Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/ZcXa1UTfSXFghevoDb6C62iiCck.mft
File: ZcXa1UTfSXFghevoDb6C62iiCck.mft (raw, json)
Hash identifier: UjlNfb1N5wcIFo+TCw4fN4yPSotS90um2DQGXxBCBgM=
Subject key identifier: 50:95:14:90:26:3F:39:30:2B:A5:5B:58:31:BE:3B:32:C8:10:D3:94
Authority key identifier: 65:C5:DA:D5:44:DF:49:71:60:85:EB:E8:0D:BE:82:EB:68:A2:09:C9
Certificate issuer: /CN=65c5dad544df49716085ebe80dbe82eb68a209c9
Certificate serial: 019F935C46E9D1C74F92D5590E85A5BEEC06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZcXa1UTfSXFghevoDb6C62iiCck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/ZcXa1UTfSXFghevoDb6C62iiCck.mft
Manifest number: 11E4
Signing time: Fri 24 Jul 2026 09:02:05 +0000
Manifest this update: Fri 24 Jul 2026 09:02:05 +0000
Manifest next update: Sat 25 Jul 2026 09:02:05 +0000
Files and hashes: 1: SLxH_u9zeCm0sBzFGpjFyprUq1k.roa (hash: YHV8hHdigULABzb/Rh8IYMXXingzJr+tiIat3maLhrg=)
2: ZcXa1UTfSXFghevoDb6C62iiCck.crl (hash: xq21Jk7nk60PBVZxi8//LDOOmKGsyztIwocfV/ycAZc=)
3: qWNtslR5VeuzsdBANHUyp5ZAUOU.roa (hash: rgvLkD6mm+PX1WOuRNNO3Ee9uRmn0UljGpNc3jlNEWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/ZcXa1UTfSXFghevoDb6C62iiCck.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/ZcXa1UTfSXFghevoDb6C62iiCck.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZcXa1UTfSXFghevoDb6C62iiCck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5c:46:e9:d1:c7:4f:92:d5:59:0e:85:a5:be:ec:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65c5dad544df49716085ebe80dbe82eb68a209c9
Validity
Not Before: Jul 24 09:02:05 2026 GMT
Not After : Jul 25 09:02:05 2026 GMT
Subject: CN=50951490263f39302ba55b5831be3b32c810d394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d4:cd:88:1d:4a:0f:9f:95:62:fc:1f:a0:64:
a6:a5:dd:54:27:e3:c8:a7:c3:d4:be:7b:53:9f:92:
10:b1:ba:59:1d:dd:dd:cf:d2:2a:a5:fc:e8:41:0a:
04:4c:95:1c:3d:de:73:b7:7d:09:ee:b0:08:a7:97:
8b:61:99:ba:e9:f5:32:cb:11:62:06:54:d4:ff:55:
67:e2:75:dd:3c:3d:b1:6b:3c:54:79:d5:3c:0d:55:
7e:e2:72:8a:65:c0:6c:0b:32:85:b6:c5:79:eb:fe:
dc:06:19:5d:47:f0:55:4f:be:00:ec:38:85:c8:2c:
64:68:d6:2e:a4:d6:b1:16:37:73:38:dc:12:9d:b4:
18:c0:0c:0e:37:3a:44:62:55:ee:c0:fb:a8:64:42:
3e:bb:7d:73:2f:de:04:58:36:6d:bc:8e:46:20:80:
90:6e:98:2a:d4:d7:6b:b4:83:cc:c9:9b:a7:e7:c9:
ff:b0:ea:2c:9f:7f:15:63:0b:8c:04:c8:90:22:df:
26:29:9f:e2:3f:92:27:17:43:d7:86:76:13:e7:51:
af:b9:ab:6c:b3:55:5e:8b:00:39:45:27:2e:5b:5c:
19:92:36:42:65:c6:28:7c:12:11:24:98:51:2e:44:
e4:df:6b:05:fa:26:c8:ff:72:1b:9e:a1:bc:f5:a5:
0c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:95:14:90:26:3F:39:30:2B:A5:5B:58:31:BE:3B:32:C8:10:D3:94
X509v3 Authority Key Identifier:
keyid:65:C5:DA:D5:44:DF:49:71:60:85:EB:E8:0D:BE:82:EB:68:A2:09:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZcXa1UTfSXFghevoDb6C62iiCck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/ZcXa1UTfSXFghevoDb6C62iiCck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/ZcXa1UTfSXFghevoDb6C62iiCck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:9b:52:72:21:b1:3a:78:92:c9:00:7d:ff:45:71:86:17:ca:
8a:29:2c:f5:9c:61:03:80:af:7a:d4:fd:bd:8a:9b:44:22:ba:
ec:6d:ce:bd:f3:00:0c:21:fd:db:67:49:02:2b:79:62:80:2a:
53:7f:7b:97:0c:51:5f:84:e9:18:db:c1:2d:99:54:a4:7a:f7:
5b:31:4c:ff:55:bc:ba:7c:e0:88:f3:7d:a8:0b:3e:34:df:1e:
a7:d7:5c:98:27:5d:24:48:fa:be:18:56:a9:5e:93:5e:89:4e:
f5:d7:6c:df:03:c2:8e:50:01:59:95:49:05:9d:1c:4d:82:0a:
70:38:d6:8c:c6:fd:cd:a6:fa:21:65:a8:88:db:db:1a:d5:d2:
5c:be:c6:3b:95:f6:d4:56:44:4d:7d:70:40:81:63:7a:4a:46:
2e:8c:16:7b:85:0f:79:5b:28:b5:27:d2:71:77:41:61:44:fd:
a9:a2:d9:46:0e:a5:37:ee:d3:cb:81:83:19:c4:79:b5:1f:47:
0e:a0:d0:0c:60:a9:9a:da:da:b5:da:0f:6f:51:9e:d7:da:9a:
70:4a:4b:81:49:ca:9c:38:54:54:ae:28:8f:fa:7b:bc:07:b5:
36:d8:c8:4a:28:41:d6:6a:f8:27:0e:c6:48:57:87:af:a9:78:
30:62:9f:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:50:56 2026 by rpki-client