Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/db8d38-077f-4d77-9383-dc781cc2a258/1/zI34gFQGDfaFu6lzkSPoNC1HnoQ.mft
File: zI34gFQGDfaFu6lzkSPoNC1HnoQ.mft (raw, json)
Hash identifier: p3VIr5iMvNgQyl4ECxlbJE75opAY5/ySpb2tUoFNed4=
Subject key identifier: 7D:AE:E9:61:18:A7:95:E6:D7:01:FB:F7:B9:C0:DC:A7:E3:26:AE:10
Authority key identifier: CC:8D:F8:80:54:06:0D:F6:85:BB:A9:73:91:23:E8:34:2D:47:9E:84
Certificate issuer: /CN=cc8df88054060df685bba9739123e8342d479e84
Certificate serial: 019F9391E12937C146CFB0F8DE83A368D9A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zI34gFQGDfaFu6lzkSPoNC1HnoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/db8d38-077f-4d77-9383-dc781cc2a258/1/zI34gFQGDfaFu6lzkSPoNC1HnoQ.mft
Manifest number: 1961
Signing time: Fri 24 Jul 2026 10:00:38 +0000
Manifest this update: Fri 24 Jul 2026 10:00:38 +0000
Manifest next update: Sat 25 Jul 2026 10:00:38 +0000
Files and hashes: 1: nWemIk_PUFibWyxsMCHuSPNqyxE.roa (hash: LfDaK0qO1xTJjSEUv9R58HxO4b8gyazqBrXpwSZbnWE=)
2: zI34gFQGDfaFu6lzkSPoNC1HnoQ.crl (hash: MHnkIOnatxjZUgRhHciDb+IepstlbDWbFk0wmTSAm3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/db8d38-077f-4d77-9383-dc781cc2a258/1/zI34gFQGDfaFu6lzkSPoNC1HnoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/db8d38-077f-4d77-9383-dc781cc2a258/1/zI34gFQGDfaFu6lzkSPoNC1HnoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/zI34gFQGDfaFu6lzkSPoNC1HnoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:91:e1:29:37:c1:46:cf:b0:f8:de:83:a3:68:d9:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc8df88054060df685bba9739123e8342d479e84
Validity
Not Before: Jul 24 10:00:38 2026 GMT
Not After : Jul 25 10:00:38 2026 GMT
Subject: CN=7daee96118a795e6d701fbf7b9c0dca7e326ae10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:e6:80:ba:cd:f8:67:1b:53:65:1e:91:76:69:
cb:28:1a:43:38:64:a1:2f:a1:3e:b5:3f:7e:51:cb:
7f:22:5d:6b:08:d7:fa:9a:77:cc:9b:0e:ba:ac:16:
97:8d:1c:f2:e7:25:23:61:64:4e:bc:77:35:d2:91:
b5:fd:30:d5:71:44:be:12:1f:8d:f7:37:b3:15:dd:
cf:14:4c:d9:0b:6d:2b:cb:11:6b:0e:2f:1c:bf:a1:
5f:27:c8:7b:41:c0:3b:2a:b6:5b:3f:f5:ca:5a:fd:
2a:f8:13:4f:8b:3e:1f:b3:c7:58:6b:c2:c3:a6:e5:
c3:73:a2:55:1a:d9:23:b8:3b:f2:08:a9:b8:24:36:
a3:03:d6:57:85:11:09:00:82:7d:54:04:44:dc:c0:
ba:e1:31:f5:9e:fe:de:df:b7:46:5a:5d:b8:59:9c:
fd:37:e5:98:ed:82:6b:9c:bc:1e:6b:c0:d4:81:d1:
99:b8:f7:2a:02:59:5b:70:fa:a3:7f:a7:c2:b9:dc:
f7:d9:0a:89:98:c8:75:73:8d:71:cf:9f:62:19:66:
51:4b:08:44:04:3f:dc:30:e7:37:95:24:eb:ac:22:
24:54:d6:47:24:dc:b7:7c:67:8e:0b:99:b8:77:07:
1b:cb:7c:bd:16:54:59:d4:6b:7c:3e:2e:4d:47:5b:
cf:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:AE:E9:61:18:A7:95:E6:D7:01:FB:F7:B9:C0:DC:A7:E3:26:AE:10
X509v3 Authority Key Identifier:
keyid:CC:8D:F8:80:54:06:0D:F6:85:BB:A9:73:91:23:E8:34:2D:47:9E:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zI34gFQGDfaFu6lzkSPoNC1HnoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/db8d38-077f-4d77-9383-dc781cc2a258/1/zI34gFQGDfaFu6lzkSPoNC1HnoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/db8d38-077f-4d77-9383-dc781cc2a258/1/zI34gFQGDfaFu6lzkSPoNC1HnoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:f7:2c:3c:99:4b:b2:6c:06:39:60:cd:45:ab:3c:f6:42:0b:
92:7f:dd:de:df:a3:1e:e1:2e:6a:bc:a5:8b:cc:91:fb:1a:11:
b8:74:69:3e:5e:90:71:09:80:c3:5e:2c:99:9b:70:c3:5f:e2:
75:a8:47:b9:21:e6:3f:3e:50:c3:eb:1f:6e:40:f5:a1:a8:c2:
ad:1f:83:74:e1:fc:00:56:5c:85:41:4b:95:40:f7:71:4f:9c:
cc:44:fc:a5:a0:a0:39:9e:2e:ef:86:61:61:50:c9:01:45:e9:
a3:70:fa:e3:9c:88:f8:bc:82:21:09:49:f4:f8:d1:6f:8f:2f:
05:77:78:5b:39:d6:31:5d:d9:3a:b8:ba:93:58:31:9e:30:74:
ba:ca:26:2f:1c:fc:30:38:9e:ac:4a:2c:de:67:d8:2a:89:0f:
d7:b6:bf:f2:4a:9e:9c:fe:78:af:80:1d:8b:37:ae:64:6d:bd:
30:d7:22:b0:0e:6c:d3:99:0c:db:43:6e:44:4f:ec:6a:7b:5e:
69:13:46:23:b7:1d:1e:19:e6:6b:80:10:94:cf:4d:80:82:3f:
40:fa:c2:59:0d:9e:8b:92:f4:61:d6:ad:2e:f6:34:c2:50:01:
87:fd:57:9a:39:ef:15:be:a6:64:b3:77:ab:ee:bb:ab:2f:89:
ee:5c:89:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:35:15 2026 by rpki-client