Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.mft
File: zVdth24X5nqjsfHBDas52yk14is.mft (raw, json)
Hash identifier: c6mukPnvVY9xG9uyivlduMCydoGt500h3s/m2ay/EWU=
Subject key identifier: 5A:AA:F4:60:C7:C9:4B:B1:EA:57:7F:96:4D:81:D3:CE:FF:10:AF:A0
Authority key identifier: CD:57:6D:87:6E:17:E6:7A:A3:B1:F1:C1:0D:AB:39:DB:29:35:E2:2B
Certificate issuer: /CN=cd576d876e17e67aa3b1f1c10dab39db2935e22b
Certificate serial: 019F90FEED267E1BBD3CC20E0F8CDD47D644
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zVdth24X5nqjsfHBDas52yk14is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.mft
Manifest number: 13CE
Signing time: Thu 23 Jul 2026 22:00:53 +0000
Manifest this update: Thu 23 Jul 2026 22:00:53 +0000
Manifest next update: Fri 24 Jul 2026 22:00:53 +0000
Files and hashes: 1: 3XuA-YVzPEgJjeMJ8s1Vm2HEV7M.roa (hash: L2BlNBBMkivGXWvUezO7Aw0uWHpwLq/KSkHq0trlQZE=)
2: 9_TVXot_dyIkEe9KiLsuyW2oktk.roa (hash: AY0ZbEX8AuKpfJf3mMe1LHPcHhetoh8C291fNwOvGkw=)
3: EH4KOFxcs2mIofbNI1ahfqTJYGE.roa (hash: D1AeMO131kzbiuMNmxTtyfBa0NC9RKdmdxddmi5mG60=)
4: M2b0AyIxBEZE26l78yx_U6jH-HM.roa (hash: qI3z2lgsBJDNei5CDronPrCJiOhj9yjVA1Waw1BZhZw=)
5: l42LyB_1C2P-LllZFiZxTraA8VY.roa (hash: DBvrQLij/XijOP3rNHrPmHSYFZ7FdPcqe5/jQy1zmiA=)
6: s13GH00hV2jIxjzw03ezHAtEnrE.roa (hash: wwzOhbN/GMGtfE1ca6NvpkVgz3P26P0FotyIBvRPTpA=)
7: wsv3RhVPC0LRVw4Iv-_qJ-xb_MA.roa (hash: htIN8qHXgg74PxltVLjdHQI1GM5oys81YrYBTFBjHyw=)
8: zVdth24X5nqjsfHBDas52yk14is.crl (hash: /rmSYcrAlkwSFmOpBiQHN8H/GyvAxATujAcTKuU7t98=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.mft
rsync://rpki.ripe.net/repository/DEFAULT/zVdth24X5nqjsfHBDas52yk14is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:fe:ed:26:7e:1b:bd:3c:c2:0e:0f:8c:dd:47:d6:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd576d876e17e67aa3b1f1c10dab39db2935e22b
Validity
Not Before: Jul 23 22:00:53 2026 GMT
Not After : Jul 24 22:00:53 2026 GMT
Subject: CN=5aaaf460c7c94bb1ea577f964d81d3ceff10afa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f7:92:50:e5:48:08:1e:79:b4:23:e7:ec:18:
da:c7:0e:01:95:69:9d:b7:50:db:01:61:1e:8c:8b:
23:7b:d3:7b:89:7e:87:94:8d:56:37:cb:35:1a:a2:
bb:4d:64:2e:18:8d:6e:c8:b0:e4:da:6d:71:a4:e3:
a8:00:b4:2f:2b:7c:20:37:20:f6:16:51:9b:4d:dc:
94:1f:1a:1f:5e:16:d8:c1:f9:34:6f:60:0e:d9:5c:
b3:ca:af:51:09:2d:38:3e:37:80:b1:8f:58:5c:a9:
f5:52:d4:aa:40:88:9c:f4:41:c5:30:46:5b:24:44:
41:a7:e2:c8:6e:7e:2e:a0:f4:18:a4:42:a2:4e:a6:
8b:a2:cf:4d:17:75:7f:d2:29:71:e9:c2:d3:3c:a8:
97:1f:14:21:c1:15:8b:69:ff:cc:8f:4d:72:4e:70:
d3:d9:53:cb:63:c0:ed:f0:aa:d0:14:26:3c:ad:47:
6d:be:82:2a:0e:5a:b3:f2:16:c3:e7:a0:fc:ec:ac:
69:3a:91:2e:81:28:52:91:cb:66:46:ff:55:de:5d:
64:f4:de:e0:f6:ec:86:eb:c9:9a:2a:dc:d8:30:87:
01:0e:9e:5b:4e:81:9b:e6:10:92:4e:62:f3:34:6e:
5c:cf:b1:aa:21:bf:11:d1:35:53:95:0f:88:09:88:
78:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:AA:F4:60:C7:C9:4B:B1:EA:57:7F:96:4D:81:D3:CE:FF:10:AF:A0
X509v3 Authority Key Identifier:
keyid:CD:57:6D:87:6E:17:E6:7A:A3:B1:F1:C1:0D:AB:39:DB:29:35:E2:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zVdth24X5nqjsfHBDas52yk14is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:70:d7:a4:46:a5:0c:36:25:91:39:1c:8e:49:08:0c:a4:31:
76:bf:c6:f1:1a:1b:1e:51:d2:de:d1:73:03:c9:6f:47:89:fa:
17:45:37:7b:ff:55:21:d1:ea:a9:46:0d:26:46:23:74:7f:9e:
b4:24:93:b6:30:19:51:93:0d:5a:65:2e:fb:23:82:d8:65:73:
c6:2c:a7:d2:c3:a2:c7:86:8b:4b:e9:21:78:e0:20:e7:a0:0d:
43:7e:bf:82:a0:84:7b:8e:d8:a4:1a:22:99:71:9b:f3:e3:aa:
4a:ea:65:94:de:a0:28:db:71:26:8b:2e:1e:b8:e0:04:c2:e4:
67:f2:9b:9f:71:1f:b5:82:32:62:b7:75:c2:6f:eb:8f:fd:e1:
bd:e6:4c:d6:62:ad:ce:a5:bb:70:ee:4f:aa:db:f9:1d:7a:88:
a4:18:5d:f0:fb:3d:a6:98:e7:29:10:4a:b8:00:1d:dc:5a:50:
f9:60:4b:15:56:1f:61:9e:3e:6c:46:b4:b5:61:b3:8d:cb:fa:
89:47:d0:48:15:e0:1b:79:53:ac:a6:3c:e3:b8:f8:01:8e:f2:
44:b3:56:4d:b7:64:a9:7c:75:e9:52:ac:7a:b9:92:f5:76:e4:
bd:ca:7a:9c:1b:ef:67:89:55:69:d8:e1:6b:be:20:b5:1c:d5:
1c:33:1b:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:23:19 2026 by rpki-client