Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/fe45cf-4ad2-41d9-bbca-203cfa238696/1/zfy95jLRBvqtmMLBiVqHfKYBUho.mft
File: zfy95jLRBvqtmMLBiVqHfKYBUho.mft (raw, json)
Hash identifier: tw1iVYmqfL/BnNGztqXdgLkK7ophZIbZ7EIEqmEV+zA=
Subject key identifier: 59:76:EE:5D:AA:4F:FF:90:A7:5C:2A:CE:52:92:0A:BC:42:65:86:35
Authority key identifier: CD:FC:BD:E6:32:D1:06:FA:AD:98:C2:C1:89:5A:87:7C:A6:01:52:1A
Certificate issuer: /CN=cdfcbde632d106faad98c2c1895a877ca601521a
Certificate serial: 019F91A3E649FE313BD0BD59FA46AB61D97E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zfy95jLRBvqtmMLBiVqHfKYBUho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/fe45cf-4ad2-41d9-bbca-203cfa238696/1/zfy95jLRBvqtmMLBiVqHfKYBUho.mft
Manifest number: 195A
Signing time: Fri 24 Jul 2026 01:01:05 +0000
Manifest this update: Fri 24 Jul 2026 01:01:05 +0000
Manifest next update: Sat 25 Jul 2026 01:01:05 +0000
Files and hashes: 1: KGwwtGzR65TxQF-2vzhHlmHOTo8.roa (hash: o/WFBpe3yFcgt0UEYgNY9hSYO7UsE0F6pNNZUvTlLxk=)
2: zfy95jLRBvqtmMLBiVqHfKYBUho.crl (hash: ipREhQ6vIbqDQH1vDsIWaM6n5Ry6kH98SoGXu9uCARw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/fe45cf-4ad2-41d9-bbca-203cfa238696/1/zfy95jLRBvqtmMLBiVqHfKYBUho.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/fe45cf-4ad2-41d9-bbca-203cfa238696/1/zfy95jLRBvqtmMLBiVqHfKYBUho.mft
rsync://rpki.ripe.net/repository/DEFAULT/zfy95jLRBvqtmMLBiVqHfKYBUho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a3:e6:49:fe:31:3b:d0:bd:59:fa:46:ab:61:d9:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdfcbde632d106faad98c2c1895a877ca601521a
Validity
Not Before: Jul 24 01:01:05 2026 GMT
Not After : Jul 25 01:01:05 2026 GMT
Subject: CN=5976ee5daa4fff90a75c2ace52920abc42658635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8a:0f:e5:28:8b:12:19:d1:31:bd:74:d3:13:
50:c0:e5:6e:ba:e5:4f:01:8d:a3:36:1d:04:27:06:
e3:2b:c8:0a:c7:c7:b6:65:42:d9:2d:64:7c:b5:b1:
18:56:d3:89:6a:29:9d:68:7b:21:a1:44:c2:47:66:
43:09:f1:b0:c6:ee:c9:a9:a5:a2:67:78:de:b6:02:
0f:09:8c:35:b0:32:ee:fd:bc:55:dd:7c:15:09:41:
7c:22:7a:28:da:70:6b:9f:26:0e:b1:b1:a8:6d:f5:
c7:99:f3:57:1e:89:6e:24:e5:ff:6f:30:ea:f1:35:
51:c3:eb:27:2d:1e:22:35:52:b7:9d:78:cb:4e:fa:
f2:a3:11:4a:3f:ae:c5:c6:7f:c9:70:d3:7b:4d:22:
66:0a:fa:57:57:ff:76:2d:0b:0b:98:ef:0a:82:0e:
7c:d6:d6:b6:72:91:40:6e:2b:82:28:63:b2:4a:6f:
e5:41:a4:e0:b9:00:f6:53:4a:6c:ca:7b:33:a0:dc:
aa:59:f2:04:e5:cf:45:1b:0e:fd:95:26:1d:cc:35:
cb:57:cd:1c:c0:1e:52:01:f4:6a:1a:92:94:a8:ae:
99:cb:82:b1:c6:98:f3:5c:7f:02:af:7d:81:c2:70:
54:d5:04:41:93:87:e6:12:71:0f:2e:96:c7:f8:17:
46:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:76:EE:5D:AA:4F:FF:90:A7:5C:2A:CE:52:92:0A:BC:42:65:86:35
X509v3 Authority Key Identifier:
keyid:CD:FC:BD:E6:32:D1:06:FA:AD:98:C2:C1:89:5A:87:7C:A6:01:52:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfy95jLRBvqtmMLBiVqHfKYBUho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/fe45cf-4ad2-41d9-bbca-203cfa238696/1/zfy95jLRBvqtmMLBiVqHfKYBUho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/fe45cf-4ad2-41d9-bbca-203cfa238696/1/zfy95jLRBvqtmMLBiVqHfKYBUho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:c8:b3:0d:be:5c:89:46:e1:ac:15:11:5c:6d:b1:6a:b5:37:
be:69:4d:31:e0:b4:1e:e3:84:a1:a5:15:f5:bf:fd:63:e8:40:
58:c1:50:9c:73:b7:8a:4a:c6:34:be:2e:e5:33:2a:57:40:1c:
fc:f2:8e:73:16:1a:d7:de:11:80:c2:44:4b:4a:5a:07:bb:5b:
2f:ca:dc:f8:3d:ae:5e:40:d9:57:c7:a5:a7:1b:e6:a3:32:59:
c2:26:a9:0f:81:bc:0a:2b:91:d5:b8:b8:d6:9a:e7:88:9b:7f:
d1:ea:08:de:85:87:69:1b:e9:c5:1a:d3:e5:56:8f:7d:b7:99:
25:c0:a9:62:53:9a:f4:9a:e1:ba:f4:9e:77:4a:9d:89:3d:38:
5a:aa:13:cc:dc:74:f2:d5:c4:ce:bd:08:fe:21:d9:30:5d:5c:
c6:e2:53:91:d2:7b:e9:26:3c:1d:9e:fa:05:0c:85:dc:7d:36:
60:7f:39:e0:d2:b0:50:f6:38:58:a7:4b:19:b3:95:bd:bc:69:
48:dd:00:3b:d5:11:cb:54:a1:35:c5:0a:b1:f5:b2:63:d6:a3:
eb:de:e2:d4:c5:eb:c3:54:ec:98:53:96:92:a0:a3:04:40:80:
24:c6:80:fa:de:3a:bd:e3:e0:6e:e2:88:40:82:9f:9c:67:15:
4a:cd:2d:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:25:19 2026 by rpki-client