Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/8e23e5-db28-45ed-b67f-2add5e797c75/1/zdpbTOlfoL32BUFp53rvyCZd28Q.mft
File: zdpbTOlfoL32BUFp53rvyCZd28Q.mft (raw, json)
Hash identifier: oF+WnBcTNJiOP36wqi8zKRuV6vxfycrvNs34rE9GT/k=
Subject key identifier: 74:44:F4:2F:6A:9A:29:39:0B:E3:F9:39:B0:68:F9:BA:0C:28:7B:B7
Authority key identifier: CD:DA:5B:4C:E9:5F:A0:BD:F6:05:41:69:E7:7A:EF:C8:26:5D:DB:C4
Certificate issuer: /CN=cdda5b4ce95fa0bdf6054169e77aefc8265ddbc4
Certificate serial: 019F93241D605C7A9760BFBD183EE5D600B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zdpbTOlfoL32BUFp53rvyCZd28Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/8e23e5-db28-45ed-b67f-2add5e797c75/1/zdpbTOlfoL32BUFp53rvyCZd28Q.mft
Manifest number: 195A
Signing time: Fri 24 Jul 2026 08:00:45 +0000
Manifest this update: Fri 24 Jul 2026 08:00:45 +0000
Manifest next update: Sat 25 Jul 2026 08:00:45 +0000
Files and hashes: 1: _8ZFO9ocBpb_Ph-40yN6ACd4c-s.roa (hash: nv3UD4Bh28t9KPR31Vxom/hj2bFKQ3slvDA/BYva5PI=)
2: zdpbTOlfoL32BUFp53rvyCZd28Q.crl (hash: r2KQxEXW/3/UbxNxamejY1KJ3RePaNb9z633biax8s8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/8e23e5-db28-45ed-b67f-2add5e797c75/1/zdpbTOlfoL32BUFp53rvyCZd28Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/8e23e5-db28-45ed-b67f-2add5e797c75/1/zdpbTOlfoL32BUFp53rvyCZd28Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/zdpbTOlfoL32BUFp53rvyCZd28Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:24:1d:60:5c:7a:97:60:bf:bd:18:3e:e5:d6:00:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdda5b4ce95fa0bdf6054169e77aefc8265ddbc4
Validity
Not Before: Jul 24 08:00:45 2026 GMT
Not After : Jul 25 08:00:45 2026 GMT
Subject: CN=7444f42f6a9a29390be3f939b068f9ba0c287bb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:00:e3:18:cb:17:f4:f6:3c:9e:b7:47:9a:47:
c1:8f:bc:13:5c:1c:94:64:cb:40:b6:95:ee:30:8b:
40:8d:a4:0e:87:56:b9:11:3a:20:43:51:93:c9:aa:
0a:86:74:32:b3:93:93:34:86:9c:8a:a1:f3:2b:1a:
23:a9:bf:f2:b5:2c:4b:e7:05:7e:47:57:4c:e4:2c:
ea:72:59:37:e4:6d:bd:f2:9b:b3:bc:f7:dc:2d:70:
ff:f7:05:36:88:44:cf:10:c9:16:52:22:c8:fb:0d:
f7:a3:e2:d1:1b:6f:9e:73:be:0b:8b:f4:0a:4e:52:
79:51:1e:4e:56:4b:b2:e0:07:52:b7:f4:e1:6f:f7:
b1:6a:f4:3a:65:4f:e8:ad:a8:27:cf:ab:ba:f2:55:
fd:be:32:85:cd:93:06:6e:e9:62:e1:d7:48:8f:fe:
5f:fb:90:11:18:e3:e9:37:02:a0:02:6f:ee:8c:8f:
d4:4c:1c:92:5a:23:75:ae:a4:7b:14:fa:28:a3:93:
02:20:40:42:67:6a:9c:e4:da:55:d8:8c:28:a3:66:
da:f8:f3:80:19:bc:9f:d6:f0:00:87:c8:9d:83:76:
91:db:2d:be:44:ef:67:b1:61:b5:e5:25:dc:b3:af:
42:41:73:ec:17:da:f5:8e:53:cc:d1:ac:20:cd:1c:
4f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:44:F4:2F:6A:9A:29:39:0B:E3:F9:39:B0:68:F9:BA:0C:28:7B:B7
X509v3 Authority Key Identifier:
keyid:CD:DA:5B:4C:E9:5F:A0:BD:F6:05:41:69:E7:7A:EF:C8:26:5D:DB:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zdpbTOlfoL32BUFp53rvyCZd28Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/8e23e5-db28-45ed-b67f-2add5e797c75/1/zdpbTOlfoL32BUFp53rvyCZd28Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/8e23e5-db28-45ed-b67f-2add5e797c75/1/zdpbTOlfoL32BUFp53rvyCZd28Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:5a:14:97:e9:8f:5c:43:a1:2a:34:75:35:e3:aa:7c:bb:5d:
4f:62:04:14:6c:36:06:68:dc:da:77:b3:5e:02:93:25:f7:07:
4e:bd:a7:68:c2:5f:a1:5f:0b:52:9c:26:6f:18:e8:c9:0e:53:
31:e8:94:6b:76:9c:55:bc:ff:41:bf:7a:13:12:86:51:83:b2:
9c:cd:7e:b4:95:b5:86:df:26:a0:0d:30:ab:a6:1c:19:c2:30:
2e:a7:46:d4:13:ec:05:74:39:b2:1f:4f:4a:9c:05:a0:85:00:
d7:06:23:4e:af:1f:ef:da:56:02:70:67:db:c3:6e:ab:c8:c5:
90:b5:7b:38:04:91:6d:7a:7e:0a:4b:ef:83:b2:4b:e8:20:b9:
3a:b4:b4:2c:31:36:74:85:c7:b1:6e:60:c2:f9:70:cb:ec:1f:
96:c3:e9:57:02:6f:4e:4f:9a:ad:0f:eb:af:c8:ef:1f:b5:19:
e0:06:1e:79:f7:61:9c:d0:57:9e:f5:48:14:71:04:39:20:e4:
79:f5:24:e0:24:10:1a:f4:24:b7:fd:36:7d:13:54:36:da:85:
7c:d1:75:4f:59:11:ae:a6:32:a3:c6:64:5f:db:44:12:2e:bf:
e1:bb:37:f1:22:e3:14:8f:a9:d6:2e:9c:3a:14:37:76:ff:6a:
78:11:47:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:20:31 2026 by rpki-client