Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.mft
File: zHd6CKRWRUi1GOw4ZLNB4fpSJeo.mft (raw, json)
Hash identifier: ohHc0ruDotlv5U+MXQDtIdGBvqvV2peUPxqOQ6c1uGI=
Subject key identifier: 09:80:57:A8:F6:11:1C:4F:0A:56:AC:57:52:B5:EE:58:34:3A:46:7B
Authority key identifier: CC:77:7A:08:A4:56:45:48:B5:18:EC:38:64:B3:41:E1:FA:52:25:EA
Certificate issuer: /CN=cc777a08a4564548b518ec3864b341e1fa5225ea
Certificate serial: 019F91DB12D494F3C0BB663A0F717C145142
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.mft
Manifest number: 19D7
Signing time: Fri 24 Jul 2026 02:01:20 +0000
Manifest this update: Fri 24 Jul 2026 02:01:20 +0000
Manifest next update: Sat 25 Jul 2026 02:01:20 +0000
Files and hashes: 1: efPNeN_0KirVowyqOO81ber6Zg8.roa (hash: 0sZnmeXPSX5yamGjUWVvInbw7JdGyiWW9gzFR1D9bNU=)
2: zHd6CKRWRUi1GOw4ZLNB4fpSJeo.crl (hash: bVJi0NLIeWY/ALgQXrmCtU/yP3kDBburJIvkFC/+h7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 02:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:db:12:d4:94:f3:c0:bb:66:3a:0f:71:7c:14:51:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc777a08a4564548b518ec3864b341e1fa5225ea
Validity
Not Before: Jul 24 02:01:20 2026 GMT
Not After : Jul 25 02:01:20 2026 GMT
Subject: CN=098057a8f6111c4f0a56ac5752b5ee58343a467b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:21:5f:54:87:36:eb:08:a8:e3:55:48:67:0d:
eb:b3:fa:b1:3b:9c:1c:1b:42:08:6a:f3:bc:e3:ea:
85:8e:bd:74:01:19:70:7d:90:ad:77:63:19:97:c6:
fe:4c:1f:da:0a:72:60:a8:60:7b:34:c5:d8:a8:8e:
d1:b1:83:9b:5b:63:bd:f5:87:d0:dc:7b:69:20:9b:
03:05:7e:3f:6c:9d:7f:2e:3c:92:2f:89:5b:24:64:
8d:02:65:0f:1e:82:eb:8c:c0:ec:0f:36:39:37:ba:
91:fd:2c:98:4e:e6:bd:10:88:fd:49:2e:ed:c5:a0:
98:9e:cd:ba:aa:14:65:1b:1d:2b:0c:61:40:7d:79:
af:fd:86:79:92:76:65:fe:2d:22:30:e2:24:af:00:
9b:0e:11:b7:3c:96:c7:f8:1b:bb:75:1f:ad:4b:37:
7c:1c:84:0c:74:62:80:07:72:f9:b9:34:87:a7:d6:
fa:de:12:1c:d9:50:2a:ca:6e:68:cd:10:d4:3d:4f:
d5:42:8c:58:7d:d5:2d:57:4d:a7:b0:e4:04:06:14:
30:a4:7c:47:88:43:fd:d8:fe:56:06:f1:5a:c7:24:
3f:27:ee:f5:3d:fe:dc:5e:ef:c1:82:33:e9:bc:d8:
06:31:f4:ed:ab:05:52:10:ce:66:93:93:6f:d3:0e:
6b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:80:57:A8:F6:11:1C:4F:0A:56:AC:57:52:B5:EE:58:34:3A:46:7B
X509v3 Authority Key Identifier:
keyid:CC:77:7A:08:A4:56:45:48:B5:18:EC:38:64:B3:41:E1:FA:52:25:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:4a:0f:36:3f:2d:68:0b:9c:46:72:d3:1d:87:29:5e:e9:4c:
3d:fa:ec:e2:4b:1d:91:1e:a9:ae:cd:79:ce:15:9a:78:ca:10:
a0:78:87:ca:9f:25:9f:6d:dd:9a:c8:9b:da:84:bb:54:b1:20:
17:e5:75:df:a1:ca:37:8c:aa:e9:0b:24:61:ad:8e:49:49:dc:
5b:6f:44:c0:44:43:ca:fa:a1:f2:32:df:e4:e3:96:a0:94:5c:
d5:39:f5:66:24:44:05:05:6d:c9:92:1d:c2:6b:e8:f7:bc:bf:
2b:3c:d4:cc:5e:da:82:04:c9:d4:4f:34:20:45:81:a0:26:a8:
c5:5d:00:d7:80:14:ac:f5:bb:da:00:70:bc:5f:e7:76:90:a7:
8f:db:24:dd:97:8a:4a:b3:6b:3f:8c:a3:c2:2c:7a:3b:05:56:
59:d9:f9:9a:38:e3:d3:94:70:bd:03:36:8b:e1:78:3b:7a:f8:
f0:83:84:ec:49:51:6a:a3:62:31:93:4e:34:b5:e3:15:af:ed:
47:5f:2f:3f:c3:5f:b0:65:19:f7:57:0d:8b:91:a6:87:b0:87:
58:1d:e5:97:d6:de:e5:45:88:1c:35:df:b3:d6:81:11:c1:b4:
0f:9b:00:67:c1:2e:3d:22:20:37:eb:fe:64:3f:59:51:66:72:
2e:38:f5:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:08:51 2026 by rpki-client