Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/013526-7710-4bb0-b514-fbb7d30dce38/1/ZpUzYf9sAIP9k9UoZQMzGYY_vEY.mft
File: ZpUzYf9sAIP9k9UoZQMzGYY_vEY.mft (raw, json)
Hash identifier: u7GOoE57POxPZE8oAHF0jfuDI20tLnLunawSJQPk+7I=
Subject key identifier: 36:C4:A5:AC:BC:2F:A0:B0:B0:FF:E2:1D:BB:6D:A7:1F:E5:2A:04:42
Authority key identifier: 66:95:33:61:FF:6C:00:83:FD:93:D5:28:65:03:33:19:86:3F:BC:46
Certificate issuer: /CN=66953361ff6c0083fd93d52865033319863fbc46
Certificate serial: 019F92ED3D46A30F09AA3F5739F2866E2105
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZpUzYf9sAIP9k9UoZQMzGYY_vEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/013526-7710-4bb0-b514-fbb7d30dce38/1/ZpUzYf9sAIP9k9UoZQMzGYY_vEY.mft
Manifest number: 0C08
Signing time: Fri 24 Jul 2026 07:00:48 +0000
Manifest this update: Fri 24 Jul 2026 07:00:48 +0000
Manifest next update: Sat 25 Jul 2026 07:00:48 +0000
Files and hashes: 1: ZpUzYf9sAIP9k9UoZQMzGYY_vEY.crl (hash: TvLVnn4aeZwDCbyOuQ07IJ5J9F81jbdpYp80m+Dykw0=)
2: sNdU_E9AeTRcV1tQUPKaysFTZxA.roa (hash: RsVC7/l8xCsWReH4ylGowvPT0B2fPTstrTBA1NPEml0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/013526-7710-4bb0-b514-fbb7d30dce38/1/ZpUzYf9sAIP9k9UoZQMzGYY_vEY.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/013526-7710-4bb0-b514-fbb7d30dce38/1/ZpUzYf9sAIP9k9UoZQMzGYY_vEY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZpUzYf9sAIP9k9UoZQMzGYY_vEY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:3d:46:a3:0f:09:aa:3f:57:39:f2:86:6e:21:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66953361ff6c0083fd93d52865033319863fbc46
Validity
Not Before: Jul 24 07:00:48 2026 GMT
Not After : Jul 25 07:00:48 2026 GMT
Subject: CN=36c4a5acbc2fa0b0b0ffe21dbb6da71fe52a0442
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ea:d3:70:14:5e:74:c2:38:a6:c7:6b:6d:0d:
8d:26:12:62:37:61:5c:7f:57:bc:7e:70:5b:08:e7:
71:80:0e:51:bd:0e:4b:76:f4:15:0b:35:60:27:03:
db:d7:30:b9:ce:35:02:7a:80:6d:54:ff:aa:35:99:
fd:c5:8b:4f:7a:e4:53:4d:ed:af:57:d0:58:23:72:
3a:45:a5:13:10:3e:3c:12:03:0f:7f:88:eb:8b:64:
ff:52:0c:14:9b:c7:e9:f2:98:00:0d:c6:d9:ac:f4:
d6:b8:94:e4:ee:eb:bb:8a:d0:4b:be:6a:d1:58:74:
98:ce:8d:bb:06:f9:52:4d:84:dd:5a:68:f9:26:dd:
db:a4:dd:74:b4:2d:b8:69:46:69:9c:01:a5:a1:17:
18:5d:3a:30:74:59:d4:fa:73:8f:6a:f2:f3:ff:50:
d3:e5:8c:0a:bd:21:50:7b:68:4f:05:cd:d9:93:32:
9f:23:83:e4:b3:18:db:6f:e6:a1:be:ad:36:bb:34:
13:f9:30:4d:e7:71:14:bc:84:f9:49:9c:0a:95:c9:
f6:5c:f8:8a:23:a7:a2:d7:f9:99:cf:cf:c0:47:31:
ab:8f:78:b5:79:6a:62:c1:38:cf:d7:87:1a:48:e5:
ac:0b:a3:92:7c:54:42:23:6a:aa:67:c7:cf:bf:0d:
5b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:C4:A5:AC:BC:2F:A0:B0:B0:FF:E2:1D:BB:6D:A7:1F:E5:2A:04:42
X509v3 Authority Key Identifier:
keyid:66:95:33:61:FF:6C:00:83:FD:93:D5:28:65:03:33:19:86:3F:BC:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZpUzYf9sAIP9k9UoZQMzGYY_vEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/013526-7710-4bb0-b514-fbb7d30dce38/1/ZpUzYf9sAIP9k9UoZQMzGYY_vEY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/013526-7710-4bb0-b514-fbb7d30dce38/1/ZpUzYf9sAIP9k9UoZQMzGYY_vEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:9c:35:09:ef:dc:49:23:30:7c:9d:ed:e8:65:b5:41:db:a0:
b4:85:06:c9:d4:f4:b5:62:c1:ae:b5:e2:ab:bf:33:c4:d4:42:
7d:5a:e8:c9:53:7a:a2:35:30:d7:cd:75:2d:8c:e6:1a:90:a0:
e7:d0:a3:ca:41:f8:a7:2e:64:fc:64:e8:c8:37:67:78:81:72:
5e:dc:0a:78:e0:94:b8:03:73:b2:af:de:73:8a:75:82:17:aa:
17:c8:d2:16:35:e6:82:c6:73:49:86:75:c2:99:30:36:5c:a3:
42:ac:81:24:af:18:8a:53:24:93:b3:da:1d:77:3c:dd:cb:f8:
d9:fa:eb:a4:6d:44:0b:e1:38:53:59:71:b5:ec:14:69:c0:53:
fc:37:03:93:48:d1:39:40:fc:6a:cc:d5:d0:80:51:0a:1a:8e:
8f:66:a7:0d:41:5c:0e:6e:c0:64:bf:9d:fd:3a:79:28:ad:47:
73:37:96:e0:bd:3f:1e:99:d8:0a:1b:67:12:c5:cc:47:4d:63:
c6:e2:1f:a9:bd:74:da:68:50:5c:e0:d9:bb:7e:2f:46:03:9c:
47:23:a1:92:ad:5f:f5:26:b4:85:06:b7:a7:6f:53:7c:31:1b:
f8:6a:5f:f6:98:24:91:eb:c8:45:44:aa:b5:c2:ae:5b:67:79:
92:0e:1c:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:48:44 2026 by rpki-client