Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.mft
File: ZRaETSRdQSSiKlNrBG2oYzLQuRE.mft (raw, json)
Hash identifier: Z2SICGo1E8Fq+T4FW2RLPx6tG3LxYmISW1nIlD0rTjM=
Subject key identifier: 9F:B7:FF:0A:66:3A:EE:D2:5B:1D:39:6D:96:98:D8:42:AC:9E:47:38
Authority key identifier: 65:16:84:4D:24:5D:41:24:A2:2A:53:6B:04:6D:A8:63:32:D0:B9:11
Certificate issuer: /CN=6516844d245d4124a22a536b046da86332d0b911
Certificate serial: 019F951209B33C7D75250C69C40CFB5DAF50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZRaETSRdQSSiKlNrBG2oYzLQuRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.mft
Manifest number: 0A46
Signing time: Fri 24 Jul 2026 17:00:14 +0000
Manifest this update: Fri 24 Jul 2026 17:00:14 +0000
Manifest next update: Sat 25 Jul 2026 17:00:14 +0000
Files and hashes: 1: 7BgGMhfrcQqzufLm6BOZyNmcrP4.roa (hash: Ez1hXHY/SyH5UhM0EJmIkgA9tRyMxJtbCALr5l1nz1Y=)
2: ZRaETSRdQSSiKlNrBG2oYzLQuRE.crl (hash: JRlth/AMgPAQ8SbhgdQ9z+oS/ZA1sB5fC/38nP5wRvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZRaETSRdQSSiKlNrBG2oYzLQuRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:12:09:b3:3c:7d:75:25:0c:69:c4:0c:fb:5d:af:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6516844d245d4124a22a536b046da86332d0b911
Validity
Not Before: Jul 24 17:00:14 2026 GMT
Not After : Jul 25 17:00:14 2026 GMT
Subject: CN=9fb7ff0a663aeed25b1d396d9698d842ac9e4738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0d:4c:9f:5a:1e:84:85:6d:b3:60:cb:c5:a8:
d4:29:08:3b:bc:48:4b:e0:33:0d:a8:6f:53:ff:f3:
5c:80:62:30:9e:04:76:f1:b4:53:86:b6:b3:68:f4:
48:9f:a2:2c:c4:22:e7:6f:12:e7:3e:4e:c2:c6:0f:
a6:69:17:b9:7a:6b:96:f5:dc:c3:13:2e:19:3d:81:
9c:62:89:51:c6:23:17:89:b7:2b:cd:01:f8:1a:d2:
12:12:4a:50:f3:57:d1:f1:16:9f:82:3b:73:e6:c5:
8c:4b:ef:23:21:7f:64:31:48:97:8b:79:05:58:2e:
b1:14:09:e4:2a:9c:71:1c:24:5b:27:70:be:0a:50:
fe:05:d4:ac:31:1b:aa:44:2a:89:fc:d9:75:c5:c2:
af:f5:d9:bd:c3:2b:b3:db:1b:6a:3d:49:72:2c:a7:
75:e5:05:83:6f:8c:f2:05:91:2f:5e:e0:bb:88:ee:
f0:66:8b:24:31:bc:0b:94:43:b6:5a:be:f2:70:cf:
03:cd:4c:35:7c:50:82:6a:40:55:b5:55:33:0a:57:
77:ae:55:30:48:78:f4:24:85:3a:fc:f8:7d:72:ed:
47:8a:e4:89:e4:be:44:dc:84:d4:f0:16:25:f8:af:
66:99:74:0f:55:0e:9a:4b:8d:a2:83:50:36:7d:e8:
c0:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:B7:FF:0A:66:3A:EE:D2:5B:1D:39:6D:96:98:D8:42:AC:9E:47:38
X509v3 Authority Key Identifier:
keyid:65:16:84:4D:24:5D:41:24:A2:2A:53:6B:04:6D:A8:63:32:D0:B9:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRaETSRdQSSiKlNrBG2oYzLQuRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:6e:cb:c4:58:2f:28:05:53:08:7f:26:c3:09:8c:c2:c7:e2:
b5:9e:7c:25:e1:3b:df:3b:9b:d9:66:35:ec:57:e1:0c:10:6b:
d9:22:05:aa:3b:2b:7d:d2:36:49:63:48:93:5d:9b:9d:a2:45:
67:55:8d:60:82:d1:8c:46:57:d3:d9:1e:b5:d3:f8:f0:80:cf:
4d:7a:f6:c7:2b:f9:9d:b5:9c:1c:0d:46:e3:84:3e:6c:16:44:
75:63:6a:5a:56:10:51:39:2d:0d:35:dc:f4:b1:df:48:a9:46:
45:cd:1d:e0:3f:05:dc:40:c0:ab:ec:dd:d8:13:d3:99:73:5b:
e2:69:34:80:dd:9b:68:7c:ce:78:4a:4d:56:1a:55:9f:29:e4:
83:e7:e9:95:28:1d:4d:89:e5:ac:a5:35:c8:ae:3c:0b:54:5f:
fa:cc:68:cb:a1:92:2f:c2:12:08:4e:02:c7:2d:dc:29:40:4c:
45:73:04:83:5b:c5:30:5c:d2:ce:a0:be:30:e3:06:fe:bb:d6:
fb:b0:32:83:d0:33:d1:b3:79:24:3a:b0:8f:7b:91:3a:8e:e4:
35:e4:9a:6e:3b:e3:f3:50:50:d2:2b:a2:35:3c:9c:42:73:4b:
2a:ce:66:89:87:9e:b9:3e:c0:62:cd:44:1d:7f:24:a5:08:1d:
0a:58:36:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:50:14 2026 by rpki-client