE:48:81:37:73:9B:EC:71:A2:B3:24:70:F8:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZx6SnoOrkiBN3Ob7HGisyRw-O0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a5e8d5-3264-46b2-8026-a39a9c775a50/1/dZx6SnoOrkiBN3Ob7HGisyRw-O0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a5e8d5-3264-46b2-8026-a39a9c775a50/1/dZx6SnoOrkiBN3Ob7HGisyRw-O0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:bf:ce:04:ae:dc:6c:bd:2e:f2:0e:e6:36:e0:59:26:1f:f3:
60:98:5e:61:b8:4e:f5:aa:de:5e:33:9b:77:d9:de:00:a8:9b:
81:20:4c:98:8b:ca:48:ce:f2:03:83:9f:77:3c:51:a2:61:17:
e1:fc:a5:a0:29:66:45:df:a2:e2:95:4b:32:6f:6e:d3:8c:e1:
93:4e:1e:75:da:a6:50:70:5d:6b:92:b0:79:ba:3b:e8:3f:ae:
de:bd:b5:38:6b:f4:77:ff:e0:2e:fa:37:88:9a:5e:ef:69:37:
18:78:4d:86:6c:d6:45:96:41:3c:38:d1:c2:02:e1:65:fe:32:
fb:1e:5c:34:2e:cc:4e:ef:19:34:14:28:45:dc:16:9b:61:bd:
ae:3e:e5:14:0f:a6:10:5f:c2:bd:78:5e:0d:1a:68:26:b8:36:
ec:ac:65:0c:89:d0:f7:24:27:18:37:97:eb:f0:e5:8a:4e:d7:
4a:08:f0:ba:f8:41:6c:79:28:1a:1f:45:61:40:25:9d:14:cb:
03:03:10:7a:e9:b6:e6:54:90:0f:ec:4a:11:74:ee:a5:30:40:
10:e6:9c:30:4b:ef:1d:05:57:4c:bb:e6:c6:ba:c1:7e:eb:91:
cc:05:29:94:24:a7:9a:c6:a0:88:50:0c:f1:ce:4a:1c:44:87:
58:7f:59:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:28:44 2026 by rpki-client