Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/7a1274-03ac-494d-ba8e-cfcffa3c0665/1/zT5kktRzFSDB7tvNopZ5UArAg6s.mft
File: zT5kktRzFSDB7tvNopZ5UArAg6s.mft (raw, json)
Hash identifier: 6b/jSIjQSn6NhKX+PhwRd2pR3T9RsxiH+UmVEWQBjyI=
Subject key identifier: 61:12:1A:28:7D:ED:82:49:E2:16:1F:FC:63:83:37:B4:49:7E:66:9F
Authority key identifier: CD:3E:64:92:D4:73:15:20:C1:EE:DB:CD:A2:96:79:50:0A:C0:83:AB
Certificate issuer: /CN=cd3e6492d4731520c1eedbcda29679500ac083ab
Certificate serial: 019F92B674DB7A79653823E8002A246BAE5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zT5kktRzFSDB7tvNopZ5UArAg6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/7a1274-03ac-494d-ba8e-cfcffa3c0665/1/zT5kktRzFSDB7tvNopZ5UArAg6s.mft
Manifest number: 0895
Signing time: Fri 24 Jul 2026 06:00:58 +0000
Manifest this update: Fri 24 Jul 2026 06:00:58 +0000
Manifest next update: Sat 25 Jul 2026 06:00:58 +0000
Files and hashes: 1: C-10eoHVV_ERuNuHp1M0fCx__Ag.roa (hash: kJJFsA3C5xKnlbqZn0ozkgC1qO7Vwfq9ha16s0RBd0k=)
2: zT5kktRzFSDB7tvNopZ5UArAg6s.crl (hash: T9awHUTrdLuF+d2yuEU7+ECveQRZq0Xk+NjUmWkokPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/7a1274-03ac-494d-ba8e-cfcffa3c0665/1/zT5kktRzFSDB7tvNopZ5UArAg6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/7a1274-03ac-494d-ba8e-cfcffa3c0665/1/zT5kktRzFSDB7tvNopZ5UArAg6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/zT5kktRzFSDB7tvNopZ5UArAg6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b6:74:db:7a:79:65:38:23:e8:00:2a:24:6b:ae:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd3e6492d4731520c1eedbcda29679500ac083ab
Validity
Not Before: Jul 24 06:00:58 2026 GMT
Not After : Jul 25 06:00:58 2026 GMT
Subject: CN=61121a287ded8249e2161ffc638337b4497e669f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:02:06:71:3a:c0:ff:64:17:80:10:36:76:fb:
d4:c0:8c:a4:0a:c3:3c:00:2a:d6:24:ce:be:5a:6e:
3b:46:94:c0:59:b8:3f:b3:23:61:00:17:c3:e4:54:
67:46:c3:ea:f1:c2:70:04:38:0a:d8:e5:65:c8:10:
2c:20:bd:9a:f4:ac:6d:9b:f3:5c:c9:50:f6:12:eb:
09:e9:63:8e:a5:80:45:f2:a6:19:07:c5:d4:60:32:
55:e9:f8:e0:b2:ef:83:9d:b8:bb:93:f7:38:15:5e:
8d:aa:72:18:34:bf:06:d5:ef:79:ac:0e:27:ca:93:
57:b7:35:2b:2f:8c:25:ca:d9:7b:9c:55:d8:a4:2a:
fc:85:81:2b:37:c8:43:8f:06:9c:3d:e0:25:00:c1:
a8:5b:0f:c6:d6:ae:6d:da:ef:67:80:b7:4f:6a:10:
9d:98:78:03:d2:d7:6b:e7:5b:ba:e0:54:66:ef:81:
02:7c:5e:4a:9c:01:2f:6f:cd:72:62:eb:aa:77:ad:
d3:c3:15:d7:20:14:04:a6:32:0e:5c:a2:4a:78:7d:
df:5a:07:80:ca:06:4d:bf:35:24:e5:8a:19:22:5a:
a5:89:e8:c6:55:64:49:28:9c:77:fe:fc:50:66:9a:
34:81:42:3d:f9:49:4d:31:cf:7b:84:7a:96:a8:4c:
73:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:12:1A:28:7D:ED:82:49:E2:16:1F:FC:63:83:37:B4:49:7E:66:9F
X509v3 Authority Key Identifier:
keyid:CD:3E:64:92:D4:73:15:20:C1:EE:DB:CD:A2:96:79:50:0A:C0:83:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zT5kktRzFSDB7tvNopZ5UArAg6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7a1274-03ac-494d-ba8e-cfcffa3c0665/1/zT5kktRzFSDB7tvNopZ5UArAg6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7a1274-03ac-494d-ba8e-cfcffa3c0665/1/zT5kktRzFSDB7tvNopZ5UArAg6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:a6:85:a3:7b:c6:48:f3:66:9e:89:c6:b1:b8:95:a0:93:aa:
d3:48:ba:19:d2:49:9e:15:81:6f:93:5b:b9:8d:1f:11:88:2d:
61:0a:e3:21:52:e8:e4:38:a3:6e:2d:7c:ca:5a:d3:30:c4:f9:
1f:93:58:22:97:0c:70:d3:8f:38:8f:19:96:f1:5e:d7:2f:de:
27:19:c8:9f:c7:ac:99:e2:64:e9:5e:88:87:ee:dc:5a:4a:64:
76:7e:56:1b:fb:45:1e:b3:61:5f:2a:93:3e:76:fb:fd:cf:34:
c3:33:ca:a6:5e:c3:34:d7:2b:ef:e3:9d:f4:63:5d:5d:ee:a9:
cb:c8:fd:9a:b3:55:9f:59:ed:68:0c:ef:c4:ec:1e:96:39:9b:
b4:62:63:6a:a7:c2:6a:97:01:7c:bc:ab:4f:c5:94:e3:da:ab:
9c:6d:fd:e6:8c:da:24:9e:2f:b2:f6:e4:4e:2c:b5:31:c4:c1:
5b:5a:c0:cd:6f:a3:84:b4:77:b7:77:8b:47:66:a4:bf:4e:e7:
c1:37:3a:a8:bb:fb:bc:43:21:95:10:30:4f:27:cf:ec:7e:2c:
3e:19:e7:46:a4:d8:47:81:35:33:5e:8c:92:7b:ce:5d:58:c3:
80:82:37:24:d7:4f:1e:f5:d5:69:d7:25:f1:19:87:1c:fc:a3:
50:09:7f:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:55:20 2026 by rpki-client