
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/7370c4-e4cd-4db3-9b86-e359ae0a6838/1/Zs01lGjIuqmPw8ou8tkFg6aeABY.mft
File: Zs01lGjIuqmPw8ou8tkFg6aeABY.mft (raw, json)
Hash identifier: Uk3h1MSG4FS0khK27zmjS+VlLVGp1M9eX0jpMeDWNjs=
Subject key identifier: E0:C7:A2:9D:1A:F8:26:49:18:8C:34:30:45:4D:50:52:C4:E8:E2:33
Authority key identifier: 66:CD:35:94:68:C8:BA:A9:8F:C3:CA:2E:F2:D9:05:83:A6:9E:00:16
Certificate issuer: /CN=66cd359468c8baa98fc3ca2ef2d90583a69e0016
Certificate serial: 019F965C833EA066080D913A66B52A2E427D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zs01lGjIuqmPw8ou8tkFg6aeABY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/7370c4-e4cd-4db3-9b86-e359ae0a6838/1/Zs01lGjIuqmPw8ou8tkFg6aeABY.mft
Manifest number: 024C
Signing time: Fri 24 Jul 2026 23:01:13 +0000
Manifest this update: Fri 24 Jul 2026 23:01:13 +0000
Manifest next update: Sat 25 Jul 2026 23:01:13 +0000
Files and hashes: 1: Zs01lGjIuqmPw8ou8tkFg6aeABY.crl (hash: t8qsrTcdeU9qlcE/rEaH8reM+iIHKb/8ofj9g25vVWU=)
2: rqJldLN-S-H8DV7_BXB9c6fFRDg.roa (hash: 8ct3OMMYCUQEAyF1g7DbkXYuvpJT+cTHy+wjPP6qYuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/7370c4-e4cd-4db3-9b86-e359ae0a6838/1/Zs01lGjIuqmPw8ou8tkFg6aeABY.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/7370c4-e4cd-4db3-9b86-e359ae0a6838/1/Zs01lGjIuqmPw8ou8tkFg6aeABY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zs01lGjIuqmPw8ou8tkFg6aeABY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:96:5c:83:3e:a0:66:08:0d:91:3a:66:b5:2a:2e:42:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66cd359468c8baa98fc3ca2ef2d90583a69e0016
Validity
Not Before: Jul 24 23:01:13 2026 GMT
Not After : Jul 25 23:01:13 2026 GMT
Subject: CN=e0c7a29d1af82649188c3430454d5052c4e8e233
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:78:e8:66:26:77:8b:05:79:e6:d6:66:12:3c:
ce:a9:d8:3d:3a:4f:35:2d:6a:9c:4b:ff:b3:1f:e9:
d9:1e:a3:2f:16:58:ae:19:e6:82:7b:f0:fd:5b:77:
38:e4:d0:6e:de:5b:7a:53:21:b9:d2:81:fc:bd:82:
71:da:c1:dd:f3:34:80:52:6c:63:ea:02:65:eb:91:
a9:5c:d4:3b:f2:87:37:6c:31:99:86:d5:c0:cc:ed:
73:32:bb:46:07:b7:cd:a7:8e:2c:ca:61:f7:5f:97:
95:7e:ea:af:d2:9b:2b:30:ec:be:79:ac:20:91:18:
eb:8b:a4:8e:7c:bc:38:b8:95:9f:44:b1:02:37:4f:
67:e3:62:f0:31:db:ae:21:b5:02:b4:2d:35:62:98:
e6:d3:1a:76:87:66:75:68:e6:63:bd:d3:0b:de:b7:
38:03:57:f1:9e:27:48:a5:05:a9:d6:e3:ae:94:d0:
83:3f:03:2a:cd:30:f7:39:b0:79:64:0a:d1:e5:70:
4b:50:e2:47:7c:22:42:93:9b:da:a6:0f:77:1a:27:
f2:70:2a:6e:c2:39:b9:b3:3d:88:ee:66:07:fb:bd:
a6:84:df:10:8f:11:97:11:94:cd:e0:f3:f1:fe:36:
38:b4:04:0f:ed:0e:a8:57:c5:a8:4d:c2:fb:d5:ca:
1a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:C7:A2:9D:1A:F8:26:49:18:8C:34:30:45:4D:50:52:C4:E8:E2:33
X509v3 Authority Key Identifier:
keyid:66:CD:35:94:68:C8:BA:A9:8F:C3:CA:2E:F2:D9:05:83:A6:9E:00:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zs01lGjIuqmPw8ou8tkFg6aeABY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/7370c4-e4cd-4db3-9b86-e359ae0a6838/1/Zs01lGjIuqmPw8ou8tkFg6aeABY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/7370c4-e4cd-4db3-9b86-e359ae0a6838/1/Zs01lGjIuqmPw8ou8tkFg6aeABY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:8e:b8:76:a2:44:67:bc:10:03:eb:6e:19:b6:08:91:7f:37:
ec:77:37:82:79:8d:dc:1f:2f:0b:ad:8d:64:12:25:c5:37:c8:
dd:a4:1a:dd:06:b6:6b:14:5d:71:ce:f4:56:d1:f5:d5:d6:85:
16:d7:a4:8c:f8:c5:07:b0:f9:ea:4a:cd:90:96:23:8e:a8:c3:
e5:87:0b:43:9b:ac:96:ab:fc:c2:1c:f3:ea:b0:9c:a3:2b:fc:
4d:58:e6:f9:3c:5f:21:8d:c4:78:98:8a:02:2d:c0:09:85:c9:
ea:24:45:80:35:48:00:61:10:06:de:97:85:a1:d4:fd:2b:01:
f2:72:89:f7:db:55:a3:6a:18:d5:c4:07:bc:67:0f:8e:eb:80:
82:3f:80:27:4d:44:c7:30:4e:71:08:d4:73:b9:d0:a3:ad:52:
44:08:14:d4:34:04:94:87:74:8b:06:7b:8b:5e:5e:3b:23:f8:
a3:69:d6:97:94:32:83:7c:88:72:32:3e:f3:16:46:55:02:15:
de:f7:1e:61:61:be:23:2f:d5:40:e5:e7:86:69:21:39:ae:4f:
2f:b6:9b:5a:18:e6:af:b0:34:96:4e:2f:d0:ee:f0:f7:17:20:
ac:61:14:56:68:34:f7:b0:41:2f:76:34:89:64:a4:a4:a5:31:
b4:6c:a0:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 03:09:35 2026 by rpki-client