Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/09456e-a71c-43b3-bd40-8ee3d98cad5b/1/zRQ2kCMKRApot6iqmCefL2Xf7ig.mft
File: zRQ2kCMKRApot6iqmCefL2Xf7ig.mft (raw, json)
Hash identifier: L6flWQs8oSX3hJtB8mknJbQhSdfMlHGaW5lqwcISaPs=
Subject key identifier: D3:84:7A:0D:0C:18:8D:E1:36:9B:F7:70:F3:AB:33:C2:84:32:46:4D
Authority key identifier: CD:14:36:90:23:0A:44:0A:68:B7:A8:AA:98:27:9F:2F:65:DF:EE:28
Certificate issuer: /CN=cd143690230a440a68b7a8aa98279f2f65dfee28
Certificate serial: 019F95B78499FF3A31D1410110D9B34D7564
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRQ2kCMKRApot6iqmCefL2Xf7ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/09456e-a71c-43b3-bd40-8ee3d98cad5b/1/zRQ2kCMKRApot6iqmCefL2Xf7ig.mft
Manifest number: 16CB
Signing time: Fri 24 Jul 2026 20:00:59 +0000
Manifest this update: Fri 24 Jul 2026 20:00:59 +0000
Manifest next update: Sat 25 Jul 2026 20:00:59 +0000
Files and hashes: 1: beStaP3U9BouVtR6HKL7Bht809g.roa (hash: 9C0Yz+gtWBKD86eXJ/yNK0jQEWAJqpkTW4DLxbpVN08=)
2: zRQ2kCMKRApot6iqmCefL2Xf7ig.crl (hash: QaetYu+vou1AvmCk+AH+UD7GvwiZdwwvRNbsPyZ1oug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/09456e-a71c-43b3-bd40-8ee3d98cad5b/1/zRQ2kCMKRApot6iqmCefL2Xf7ig.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/09456e-a71c-43b3-bd40-8ee3d98cad5b/1/zRQ2kCMKRApot6iqmCefL2Xf7ig.mft
rsync://rpki.ripe.net/repository/DEFAULT/zRQ2kCMKRApot6iqmCefL2Xf7ig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:b7:84:99:ff:3a:31:d1:41:01:10:d9:b3:4d:75:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd143690230a440a68b7a8aa98279f2f65dfee28
Validity
Not Before: Jul 24 20:00:59 2026 GMT
Not After : Jul 25 20:00:59 2026 GMT
Subject: CN=d3847a0d0c188de1369bf770f3ab33c28432464d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ed:ed:cc:83:16:ab:c5:a1:1e:bb:06:4a:50:
17:e2:24:65:25:5e:e5:8e:ea:a6:7c:b2:f7:ea:8e:
c2:e1:8b:7f:6a:49:bb:9a:33:06:94:cd:db:e2:14:
13:37:39:e0:a8:96:51:ba:a4:32:ad:93:f8:91:96:
00:b3:eb:1b:f5:7a:05:85:28:55:60:38:30:85:c1:
8e:18:61:1c:2d:b5:89:e1:de:7e:f8:cd:f8:63:2f:
19:b6:57:7b:81:f6:20:2b:b4:df:9e:01:50:0c:25:
1a:b6:ae:83:74:23:e8:c4:32:15:d9:51:32:ad:3f:
a4:58:cd:36:c9:a5:3f:1b:16:fe:4e:93:b7:4f:47:
79:ca:dd:b6:61:76:25:d2:88:d7:65:56:b5:f5:06:
97:f8:df:45:e2:38:ad:15:71:67:35:ee:cc:ee:c9:
7c:0d:39:6c:b7:84:b7:dc:26:d6:2b:f1:07:43:c5:
33:9a:43:2c:7c:3f:74:8b:f7:35:81:ff:88:39:9f:
8f:79:92:26:70:b6:26:82:e3:0e:54:9e:87:58:07:
2f:8d:c2:55:af:89:63:0d:9f:41:ab:68:a0:c2:73:
8b:99:5d:9d:33:e9:5a:45:69:c5:77:b1:fe:a0:4e:
38:4f:4c:fc:fe:6c:64:6f:14:65:1c:3b:ec:af:bb:
25:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:84:7A:0D:0C:18:8D:E1:36:9B:F7:70:F3:AB:33:C2:84:32:46:4D
X509v3 Authority Key Identifier:
keyid:CD:14:36:90:23:0A:44:0A:68:B7:A8:AA:98:27:9F:2F:65:DF:EE:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRQ2kCMKRApot6iqmCefL2Xf7ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/09456e-a71c-43b3-bd40-8ee3d98cad5b/1/zRQ2kCMKRApot6iqmCefL2Xf7ig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/09456e-a71c-43b3-bd40-8ee3d98cad5b/1/zRQ2kCMKRApot6iqmCefL2Xf7ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:fb:70:4f:88:68:e1:01:63:50:4f:ae:0e:01:3b:b3:da:02:
1c:dd:c4:4f:d1:db:64:1f:2b:4a:b9:f2:70:b6:75:84:b9:a3:
11:6e:aa:15:84:6c:52:0a:0e:84:fa:a6:f6:ea:14:9d:4d:b8:
0b:b2:a6:74:2b:5d:ce:65:ac:cc:38:93:b8:e3:89:7e:a3:97:
74:4a:e4:74:b1:55:a6:40:cf:bf:21:a1:e6:99:a8:2f:0b:48:
4e:0b:46:a6:86:59:b2:79:65:c3:1c:16:01:11:26:7d:64:55:
d5:d0:e4:ee:f7:11:3b:4b:c5:0b:1f:87:47:ba:1a:5e:7e:bb:
d4:67:96:08:b7:d4:52:51:cf:26:16:ae:b5:0d:9b:a5:c9:1f:
57:cd:36:73:50:19:69:a9:52:16:7b:f2:7c:dd:49:59:05:5c:
1e:33:d5:47:07:ff:5c:27:7b:1f:0e:ab:4a:20:c8:e0:60:fb:
a6:1e:12:86:e2:f2:7c:76:2d:1e:51:24:bd:5c:54:a5:63:af:
43:27:54:7d:1d:74:ce:b2:94:a9:38:33:37:39:f1:7d:28:b8:
4d:a2:15:91:f8:17:b5:94:0f:5a:30:52:2c:10:62:fb:8d:b8:
42:3e:ac:a2:f6:4b:85:22:28:db:2a:50:09:a3:c1:03:19:22:
9f:7a:4a:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 02:03:41 2026 by rpki-client