Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/ZD4bqRxWmoshptLWf1271sBOQ-o.mft
File: ZD4bqRxWmoshptLWf1271sBOQ-o.mft (raw, json)
Hash identifier: UHbkWcTJRMR2ffOTA6hxPrwMZg9QtV5iHiUWqPQ0TPM=
Subject key identifier: 28:9A:3D:54:24:41:DA:D4:E4:4E:CC:FD:07:97:16:9A:A1:8C:80:C8
Authority key identifier: 64:3E:1B:A9:1C:56:9A:8B:21:A6:D2:D6:7F:5D:BB:D6:C0:4E:43:EA
Certificate issuer: /CN=643e1ba91c569a8b21a6d2d67f5dbbd6c04e43ea
Certificate serial: 019F9248FEC243D76182086C09C9540F7F28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZD4bqRxWmoshptLWf1271sBOQ-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/ZD4bqRxWmoshptLWf1271sBOQ-o.mft
Manifest number: 19C9
Signing time: Fri 24 Jul 2026 04:01:24 +0000
Manifest this update: Fri 24 Jul 2026 04:01:24 +0000
Manifest next update: Sat 25 Jul 2026 04:01:24 +0000
Files and hashes: 1: 3s8sY8JfXcq5h0JX5tklV5kK-kI.roa (hash: tUMXR+PdDpzmT4OFEkUcYoWlIAGQobO28dDLQShQPJw=)
2: ATgciNvIucjKCFQUFyNe0yS56Xs.roa (hash: ODwExdkuk2O0WB+oRGE/a1ipu8Cu3cgAGkwUAaoVX9Y=)
3: OQzv-VnaVoUaemq98kXrP_sXKa8.roa (hash: 0UtFVm4divpIKSWLm6cbL2r77Cn14CFuHmjdZonPbwc=)
4: RS2ZY1uc0JYuhYWkx4aN_m6o7qE.roa (hash: ustjYTj3tB8+/KIrC0a07UkmqBeIt1gvoyIyFDQVlds=)
5: Wg4SVphoReQnCpUyJ5-oZULRakI.roa (hash: Q8EhoBGzMhLpl/1N6VdUdhxyINS1Dda6nBjz3JP3ehw=)
6: ZD4bqRxWmoshptLWf1271sBOQ-o.crl (hash: hTnHk4imDfb0YNpBd7ONmgWXHycW5fXlRNyJMST1DAM=)
7: brDP8rCtmy1_6zegBiE3p8TvEes.roa (hash: Z9tvowz9KVQdbieVlExnm4rsZGGsOyESicqYmRLZjd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/ZD4bqRxWmoshptLWf1271sBOQ-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/ZD4bqRxWmoshptLWf1271sBOQ-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZD4bqRxWmoshptLWf1271sBOQ-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:fe:c2:43:d7:61:82:08:6c:09:c9:54:0f:7f:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=643e1ba91c569a8b21a6d2d67f5dbbd6c04e43ea
Validity
Not Before: Jul 24 04:01:24 2026 GMT
Not After : Jul 25 04:01:24 2026 GMT
Subject: CN=289a3d542441dad4e44eccfd0797169aa18c80c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:b0:96:7a:78:e4:0e:ed:4c:64:27:62:a9:be:
ba:b7:f9:a4:40:2a:03:ec:0e:be:b0:7e:98:a4:53:
59:37:db:e3:d1:3d:b9:b6:13:d2:cd:f8:bc:88:bd:
6a:ea:7c:da:b3:44:1b:20:26:a6:12:9c:39:17:fc:
ed:14:b0:38:fe:17:56:3c:8c:a6:1b:1a:5a:0a:cc:
1c:a8:17:28:37:65:dd:9c:bf:3f:7d:12:9e:e3:64:
f6:9b:cd:5e:2c:07:a5:3b:ae:e6:ef:a9:f5:b4:35:
2f:e9:a2:14:19:9e:64:67:86:a9:2f:1a:bc:75:09:
32:57:31:8b:00:c9:a8:65:a6:72:9d:99:7f:df:bf:
e3:cf:f8:91:e5:03:6b:2a:a1:94:9e:56:3b:bd:84:
c8:3b:e4:27:ab:82:72:12:51:98:03:ed:d0:d5:22:
60:a5:97:a7:ff:d7:c5:5f:33:65:70:39:7c:f0:fd:
f2:a6:9a:26:2f:a1:ae:c7:ab:0d:73:ac:bf:f0:fa:
c3:7f:77:1e:b1:79:c5:f8:49:a0:5d:08:7f:02:d5:
34:fd:1e:72:f5:cb:8a:d2:7c:7e:23:7b:80:87:2e:
45:b8:28:1b:9f:04:ab:d2:5a:41:e2:a9:1a:03:c4:
9b:7d:59:14:37:ec:e0:26:cb:92:ab:38:f6:cd:37:
a5:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:9A:3D:54:24:41:DA:D4:E4:4E:CC:FD:07:97:16:9A:A1:8C:80:C8
X509v3 Authority Key Identifier:
keyid:64:3E:1B:A9:1C:56:9A:8B:21:A6:D2:D6:7F:5D:BB:D6:C0:4E:43:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZD4bqRxWmoshptLWf1271sBOQ-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/ZD4bqRxWmoshptLWf1271sBOQ-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/ZD4bqRxWmoshptLWf1271sBOQ-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:01:9d:59:c0:55:a4:f6:1b:ed:6d:9a:22:64:ca:c1:76:ec:
72:95:f5:00:0f:fe:68:ba:72:42:28:1c:87:1e:08:1c:0b:98:
45:3b:1a:2c:c8:72:de:2f:93:ff:d4:d4:93:1c:a2:6c:6d:4d:
c6:bf:6d:75:7b:ed:fa:ae:57:10:ed:e7:52:ee:cc:f1:da:f3:
33:ac:06:a9:63:61:4c:5c:77:f6:d1:83:6b:ef:5c:b1:4a:5a:
94:31:87:e1:17:84:7b:d1:d1:b6:3c:57:f5:15:da:fe:23:bb:
57:ad:c1:56:d8:36:70:2e:55:47:b5:7b:d5:38:bf:75:ca:6d:
51:f0:dd:00:aa:ce:16:b1:1e:c7:e1:7c:de:eb:ac:3c:44:0e:
73:52:03:5b:53:c8:20:b0:ba:15:3f:d5:84:91:50:54:1b:0c:
fe:f9:86:ba:63:87:4a:14:2d:94:ab:e2:8a:19:92:17:8d:da:
ea:7a:cd:2b:f3:de:e7:97:24:b0:fe:a8:2a:c7:86:b0:82:e9:
b0:a6:c8:12:a5:ea:d0:07:60:98:e8:04:91:38:dd:62:26:49:
80:a3:4e:ad:8f:10:0f:43:d0:cd:e2:c7:8f:39:19:7b:81:e4:
1f:6c:12:ce:36:76:0f:97:ab:1e:a2:6a:77:a2:62:f1:47:ef:
b5:ad:57:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:08:14 2026 by rpki-client