Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/01dbbc-2fba-4d97-85f6-641edda06cce/1/zkn8E0twZULK8aHvvgNPcBG0lDY.mft
File: zkn8E0twZULK8aHvvgNPcBG0lDY.mft (raw, json)
Hash identifier: 0Rhq7AotgOhKWtrO7pJC5yMg/MGgfVR0Yp3Ldfj6n/E=
Subject key identifier: 32:4F:8D:7C:BB:37:54:78:5F:82:BD:DA:EB:CC:1F:FA:BA:18:88:71
Authority key identifier: CE:49:FC:13:4B:70:65:42:CA:F1:A1:EF:BE:03:4F:70:11:B4:94:36
Certificate issuer: /CN=ce49fc134b706542caf1a1efbe034f7011b49436
Certificate serial: 019F927FC16D8F056C0BB7E1ADEF839A1351
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zkn8E0twZULK8aHvvgNPcBG0lDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/01dbbc-2fba-4d97-85f6-641edda06cce/1/zkn8E0twZULK8aHvvgNPcBG0lDY.mft
Manifest number: 08EF
Signing time: Fri 24 Jul 2026 05:01:13 +0000
Manifest this update: Fri 24 Jul 2026 05:01:13 +0000
Manifest next update: Sat 25 Jul 2026 05:01:13 +0000
Files and hashes: 1: jv18kUzHEBlDlkIHJKkxODrKqc0.roa (hash: wdFZODPpunDdGOXTc+SSGtgRA0zL9y523IFxS0/YWn0=)
2: zkn8E0twZULK8aHvvgNPcBG0lDY.crl (hash: cVO4WpceMsil1xFqzsf+EDDA4aQj6d1FF8+QukcGioE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/01dbbc-2fba-4d97-85f6-641edda06cce/1/zkn8E0twZULK8aHvvgNPcBG0lDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/01dbbc-2fba-4d97-85f6-641edda06cce/1/zkn8E0twZULK8aHvvgNPcBG0lDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zkn8E0twZULK8aHvvgNPcBG0lDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7f:c1:6d:8f:05:6c:0b:b7:e1:ad:ef:83:9a:13:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce49fc134b706542caf1a1efbe034f7011b49436
Validity
Not Before: Jul 24 05:01:13 2026 GMT
Not After : Jul 25 05:01:13 2026 GMT
Subject: CN=324f8d7cbb3754785f82bddaebcc1ffaba188871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e7:79:24:14:5c:f2:d8:70:7c:ce:75:7f:51:
e5:48:6d:ee:da:af:82:bb:9b:8f:6f:cf:1c:d2:00:
37:3b:95:ec:58:61:7c:38:fb:7b:cd:ca:26:b2:0d:
f8:64:8b:9f:18:e1:a5:79:3a:8e:9b:50:74:98:e2:
c9:a8:37:cc:a4:5a:e4:99:d9:3d:e6:56:15:b0:c6:
59:d4:e6:1e:90:f6:30:ee:40:86:69:22:e9:32:cf:
f3:6f:a6:35:06:93:e5:c4:44:cd:8e:69:02:e8:18:
92:6d:d1:24:74:b1:06:b7:8d:61:bd:99:62:f1:35:
6a:83:92:78:9f:7a:38:49:16:cf:64:31:41:5f:e9:
74:84:e5:c3:a1:d3:ba:ef:58:dc:ee:ca:bd:21:29:
46:a5:b4:cc:87:0c:1f:28:0c:07:aa:a7:b9:71:5c:
00:f9:fe:cd:93:4f:7b:80:72:07:7c:60:04:c7:bd:
bb:04:df:5d:b4:5d:b4:a2:66:e4:bf:0c:b1:f3:4b:
3b:5e:2a:96:03:9d:0f:3b:1c:74:b6:ce:53:ff:f1:
46:dd:4c:b3:a0:0b:2e:ad:a7:b1:16:a4:29:f9:f5:
66:15:59:ba:32:aa:5d:6f:39:40:f5:ce:bb:61:62:
fc:e5:17:8c:a9:02:d5:c7:68:bc:dc:fe:ad:6a:6a:
28:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:4F:8D:7C:BB:37:54:78:5F:82:BD:DA:EB:CC:1F:FA:BA:18:88:71
X509v3 Authority Key Identifier:
keyid:CE:49:FC:13:4B:70:65:42:CA:F1:A1:EF:BE:03:4F:70:11:B4:94:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zkn8E0twZULK8aHvvgNPcBG0lDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/01dbbc-2fba-4d97-85f6-641edda06cce/1/zkn8E0twZULK8aHvvgNPcBG0lDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/01dbbc-2fba-4d97-85f6-641edda06cce/1/zkn8E0twZULK8aHvvgNPcBG0lDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:57:f8:7a:5d:fd:c1:c7:fa:76:1f:70:0d:73:88:07:77:b9:
04:e8:b2:e7:14:74:57:99:c5:11:48:b4:3d:f9:bf:cd:3f:0b:
2c:82:36:72:fa:db:ce:96:08:5e:8e:ed:48:fc:cb:c1:2d:60:
11:26:68:8b:c2:10:8e:79:4f:ec:ec:b9:f4:09:84:50:ef:67:
53:76:c3:f1:ee:63:0f:ec:7f:8e:46:a5:4b:70:3b:76:69:3b:
fc:b1:49:96:fe:46:c3:98:46:8a:75:c5:58:7c:dd:fd:3d:c1:
f1:4d:e0:1d:d0:0b:d6:87:e7:f6:1a:eb:37:8e:31:fb:a3:15:
c6:8a:f1:3e:b5:ff:7c:90:51:dc:a7:39:33:64:56:f1:fd:ed:
52:29:fb:c1:e9:9e:64:2c:c7:95:a8:f5:df:47:98:4a:24:4c:
0d:1d:83:89:d8:b0:18:a2:e4:a8:fc:c3:89:9a:56:eb:e4:d5:
af:a0:bb:05:70:65:a2:d9:4a:b7:a5:80:7c:70:f7:36:78:9a:
8a:b5:81:c7:dd:d7:6c:fa:bb:b0:fb:95:47:bf:34:58:46:18:
e3:b8:75:6a:7d:5f:f6:63:30:ea:40:0b:cc:4e:bd:11:d7:f5:
dc:ee:41:ea:02:e9:40:8f:49:fb:e2:b4:82:0a:dc:95:d8:81:
e4:76:dc:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:45:56 2026 by rpki-client