Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/1baff1-dda3-4304-b1b3-5182eede2a29/1/ZDZqc5FfkJDUsQg4l6pAJXfhY94.mft
File: ZDZqc5FfkJDUsQg4l6pAJXfhY94.mft (raw, json)
Hash identifier: L3ND/CA4aU0DFHoCJbhTkBk4cen3Xk7/BGDZUwTxz20=
Subject key identifier: D7:C0:86:2A:7D:89:CD:D3:BB:D4:06:92:4F:36:A0:D6:6D:04:EA:61
Authority key identifier: 64:36:6A:73:91:5F:90:90:D4:B1:08:38:97:AA:40:25:77:E1:63:DE
Certificate issuer: /CN=64366a73915f9090d4b1083897aa402577e163de
Certificate serial: 019F9692E874D491BF3C56A824697905EF37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZDZqc5FfkJDUsQg4l6pAJXfhY94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/1baff1-dda3-4304-b1b3-5182eede2a29/1/ZDZqc5FfkJDUsQg4l6pAJXfhY94.mft
Manifest number: 09AC
Signing time: Sat 25 Jul 2026 00:00:37 +0000
Manifest this update: Sat 25 Jul 2026 00:00:37 +0000
Manifest next update: Sun 26 Jul 2026 00:00:37 +0000
Files and hashes: 1: WPsZu0t0gwCtDu9DluM2JpNAigM.roa (hash: 1nZv6ryPRTSI42lJffh2EsY2m6JCVkOOWCXauYoQ2vk=)
2: ZDZqc5FfkJDUsQg4l6pAJXfhY94.crl (hash: tgeTmxGQncpHqWlbnnu+E1LBYxtEK0HDA3JirtO2x8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/1baff1-dda3-4304-b1b3-5182eede2a29/1/ZDZqc5FfkJDUsQg4l6pAJXfhY94.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/1baff1-dda3-4304-b1b3-5182eede2a29/1/ZDZqc5FfkJDUsQg4l6pAJXfhY94.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZDZqc5FfkJDUsQg4l6pAJXfhY94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:96:92:e8:74:d4:91:bf:3c:56:a8:24:69:79:05:ef:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64366a73915f9090d4b1083897aa402577e163de
Validity
Not Before: Jul 25 00:00:37 2026 GMT
Not After : Jul 26 00:00:37 2026 GMT
Subject: CN=d7c0862a7d89cdd3bbd406924f36a0d66d04ea61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:9e:7a:11:ce:63:c8:9e:c8:48:14:ac:73:58:
8c:10:6c:8c:bf:5a:94:92:69:89:03:bb:2c:29:6f:
9b:7f:3c:ca:53:40:e9:06:aa:b1:56:e3:c3:29:0e:
c7:c2:1a:db:20:9f:a5:e4:ff:22:a4:23:62:3d:75:
97:56:fa:f0:ab:dd:10:cd:4f:a6:de:1c:b3:5c:9b:
9d:c6:54:94:a7:95:c4:95:e0:ce:13:d3:1a:0a:6c:
4d:eb:fd:69:e6:7a:77:06:be:b7:ed:b5:9a:99:4e:
2a:7b:61:7c:69:ae:61:ff:2c:78:62:12:ad:dc:e3:
f3:3a:e1:b5:78:7e:a5:c0:e6:7e:ca:c1:8f:c3:7c:
90:09:b5:6b:e3:f8:19:16:00:fc:3d:78:da:86:00:
76:32:d2:ae:6d:9f:df:80:79:e3:d1:22:78:3f:5c:
0b:28:b0:d8:92:db:4f:76:1c:e4:46:91:03:d8:13:
96:18:21:80:c5:02:6b:fd:9f:3f:5c:dc:0c:f4:cc:
6f:56:a9:8a:49:4d:6a:38:e5:bf:57:90:a1:4b:09:
0e:87:ed:ff:c0:2c:06:33:b5:42:b9:fb:94:26:63:
43:45:5f:57:1b:4b:28:91:c7:86:a0:f5:61:b0:57:
43:c1:07:27:9c:21:76:5b:89:e1:e6:c2:9a:ec:ac:
94:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:C0:86:2A:7D:89:CD:D3:BB:D4:06:92:4F:36:A0:D6:6D:04:EA:61
X509v3 Authority Key Identifier:
keyid:64:36:6A:73:91:5F:90:90:D4:B1:08:38:97:AA:40:25:77:E1:63:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZDZqc5FfkJDUsQg4l6pAJXfhY94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/1baff1-dda3-4304-b1b3-5182eede2a29/1/ZDZqc5FfkJDUsQg4l6pAJXfhY94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/1baff1-dda3-4304-b1b3-5182eede2a29/1/ZDZqc5FfkJDUsQg4l6pAJXfhY94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:17:e0:92:88:15:f9:ad:30:40:81:e0:4b:ab:5a:5c:ed:2b:
4c:75:3c:90:d3:95:84:34:a3:b8:36:2c:64:1a:57:35:6d:ef:
23:3a:1d:10:8e:4f:46:d8:0d:31:f1:2c:0c:ca:09:b1:6a:5f:
77:53:71:16:c0:0a:17:61:d7:0c:9d:cf:75:51:23:38:cc:d1:
b8:78:f7:4a:52:58:f3:a2:c9:a6:92:9a:14:50:2b:45:73:e1:
d5:d6:4c:d2:6b:89:59:6a:71:bc:32:83:ff:63:67:3a:4f:66:
14:6a:ef:b3:b7:cd:61:d3:1a:d0:e9:81:3a:2f:c3:88:25:e2:
d9:38:73:4d:2c:5d:d1:12:9e:a1:e3:11:f4:77:66:87:6c:53:
9c:ce:85:1e:8e:6e:80:32:97:93:7e:52:d4:84:c3:e3:d6:07:
29:04:f5:c0:8a:38:db:84:0d:43:a2:41:5a:37:b4:81:f9:13:
84:f0:32:fe:78:06:59:c8:48:3e:c1:d9:f4:d2:6d:15:70:29:
db:20:4c:cd:c7:fb:9d:10:59:05:ba:b7:2a:41:6d:86:fb:6f:
bf:88:0c:71:b0:ff:0f:3a:26:ff:00:e9:37:8a:73:a2:3e:82:
3d:e9:13:95:c8:1a:40:fb:c2:a5:04:5e:63:70:19:42:84:71:
e8:54:93:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 01:39:11 2026 by rpki-client