Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/zGUyZJpq70cUhBucj1RmDYibBik.mft
File: zGUyZJpq70cUhBucj1RmDYibBik.mft (raw, json)
Hash identifier: lTTdT5SgEpgHkY3nxiA90gUoHBn+Rzn94Sz0kvEGijw=
Subject key identifier: 2F:45:51:5F:E6:F6:75:AC:A9:EE:69:FA:C6:29:E6:B4:64:11:E3:DF
Authority key identifier: CC:65:32:64:9A:6A:EF:47:14:84:1B:9C:8F:54:66:0D:88:9B:06:29
Certificate issuer: /CN=cc6532649a6aef4714841b9c8f54660d889b0629
Certificate serial: 019F90FF7BF925062854EDBE2BFF5A5510CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zGUyZJpq70cUhBucj1RmDYibBik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/zGUyZJpq70cUhBucj1RmDYibBik.mft
Manifest number: 0F74
Signing time: Thu 23 Jul 2026 22:01:30 +0000
Manifest this update: Thu 23 Jul 2026 22:01:30 +0000
Manifest next update: Fri 24 Jul 2026 22:01:30 +0000
Files and hashes: 1: QOvuUL6JmFjMR4OHkrweykbMl00.roa (hash: APm5d1yLpYTNVNqcU55k9Dr295k8B4YAIygsX75/UWA=)
2: TF8KSi-DuhED0p9n9N5dVWabzRk.roa (hash: 39Z2dsiv//rq6lSkgmQdDk1aolP4R2gp4zSwQSQYE8w=)
3: zGUyZJpq70cUhBucj1RmDYibBik.crl (hash: L/ifYy8U81akSjB8fkVF19Bs9mu0syyHHPK3Es9/gH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/zGUyZJpq70cUhBucj1RmDYibBik.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/zGUyZJpq70cUhBucj1RmDYibBik.mft
rsync://rpki.ripe.net/repository/DEFAULT/zGUyZJpq70cUhBucj1RmDYibBik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:ff:7b:f9:25:06:28:54:ed:be:2b:ff:5a:55:10:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc6532649a6aef4714841b9c8f54660d889b0629
Validity
Not Before: Jul 23 22:01:30 2026 GMT
Not After : Jul 24 22:01:30 2026 GMT
Subject: CN=2f45515fe6f675aca9ee69fac629e6b46411e3df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:36:c2:63:33:aa:10:b5:56:75:a6:74:4c:28:
6a:bf:cf:6d:08:70:55:1a:d1:23:72:27:77:2f:39:
f9:0e:a9:78:bb:95:4c:9e:ad:64:55:6b:68:d3:bd:
bd:7f:c6:c9:aa:fd:9d:54:06:d4:49:48:a5:9e:9d:
5b:ae:7d:84:fe:3c:1f:46:47:a7:de:5e:89:fb:5c:
80:c9:fd:04:46:a0:87:13:de:2e:20:27:11:79:9e:
b0:43:d3:41:46:15:1e:87:14:12:35:1e:5d:b1:a0:
65:fd:7c:ac:4b:72:24:35:72:6d:7b:8e:64:2c:ee:
c7:5d:ff:27:5a:64:a3:93:71:ef:7f:01:5e:ef:4e:
88:b9:86:98:95:56:03:f4:0b:1f:85:c4:2a:7b:c0:
40:43:eb:31:87:18:a9:06:9c:30:1c:9b:f3:fa:8a:
71:e3:11:ef:14:b2:d2:a3:f1:96:28:07:77:b2:da:
af:28:55:0e:ea:f4:6b:86:f4:1d:c6:b3:d3:03:65:
75:59:e0:6e:bc:67:0f:1f:81:b9:0d:2f:c8:cd:c1:
d6:88:f3:de:67:c8:cf:6e:65:8b:61:42:ab:75:45:
d3:65:f7:ae:db:34:10:82:05:6e:26:64:f9:3f:80:
7a:8e:3f:fa:f2:e9:e0:c4:14:2a:16:26:c5:74:a8:
47:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:45:51:5F:E6:F6:75:AC:A9:EE:69:FA:C6:29:E6:B4:64:11:E3:DF
X509v3 Authority Key Identifier:
keyid:CC:65:32:64:9A:6A:EF:47:14:84:1B:9C:8F:54:66:0D:88:9B:06:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zGUyZJpq70cUhBucj1RmDYibBik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/zGUyZJpq70cUhBucj1RmDYibBik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/zGUyZJpq70cUhBucj1RmDYibBik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:05:8f:92:2f:29:d8:78:0d:7f:85:b7:16:d3:d8:23:b8:60:
cf:28:6a:82:53:28:96:2d:26:98:ca:71:f4:61:cc:ba:64:3b:
87:fe:5b:db:f6:e0:3a:28:4b:b8:0b:9b:8a:9d:96:a1:ac:62:
ce:3b:c8:06:38:01:4f:b9:d3:db:f6:fe:6c:b1:83:d3:4d:9c:
9b:26:c4:dc:5a:d4:1f:5b:c0:9c:8c:2f:cb:73:62:62:50:be:
89:4c:ba:2a:aa:c0:e2:02:52:ed:6a:03:da:f5:12:81:39:df:
4f:bb:0a:6e:49:32:e9:07:6c:5e:37:04:1a:7b:7a:68:7d:c2:
f5:f4:5f:40:dd:d2:e1:d5:dd:b0:eb:da:6d:c9:3e:9b:90:cc:
0f:f7:d4:9b:80:51:98:39:19:7b:15:ad:02:34:94:56:31:08:
1d:ff:5f:a7:cc:f4:bd:70:fa:d7:67:fd:5b:f8:2f:da:83:86:
cd:ad:fd:c1:7f:1f:55:68:a0:13:00:c9:13:70:5b:23:7a:4a:
40:27:84:86:8f:3b:c5:b8:dc:46:1d:03:40:7a:90:94:c8:9b:
f9:a7:44:4f:da:83:6f:93:64:bf:fc:90:df:e7:e6:ed:36:0b:
37:1a:e0:a2:4d:ee:16:30:5b:97:83:28:17:57:7a:71:fc:9c:
0f:a0:42:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:51:43 2026 by rpki-client