Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.mft
File: zX-HiUkBBwl7IM-m49RZ8TYnS6Q.mft (raw, json)
Hash identifier: Px8luOY5DydMV98WUGD2t35gCtAsheVNM1SoYyWjMM0=
Subject key identifier: DB:F2:69:D0:BA:9A:72:0B:69:6E:B2:78:06:E5:17:90:31:D7:19:4C
Authority key identifier: CD:7F:87:89:49:01:07:09:7B:20:CF:A6:E3:D4:59:F1:36:27:4B:A4
Certificate issuer: /CN=cd7f8789490107097b20cfa6e3d459f136274ba4
Certificate serial: 019F940000007966FDF13F477BE223BB370B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.mft
Manifest number: 19C9
Signing time: Fri 24 Jul 2026 12:00:55 +0000
Manifest this update: Fri 24 Jul 2026 12:00:55 +0000
Manifest next update: Sat 25 Jul 2026 12:00:55 +0000
Files and hashes: 1: 0Nhd8HDX6sg6Ga0qO0frLY4tJgo.roa (hash: SiLri2/+BqWzCqbvv2/gkd1DlEwX13aVYQvZZuSlTWA=)
2: ujsDjvc8O_UMPKpybYL3m05dxkQ.roa (hash: l2pAahFC+BLRkn5FZkCd0AQgZA8lDYBz+/BDHXLPl0o=)
3: zX-HiUkBBwl7IM-m49RZ8TYnS6Q.crl (hash: 1HNaQqfqr+bO+/LUfs2iDrsslGXWXJFNG1d3XQsaCkY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:00:00:00:79:66:fd:f1:3f:47:7b:e2:23:bb:37:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd7f8789490107097b20cfa6e3d459f136274ba4
Validity
Not Before: Jul 24 12:00:55 2026 GMT
Not After : Jul 25 12:00:55 2026 GMT
Subject: CN=dbf269d0ba9a720b696eb27806e5179031d7194c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5b:e3:83:d6:f7:1d:12:3e:86:cb:02:2c:41:
01:c5:bc:d7:cb:2d:96:eb:25:bd:b2:d2:6a:f1:a4:
b7:0e:47:31:64:04:e7:3e:11:14:4a:78:7f:d0:97:
db:e8:c3:db:80:52:d5:40:1c:49:4a:ee:37:9d:93:
af:3c:88:6a:d4:d8:90:0c:48:21:fd:3e:40:9f:ce:
1e:73:bf:8a:92:76:b9:56:91:95:61:8a:b2:1b:10:
2a:ce:7c:d0:41:66:08:49:89:ec:5f:4c:d7:ed:44:
6b:dc:b9:73:ef:a6:f5:1a:79:43:87:76:d4:44:d4:
37:92:07:52:1a:9a:ff:ff:bd:85:09:e7:9f:12:57:
c5:cf:ea:5a:95:b6:d7:09:0a:77:7e:2f:a5:19:81:
26:eb:93:e6:5c:f4:75:16:63:6b:3f:de:9e:87:0c:
22:9a:81:16:a6:39:f0:74:0d:24:36:bb:f8:82:65:
05:34:4a:be:65:59:35:ac:83:00:c8:2a:ad:dc:f7:
c9:83:76:07:b3:b0:31:70:a7:25:71:f5:1c:d6:3b:
13:12:5a:0a:82:86:e7:73:13:a7:4c:88:97:0a:e9:
0d:59:e7:fa:c3:88:84:c3:d1:ef:e4:1b:07:26:5e:
37:89:a6:44:02:5d:03:d5:24:dd:10:49:f3:4b:e7:
a9:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:F2:69:D0:BA:9A:72:0B:69:6E:B2:78:06:E5:17:90:31:D7:19:4C
X509v3 Authority Key Identifier:
keyid:CD:7F:87:89:49:01:07:09:7B:20:CF:A6:E3:D4:59:F1:36:27:4B:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:b8:6a:6f:04:11:ca:fd:fb:7c:61:6d:ba:19:ea:d1:06:66:
e7:4f:4b:a2:95:03:33:be:0a:b9:bc:79:92:df:20:47:6f:8f:
65:a1:77:38:d9:24:be:36:0f:8c:7a:ec:c3:19:cf:8d:85:45:
ab:ad:99:31:5e:1b:c0:dd:16:5f:46:9b:6e:46:40:fe:82:8e:
e7:81:d1:ad:83:a6:6f:f1:70:3c:5e:24:e9:31:de:75:39:04:
91:fd:cd:e2:a2:51:34:4b:90:26:16:e2:56:1b:8a:59:ee:42:
88:db:1e:da:db:25:91:e1:fd:27:5a:8b:9b:f8:39:4e:42:b2:
22:ce:90:20:24:85:d7:75:3f:23:bb:11:17:3a:d8:30:e2:9b:
44:4e:7e:73:21:98:38:d3:eb:1a:70:b8:f4:4c:7c:1e:4c:1a:
d7:91:00:91:68:97:98:5d:53:93:2d:9c:09:a4:ae:9a:09:16:
00:d9:ef:d6:83:d5:4e:4c:61:a9:bb:7a:db:b5:81:1f:61:56:
c7:fd:e7:08:45:0a:56:d2:4f:86:18:86:b9:f1:ae:64:2b:37:
3b:f8:6c:a4:9e:f8:86:2d:1d:31:dd:e6:8b:39:8f:4d:fa:90:
cf:13:b8:34:c0:87:1a:ea:45:f0:cf:24:f1:83:5d:ec:dc:f0:
6c:b4:88:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:13:25 2026 by rpki-client