Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/e66913-8f5f-47ef-a730-32c1b2cee593/1/ZYwMSZqOadl5X0vQtb8WgrHwD5o.mft
File: ZYwMSZqOadl5X0vQtb8WgrHwD5o.mft (raw, json)
Hash identifier: Y0lRGSrsE5SEaCRlHEayuNH321p/L81TtjkTqlHN1NE=
Subject key identifier: 60:4B:95:34:2E:35:20:19:25:18:DD:C1:82:ED:33:D2:C6:0F:8E:3E
Authority key identifier: 65:8C:0C:49:9A:8E:69:D9:79:5F:4B:D0:B5:BF:16:82:B1:F0:0F:9A
Certificate issuer: /CN=658c0c499a8e69d9795f4bd0b5bf1682b1f00f9a
Certificate serial: 019F9324715A1D93AB6290A8A0C5D69226E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZYwMSZqOadl5X0vQtb8WgrHwD5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/e66913-8f5f-47ef-a730-32c1b2cee593/1/ZYwMSZqOadl5X0vQtb8WgrHwD5o.mft
Manifest number: 1152
Signing time: Fri 24 Jul 2026 08:01:06 +0000
Manifest this update: Fri 24 Jul 2026 08:01:06 +0000
Manifest next update: Sat 25 Jul 2026 08:01:06 +0000
Files and hashes: 1: GwZ9dNA86AIDNnsAq70FiAkZYj8.roa (hash: qnSiAyQRIBiRzYavimYlFJSyS25EakQKaTIGVx1R3tU=)
2: ZYwMSZqOadl5X0vQtb8WgrHwD5o.crl (hash: 4f5N31ksbKWqIP44yPqvcbRfCwXokVVM1gSMdD6z0Gs=)
3: irQyC0ot9r4PxzPSLvST2QH-X0Q.roa (hash: kwnqay2aLOiYKa/WS1eZrTNeCkIkn0WSXDieMB7/M7Y=)
4: yw5w5uCdPdnhgVsaZXUZ6mCgC8k.roa (hash: /944unZ7CSMOwiuR6yhIgpH4mt1fcLA58yVZkErRY/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/e66913-8f5f-47ef-a730-32c1b2cee593/1/ZYwMSZqOadl5X0vQtb8WgrHwD5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/e66913-8f5f-47ef-a730-32c1b2cee593/1/ZYwMSZqOadl5X0vQtb8WgrHwD5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZYwMSZqOadl5X0vQtb8WgrHwD5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:24:71:5a:1d:93:ab:62:90:a8:a0:c5:d6:92:26:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=658c0c499a8e69d9795f4bd0b5bf1682b1f00f9a
Validity
Not Before: Jul 24 08:01:06 2026 GMT
Not After : Jul 25 08:01:06 2026 GMT
Subject: CN=604b95342e3520192518ddc182ed33d2c60f8e3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:73:23:27:e0:43:2b:b4:2d:92:3c:c3:20:44:
2e:be:f7:51:3a:95:25:a8:48:e8:ea:4a:2e:e7:18:
9e:b8:ce:84:0e:d8:28:94:5f:21:4e:6f:f2:64:56:
77:1f:b8:cb:8c:32:10:a7:92:27:09:c0:40:a1:7c:
6e:5b:dd:6f:ca:bf:2b:bc:3b:1e:94:5c:31:1a:f6:
9b:01:18:be:91:69:17:f2:58:93:ee:d1:d1:6f:d6:
c0:ab:ba:e7:d8:03:06:72:fe:28:5e:24:71:bb:aa:
11:2a:6b:bc:c8:aa:6c:64:46:28:4e:d7:d2:03:37:
7e:94:9f:1a:15:c5:0e:c6:58:b5:2b:26:9d:b4:cd:
ed:3f:f5:0d:9d:99:2a:f3:1e:5e:d5:be:89:48:c2:
e9:58:1f:51:24:a7:de:36:ac:a5:c7:0b:c2:2f:80:
92:c0:88:e0:71:43:93:9a:9d:e0:9a:ee:0f:46:30:
34:61:83:fa:98:19:09:c6:ee:f4:c4:fa:02:5d:f7:
03:98:e4:f5:20:45:81:1d:ec:af:a4:8d:5c:82:eb:
c8:6f:0b:9b:9b:43:31:2f:2f:c4:07:93:ba:ff:9e:
39:35:64:ab:94:e3:bb:71:bf:e6:7b:53:33:51:f7:
f2:a1:16:fa:04:22:89:e6:c1:61:b0:91:b9:b5:cf:
08:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:4B:95:34:2E:35:20:19:25:18:DD:C1:82:ED:33:D2:C6:0F:8E:3E
X509v3 Authority Key Identifier:
keyid:65:8C:0C:49:9A:8E:69:D9:79:5F:4B:D0:B5:BF:16:82:B1:F0:0F:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZYwMSZqOadl5X0vQtb8WgrHwD5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e66913-8f5f-47ef-a730-32c1b2cee593/1/ZYwMSZqOadl5X0vQtb8WgrHwD5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e66913-8f5f-47ef-a730-32c1b2cee593/1/ZYwMSZqOadl5X0vQtb8WgrHwD5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:20:11:1e:47:f2:78:00:21:2e:b9:1e:59:ce:8b:a2:4a:ac:
c0:a2:b0:48:0d:6d:b9:0f:46:38:a8:d2:b9:c3:93:ff:98:8a:
a4:2d:3f:0a:3e:98:cc:7d:9d:88:89:ca:b2:aa:a6:58:e3:8c:
96:cb:27:5f:3f:01:e2:21:ec:77:5b:fb:0b:33:ca:dc:5f:b7:
22:7a:fb:99:5f:7f:52:55:34:ce:fb:d2:01:70:f0:f1:65:83:
f2:50:56:0b:ee:92:a3:ec:45:4b:98:81:27:82:be:8c:09:89:
52:6c:8c:96:1c:fe:7e:73:72:70:84:67:44:79:42:7b:d5:35:
c7:6e:70:4a:f8:25:f0:09:d8:89:fb:9e:09:5f:6c:d2:e7:28:
23:0d:94:87:76:ff:a1:25:74:63:c0:f8:b8:47:fe:0e:7c:8c:
24:24:cb:6d:8c:4c:20:fb:77:a1:3d:6a:de:a9:da:db:a3:30:
27:d0:1b:a6:2c:a9:b4:b6:24:da:f7:5b:e0:6c:5f:05:95:dd:
e6:f3:43:28:44:2f:a5:87:b8:81:5c:89:02:61:67:04:f8:1d:
cf:bc:8e:fb:fd:b2:37:e4:5f:db:76:af:ab:30:12:4a:d5:bd:
60:e9:2e:51:b0:cf:15:f2:a5:bc:c4:c9:e1:f7:03:b5:bd:49:
79:2b:a2:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:43:26 2026 by rpki-client