Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/9fd384-a8c0-427f-962d-c4502da869bb/1/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.mft
File: zKw3L3qbgXHcv8EWDKoiyP3Gi3s.mft (raw, json)
Hash identifier: 0ZkJgtS/nstcpB5zLEaAgsaMxvqHq3Z1TsxE37bY1is=
Subject key identifier: BF:BB:39:E4:C5:31:FB:7D:C4:80:AB:8A:4A:D4:18:91:A3:B5:15:9A
Authority key identifier: CC:AC:37:2F:7A:9B:81:71:DC:BF:C1:16:0C:AA:22:C8:FD:C6:8B:7B
Certificate issuer: /CN=ccac372f7a9b8171dcbfc1160caa22c8fdc68b7b
Certificate serial: 019F9436EA89014BB9980D7E97C507ACF9E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/9fd384-a8c0-427f-962d-c4502da869bb/1/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.mft
Manifest number: 115D
Signing time: Fri 24 Jul 2026 13:00:54 +0000
Manifest this update: Fri 24 Jul 2026 13:00:54 +0000
Manifest next update: Sat 25 Jul 2026 13:00:54 +0000
Files and hashes: 1: iGJ44E91_fnhiJC0QtPIqCqxhz8.asa (hash: LlYwU6qiNvignry/zacR14K4kG0NVC/S0sJ/6MtD8rQ=)
2: zKw3L3qbgXHcv8EWDKoiyP3Gi3s.crl (hash: xss+F+eZoIK1RW1wRcHeVoEbAd8oxI6DpCZmlVpPAsA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/9fd384-a8c0-427f-962d-c4502da869bb/1/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/9fd384-a8c0-427f-962d-c4502da869bb/1/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 13:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:36:ea:89:01:4b:b9:98:0d:7e:97:c5:07:ac:f9:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccac372f7a9b8171dcbfc1160caa22c8fdc68b7b
Validity
Not Before: Jul 24 13:00:54 2026 GMT
Not After : Jul 25 13:00:54 2026 GMT
Subject: CN=bfbb39e4c531fb7dc480ab8a4ad41891a3b5159a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e6:07:57:39:d1:92:5b:60:7c:9c:b6:71:af:
34:dc:3e:07:ab:40:7b:05:a0:75:01:a9:2b:f7:e0:
9e:80:cd:7b:7c:2a:0f:ef:c9:db:0d:4f:6b:40:f9:
b2:be:20:26:e6:85:83:fe:6e:ff:b8:33:1c:f0:cf:
42:43:6b:4d:79:23:bd:49:11:94:40:eb:e5:0b:48:
3a:7e:4d:b3:52:0b:65:ac:c4:c8:c9:44:da:d0:f4:
d6:97:26:20:24:e0:f3:72:7a:bc:84:f6:78:7a:70:
7c:3e:03:a2:32:95:70:2d:0d:0b:24:1c:65:7c:8b:
7a:62:cc:84:f8:f6:01:97:7f:34:d3:9f:02:97:43:
cd:bc:52:23:bb:94:4e:af:4f:2f:b8:f9:26:0e:4f:
71:18:e4:1e:1e:fc:df:4f:49:24:89:ea:87:04:21:
3c:1d:9d:64:15:da:01:a2:fe:02:c0:ae:dc:c1:a4:
eb:f5:95:f1:ce:9f:0c:cc:0b:b2:49:80:64:25:f3:
7d:1a:03:8d:22:39:27:e7:5d:2f:36:7c:10:fa:89:
65:08:51:37:17:c5:92:36:3e:e6:d4:0d:4f:0d:d4:
77:e8:69:d9:78:92:f8:df:9d:77:9d:82:56:53:42:
37:ba:2f:c4:85:64:6d:e1:fe:7a:36:d2:d5:d1:73:
4f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:BB:39:E4:C5:31:FB:7D:C4:80:AB:8A:4A:D4:18:91:A3:B5:15:9A
X509v3 Authority Key Identifier:
keyid:CC:AC:37:2F:7A:9B:81:71:DC:BF:C1:16:0C:AA:22:C8:FD:C6:8B:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/9fd384-a8c0-427f-962d-c4502da869bb/1/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/9fd384-a8c0-427f-962d-c4502da869bb/1/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:b7:83:28:b1:b8:e0:ba:cf:6d:2d:23:60:6b:87:d4:6f:14:
f8:6b:4e:cd:03:dc:fd:a4:33:34:22:a2:26:e6:31:d5:e1:33:
43:0b:d8:7a:a3:38:50:4a:3e:2f:5e:79:99:41:99:f7:1e:14:
c4:fe:03:d8:88:94:64:d6:41:1f:85:0d:ed:27:97:01:c5:d8:
dc:6a:6f:24:f7:2d:ee:c9:8e:3c:02:ea:05:8e:f2:11:5e:15:
42:02:7d:25:de:53:d1:ff:03:a6:0a:22:60:26:4f:fc:b9:ea:
ab:29:06:e7:b4:72:4c:55:d2:f0:37:6b:33:94:81:6a:e6:f7:
0a:8a:7e:e9:4c:1a:5d:3a:b1:3a:e0:29:6b:d5:23:62:aa:ea:
37:fa:aa:3f:ab:e7:ee:d0:89:39:5f:90:46:d5:33:7c:1b:4a:
bf:bf:8b:59:99:ee:cb:c5:b8:53:96:2b:bf:42:22:d5:08:1c:
fb:a5:28:17:6b:1f:d3:bc:42:44:b9:c0:77:07:29:f9:01:38:
c7:99:c7:91:49:25:e0:30:72:04:9c:fe:23:f1:d0:41:80:aa:
ea:ae:67:00:f8:a5:09:21:d8:a8:33:03:e5:84:58:f0:86:47:
24:57:65:2d:09:8e:ab:92:e1:6d:35:48:dc:9e:71:db:43:28:
2d:73:c1:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:26:49 2026 by rpki-client