Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/c7cbb1-0dcd-42f4-bf63-3df471c01c9e/1/_zKbmJBKLs6EguDyWPXDT-rVjOI.mft
File: _zKbmJBKLs6EguDyWPXDT-rVjOI.mft (raw, json)
Hash identifier: r0U8TQufPgqF/52+u3N9Jf+D46PF5JKJZBmKQNTi4ck=
Subject key identifier: CE:42:0F:2F:18:E7:B2:2D:0F:F6:F2:1A:65:97:00:19:C7:5D:6A:CD
Authority key identifier: FF:32:9B:98:90:4A:2E:CE:84:82:E0:F2:58:F5:C3:4F:EA:D5:8C:E2
Certificate issuer: /CN=ff329b98904a2ece8482e0f258f5c34fead58ce2
Certificate serial: 019F92112E0461EC57F8CF77F5E62C8A1D3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zKbmJBKLs6EguDyWPXDT-rVjOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/c7cbb1-0dcd-42f4-bf63-3df471c01c9e/1/_zKbmJBKLs6EguDyWPXDT-rVjOI.mft
Manifest number: 1959
Signing time: Fri 24 Jul 2026 03:00:27 +0000
Manifest this update: Fri 24 Jul 2026 03:00:27 +0000
Manifest next update: Sat 25 Jul 2026 03:00:27 +0000
Files and hashes: 1: _JnhSJS19JlHl9jJTexqDWYqi9A.roa (hash: SSBeQuTX3gSz2r22CXEew81x4g/DT16JBva2SQJoq3g=)
2: _zKbmJBKLs6EguDyWPXDT-rVjOI.crl (hash: +0nbACUiDFw0bDNii/oDJh1i3IQ6LwwnPh2JnRVg+RY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/c7cbb1-0dcd-42f4-bf63-3df471c01c9e/1/_zKbmJBKLs6EguDyWPXDT-rVjOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/c7cbb1-0dcd-42f4-bf63-3df471c01c9e/1/_zKbmJBKLs6EguDyWPXDT-rVjOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_zKbmJBKLs6EguDyWPXDT-rVjOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 03:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:2e:04:61:ec:57:f8:cf:77:f5:e6:2c:8a:1d:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff329b98904a2ece8482e0f258f5c34fead58ce2
Validity
Not Before: Jul 24 03:00:27 2026 GMT
Not After : Jul 25 03:00:27 2026 GMT
Subject: CN=ce420f2f18e7b22d0ff6f21a65970019c75d6acd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:5c:d8:6e:04:0f:89:e8:cb:27:52:5f:a5:95:
aa:9c:20:64:16:5f:d3:29:66:58:36:30:c0:55:82:
b8:70:1a:2e:97:98:5a:4d:b0:d7:f1:75:88:7a:58:
da:32:6e:0e:b1:9f:e7:fd:2d:9a:a8:d1:e7:3b:09:
d0:e8:e4:ff:c3:e7:b1:c3:6b:a0:58:e7:ab:4c:a5:
89:31:00:40:c4:48:08:ae:87:fc:72:89:fc:db:b8:
7b:90:76:27:0c:dd:88:71:bb:69:30:cc:17:4d:71:
50:dd:30:76:72:d2:77:df:53:7a:38:59:1a:31:74:
e3:bd:ca:fd:ac:5f:a6:22:7b:04:73:eb:dd:11:25:
2c:f7:86:9a:39:42:28:ab:52:f9:01:c9:8e:59:af:
5e:af:3d:6b:81:a5:38:34:2a:55:5a:60:1f:4a:fb:
84:f4:c7:17:d7:e5:95:e3:72:39:94:e4:48:88:1a:
4a:af:12:51:9d:19:4f:90:20:30:e6:63:43:ae:de:
6d:57:0e:99:09:d5:c3:2e:ee:ed:05:32:31:a7:c6:
31:fd:51:b7:5b:78:75:97:d4:f3:92:a4:dd:25:6c:
27:09:6b:38:0b:68:b9:0f:eb:76:c3:53:f6:45:95:
cf:9b:e7:8a:0b:79:2d:84:dc:fe:d8:66:0e:46:f1:
2b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:42:0F:2F:18:E7:B2:2D:0F:F6:F2:1A:65:97:00:19:C7:5D:6A:CD
X509v3 Authority Key Identifier:
keyid:FF:32:9B:98:90:4A:2E:CE:84:82:E0:F2:58:F5:C3:4F:EA:D5:8C:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zKbmJBKLs6EguDyWPXDT-rVjOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/c7cbb1-0dcd-42f4-bf63-3df471c01c9e/1/_zKbmJBKLs6EguDyWPXDT-rVjOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/c7cbb1-0dcd-42f4-bf63-3df471c01c9e/1/_zKbmJBKLs6EguDyWPXDT-rVjOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:d0:da:5d:4a:6f:10:92:fb:48:8a:c4:1c:3c:1f:be:43:14:
c7:37:ef:00:1d:f1:88:ee:ab:ac:b2:8a:d1:6e:c1:2b:a4:89:
e9:29:88:cf:f1:5c:06:78:c0:fc:58:b2:70:c2:86:8b:89:04:
09:54:42:b5:5a:6b:d3:4d:74:57:b4:9e:1a:c6:4b:1a:46:c7:
f0:17:44:68:a3:97:cf:97:ec:12:e5:b0:20:99:62:65:13:94:
c2:73:9c:1d:0b:53:17:f7:0b:ea:18:da:a6:ef:b4:89:5f:40:
7d:64:79:c0:c0:53:55:66:e5:3b:21:26:e1:31:ce:89:75:ec:
fa:2c:5a:e3:14:7d:d4:c2:b3:64:79:81:c7:d3:c7:83:88:85:
fc:7e:ff:07:ff:d7:64:8f:e4:46:0a:8b:93:64:53:11:7a:00:
d0:da:57:0d:1a:f9:ab:f7:e4:f5:ca:ee:51:be:f4:01:73:21:
54:7e:3c:7c:dc:10:31:33:ff:83:39:b2:cb:d3:be:1a:9f:27:
6a:b4:85:29:e5:1f:48:4c:64:4d:3d:aa:dc:40:a0:da:42:fb:
55:18:da:3e:85:8a:98:6a:b9:15:4d:86:ca:57:a0:d5:2a:9e:
82:99:5d:b8:d7:df:8a:0d:89:e3:1c:f0:56:ea:76:7e:0e:d3:
91:f7:79:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:50:30 2026 by rpki-client