Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft
File: ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft (raw, json)
Hash identifier: DMVWQ4ruWkTeZcsh+5VaRAPtPUFLpFZMWuKQEOxKDa0=
Subject key identifier: 7D:37:73:5F:C6:38:E5:29:C9:9A:4A:10:B7:0D:BA:86:8E:61:B9:00
Authority key identifier: 64:C0:BC:59:4A:F8:11:75:3D:FC:11:6A:F4:59:B1:B8:74:47:14:89
Certificate issuer: /CN=64c0bc594af811753dfc116af459b1b874471489
Certificate serial: 019F91DB3FF758245761259D901F9DCFA66F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft
Manifest number: 05C0
Signing time: Fri 24 Jul 2026 02:01:32 +0000
Manifest this update: Fri 24 Jul 2026 02:01:32 +0000
Manifest next update: Sat 25 Jul 2026 02:01:32 +0000
Files and hashes: 1: J2KPu7SF8-IgFc_PEWtKR0GI_cU.roa (hash: VJE0x80m0wxxgNfwYsal4K/ZZSwAp/QnDuAp90J4C0U=)
2: PFi8UqEs0Ce2jyKlXcQsmaVNy0Q.roa (hash: EuK+aiouSE9l8DmSMYUXvpay7owoB5D7UbVEhjSaVSk=)
3: ZMC8WUr4EXU9_BFq9FmxuHRHFIk.crl (hash: oYJCu9L8AGHiSrKu9MXD0uP1sM7OHRFf3otT2tO/TH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:db:3f:f7:58:24:57:61:25:9d:90:1f:9d:cf:a6:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64c0bc594af811753dfc116af459b1b874471489
Validity
Not Before: Jul 24 02:01:32 2026 GMT
Not After : Jul 25 02:01:32 2026 GMT
Subject: CN=7d37735fc638e529c99a4a10b70dba868e61b900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5c:a0:79:31:a0:75:6a:9a:d0:95:70:1e:25:
50:1b:19:39:fd:79:75:e5:86:3c:c4:67:39:ac:a4:
0d:63:58:7b:11:6c:9d:43:b3:ab:79:65:ba:3d:e2:
26:0d:bb:aa:57:59:99:4b:3b:e5:69:d1:0c:e7:36:
90:9a:ee:68:42:96:34:ff:f2:ad:ff:cf:eb:4d:60:
b4:10:57:af:b3:f4:38:b1:f3:b1:bd:8b:82:d8:23:
43:7d:4a:3f:27:2c:79:aa:85:9e:ab:95:a9:49:04:
33:ad:35:71:a5:2f:8e:9e:ad:ee:99:60:96:4d:19:
5f:5e:fc:b0:30:9b:85:6f:05:d6:17:bd:76:9e:6c:
a1:86:58:a7:8d:8a:c0:3f:9e:40:73:09:e4:86:e6:
a8:0a:0a:4f:1d:4f:00:ba:b7:5b:a5:e4:03:1a:1f:
51:21:68:78:b1:78:37:6a:92:2c:10:80:67:6d:78:
c4:04:f8:d3:00:1d:e2:59:0c:d5:c3:6f:ae:ef:b7:
39:e2:44:8e:51:74:1c:db:69:d0:d3:e3:d0:5a:17:
d6:e9:99:9f:16:39:24:c5:6a:3d:fd:a3:00:6a:8f:
cd:ba:e9:df:7e:6a:1c:2b:00:4f:72:36:bd:02:c5:
b8:19:29:1c:db:ed:d6:11:48:65:e5:b2:ab:d2:70:
92:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:37:73:5F:C6:38:E5:29:C9:9A:4A:10:B7:0D:BA:86:8E:61:B9:00
X509v3 Authority Key Identifier:
keyid:64:C0:BC:59:4A:F8:11:75:3D:FC:11:6A:F4:59:B1:B8:74:47:14:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:30:7f:4c:28:5d:c3:0d:57:45:c4:11:08:24:84:87:ac:55:
a3:c2:f6:15:03:cf:30:08:db:a6:b0:67:a1:ee:92:10:de:37:
08:3b:03:f8:b4:e7:47:3d:93:a0:51:1e:53:8e:47:d7:00:99:
cc:9c:b3:b7:59:bb:41:ad:f5:b7:98:b4:16:ce:6c:6d:db:bd:
35:5c:db:6e:39:df:17:6b:95:0e:5b:7d:f6:0e:2b:1b:cb:4f:
90:33:3a:48:09:19:b6:56:b4:75:2a:96:16:6a:36:1b:e9:a3:
7c:52:b1:8c:0e:1a:a1:b7:14:99:f5:db:c0:30:14:27:12:49:
48:87:2c:4b:82:07:d4:91:17:54:37:2b:1e:b5:67:ea:8f:c2:
47:7e:cb:0b:f2:fd:01:fb:10:e8:76:49:bb:65:aa:9e:dc:47:
fe:eb:54:f0:5b:2c:6d:da:67:fd:e6:33:c7:17:de:fc:5b:6a:
58:af:8e:99:ee:0a:67:28:b8:ef:2a:0d:b0:10:26:c6:d9:9a:
a7:f3:e0:e5:41:78:db:0b:d8:f4:44:50:31:b2:b6:e4:1a:17:
22:c4:1c:9d:60:36:3c:93:ac:34:4b:0f:8f:e1:74:10:95:6d:
35:a2:ae:0e:c7:c5:1f:bd:92:07:4c:4c:f3:58:08:5a:b3:c9:
bb:13:b1:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:23:23 2026 by rpki-client