Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/Z1g3tKd23KNiTol_HHTm4n0fwVQ.mft
File: Z1g3tKd23KNiTol_HHTm4n0fwVQ.mft (raw, json)
Hash identifier: HG06I6DSsGs1O2Zprg0YVA8B7tRaMX304avTq3Y9HkE=
Subject key identifier: 8B:60:C2:AE:9F:7F:66:89:54:95:13:5A:AB:7A:3A:C0:A5:CB:04:26
Authority key identifier: 67:58:37:B4:A7:76:DC:A3:62:4E:89:7F:1C:74:E6:E2:7D:1F:C1:54
Certificate issuer: /CN=675837b4a776dca3624e897f1c74e6e27d1fc154
Certificate serial: 019F8F7F0C915BD6875E7C44383B804E09A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z1g3tKd23KNiTol_HHTm4n0fwVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/Z1g3tKd23KNiTol_HHTm4n0fwVQ.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 15:01:35 +0000
Manifest this update: Thu 23 Jul 2026 15:01:35 +0000
Manifest next update: Fri 24 Jul 2026 15:01:35 +0000
Files and hashes: 1: Z1g3tKd23KNiTol_HHTm4n0fwVQ.crl (hash: gBc27omJnuswSoYX+uvHLX/HwUo6ofxWpyKGdq1Cpvc=)
2: _99RUrGdci44Oq4_4xcT9uSL-jY.roa (hash: YvmqrGHSZPjUN26szsH0GLTZcYZv0BvXR40esmV5asY=)
3: h658PKckKesTLernUES_denhymQ.roa (hash: TondVlbf8pLFUhLFF4XczbxXR4UNpHDTwhjMbduJWEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/Z1g3tKd23KNiTol_HHTm4n0fwVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/Z1g3tKd23KNiTol_HHTm4n0fwVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z1g3tKd23KNiTol_HHTm4n0fwVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7f:0c:91:5b:d6:87:5e:7c:44:38:3b:80:4e:09:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=675837b4a776dca3624e897f1c74e6e27d1fc154
Validity
Not Before: Jul 23 15:01:35 2026 GMT
Not After : Jul 24 15:01:35 2026 GMT
Subject: CN=8b60c2ae9f7f66895495135aab7a3ac0a5cb0426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8b:28:df:f8:2a:f4:d2:b5:38:7f:ea:c0:53:
00:eb:c6:1a:ec:38:1e:49:b4:7b:51:97:70:95:af:
4d:4c:4d:79:60:ad:34:70:e9:5c:8e:21:37:4b:26:
f0:37:6b:25:5c:71:8e:14:dd:19:8d:8f:5e:a8:b2:
f7:7a:9b:82:b5:8f:b7:89:7a:0f:b3:82:56:68:42:
d7:c5:52:99:c8:3a:a4:d8:f9:50:7b:00:c6:fd:9c:
be:a1:5e:0d:42:15:5c:d7:ef:e7:0e:79:8b:49:fe:
21:52:4e:4d:33:d9:71:21:5d:88:c5:fb:30:ea:79:
37:29:f0:e8:1d:42:52:51:d6:d6:a5:83:b4:9f:0f:
8f:5a:67:ee:ec:7a:46:af:64:16:fc:24:89:a8:01:
0c:09:16:31:4b:1a:e8:9a:7f:7c:65:84:56:d1:3a:
f3:62:a0:22:3b:55:a8:82:cb:52:f7:d9:b8:1a:b5:
33:1a:d6:f9:d4:4e:f7:67:08:78:fc:c9:98:d2:0c:
80:4f:dd:64:8a:06:b4:10:eb:cc:94:70:60:78:6d:
ac:8b:a8:11:11:41:04:ab:f2:2c:70:ee:f7:84:ca:
b6:d6:b0:1a:71:f1:50:74:2d:2f:33:b6:b0:80:76:
42:52:33:31:ce:42:33:fe:4a:7d:89:05:89:b5:b0:
44:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:60:C2:AE:9F:7F:66:89:54:95:13:5A:AB:7A:3A:C0:A5:CB:04:26
X509v3 Authority Key Identifier:
keyid:67:58:37:B4:A7:76:DC:A3:62:4E:89:7F:1C:74:E6:E2:7D:1F:C1:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z1g3tKd23KNiTol_HHTm4n0fwVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/Z1g3tKd23KNiTol_HHTm4n0fwVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/Z1g3tKd23KNiTol_HHTm4n0fwVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:ee:1b:9d:8b:66:15:e0:3e:48:57:ec:9e:79:d6:fc:47:b4:
f3:71:e8:49:b9:fc:43:d4:ea:2e:20:a4:1b:03:ec:20:46:d7:
58:20:85:5e:04:ce:4f:aa:30:67:ed:0a:12:ad:ce:84:d2:a4:
8d:c3:66:3f:7f:29:1a:b5:ee:60:c0:8b:68:86:e4:52:6f:33:
d7:ea:df:a8:3d:57:a9:3e:1c:01:ad:44:4a:3d:79:73:77:a9:
92:0e:f4:b6:e3:3e:de:62:61:77:09:52:51:ee:66:a5:80:b6:
54:f9:fa:23:78:a0:b4:38:49:2a:2b:46:ef:d0:14:ff:ce:df:
97:ed:ea:e0:05:88:df:fb:6e:6d:6d:15:c7:d3:73:5a:f6:1f:
32:c8:a1:71:50:74:92:2e:7b:0c:e7:d2:ee:43:30:2c:e9:bc:
e0:0e:e4:6f:d2:4e:89:11:1f:d4:a1:72:7a:42:96:b4:fc:73:
c2:10:f8:e0:55:f8:26:16:e2:1b:a9:25:fc:8b:59:46:80:08:
9e:24:89:12:c9:7c:28:f3:80:f2:7b:7c:41:ad:2d:a5:49:60:
57:70:d5:38:7f:0f:d5:de:84:a8:27:db:10:2b:5e:16:15:e5:
44:55:28:4b:c0:57:cd:31:b8:08:20:be:aa:f9:03:bc:d2:4e:
55:e4:74:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:45:54 2026 by rpki-client