Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/f9d8d0-cc02-4abf-99bb-e018da53d129/1/zkP-lNpK73rfscFih1rxysfLpLE.mft
File: zkP-lNpK73rfscFih1rxysfLpLE.mft (raw, json)
Hash identifier: ON1UsB/9mIZlV0gMYSd1xUfgnrS6NSNy/INl5T+R6ag=
Subject key identifier: 14:08:8F:61:86:1D:3F:9B:D5:05:97:E5:E9:CC:A4:6B:80:7B:C5:1F
Authority key identifier: CE:43:FE:94:DA:4A:EF:7A:DF:B1:C1:62:87:5A:F1:CA:C7:CB:A4:B1
Certificate issuer: /CN=ce43fe94da4aef7adfb1c162875af1cac7cba4b1
Certificate serial: 019F94371E3560FDE7732C0EA8AE152034AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zkP-lNpK73rfscFih1rxysfLpLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/f9d8d0-cc02-4abf-99bb-e018da53d129/1/zkP-lNpK73rfscFih1rxysfLpLE.mft
Manifest number: 19CA
Signing time: Fri 24 Jul 2026 13:01:07 +0000
Manifest this update: Fri 24 Jul 2026 13:01:07 +0000
Manifest next update: Sat 25 Jul 2026 13:01:07 +0000
Files and hashes: 1: 0lsa2lsdRbGhXDlBoxyUzEcvTkw.roa (hash: TZA+evGUSrxkMyqk95k24o509cA93t42uHVcHnI4ehI=)
2: zkP-lNpK73rfscFih1rxysfLpLE.crl (hash: ooY15pojm31DUrrvXfjfpNvC6Lm0hA4Mf6jhyTNwOHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/f9d8d0-cc02-4abf-99bb-e018da53d129/1/zkP-lNpK73rfscFih1rxysfLpLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/f9d8d0-cc02-4abf-99bb-e018da53d129/1/zkP-lNpK73rfscFih1rxysfLpLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zkP-lNpK73rfscFih1rxysfLpLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:37:1e:35:60:fd:e7:73:2c:0e:a8:ae:15:20:34:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce43fe94da4aef7adfb1c162875af1cac7cba4b1
Validity
Not Before: Jul 24 13:01:07 2026 GMT
Not After : Jul 25 13:01:07 2026 GMT
Subject: CN=14088f61861d3f9bd50597e5e9cca46b807bc51f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:03:81:96:6e:59:4f:37:84:83:03:90:4a:e5:
24:27:d0:d2:ef:67:76:b6:fe:ea:93:38:02:b0:17:
f3:a1:4f:1d:0a:e7:70:61:d4:16:bb:a7:a0:fe:81:
3b:ec:47:57:46:49:09:3e:89:a1:af:87:44:94:8f:
a4:b0:36:f7:4a:b5:f1:33:b2:06:8c:a0:05:c2:3a:
f5:5d:7a:7f:6b:24:64:34:e5:93:8b:d1:14:b4:52:
af:9f:7d:64:f4:22:01:54:05:19:0d:1d:6e:52:03:
29:ef:e5:18:3a:2e:a2:3e:9c:90:92:ed:be:4a:d9:
fb:78:42:82:ae:1c:78:80:ef:13:96:23:0b:55:ba:
40:0e:79:7e:16:12:57:0a:8b:b3:36:67:88:d8:23:
4a:bd:ff:5c:df:ba:58:f7:c1:ae:08:0b:6a:2e:c7:
74:25:fe:42:41:b0:e3:87:22:2b:87:04:ff:ac:95:
9b:a8:7d:07:55:8a:4d:a3:46:a0:36:99:33:5b:85:
2d:fa:b3:85:82:6e:16:a5:d6:0f:eb:5c:31:a6:5e:
07:2a:1d:41:5d:c2:2a:ef:85:3a:b0:66:c4:80:88:
1f:35:7b:60:21:73:d7:1b:a5:b1:96:69:98:c7:0b:
73:f0:c0:3a:25:87:b7:a6:d4:1e:98:6c:f8:8a:ee:
f6:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:08:8F:61:86:1D:3F:9B:D5:05:97:E5:E9:CC:A4:6B:80:7B:C5:1F
X509v3 Authority Key Identifier:
keyid:CE:43:FE:94:DA:4A:EF:7A:DF:B1:C1:62:87:5A:F1:CA:C7:CB:A4:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zkP-lNpK73rfscFih1rxysfLpLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f9d8d0-cc02-4abf-99bb-e018da53d129/1/zkP-lNpK73rfscFih1rxysfLpLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f9d8d0-cc02-4abf-99bb-e018da53d129/1/zkP-lNpK73rfscFih1rxysfLpLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:81:4d:2f:4c:31:01:7f:cd:03:83:87:d5:16:fc:e7:9b:70:
67:aa:f2:0e:56:7a:f7:b0:43:9b:a0:ea:fe:b2:8f:c0:d3:b0:
d3:f2:b6:06:b8:ef:d0:93:a8:e7:af:04:67:dc:6d:52:88:18:
fb:47:08:ea:55:a5:cb:a7:31:64:3d:d4:5e:c6:98:69:ac:a9:
0b:ad:27:3a:ca:eb:78:11:c9:ac:44:c1:05:79:bf:82:47:13:
2e:9a:cc:0e:31:12:d0:31:b0:2d:09:83:69:e1:82:59:0a:8f:
aa:e7:07:45:f8:6b:a2:d9:f9:05:eb:3c:a5:1d:3e:ba:57:2b:
a5:e8:9e:a5:43:b0:2f:f9:6d:88:23:4c:a8:70:d0:03:72:07:
c3:bf:8e:93:52:54:46:25:13:f7:ff:d7:fe:1f:1c:20:f4:28:
cf:18:42:25:78:85:66:e9:7f:60:1e:1c:e2:e3:5c:21:03:29:
03:f3:a7:60:16:8d:34:5b:18:8e:5b:3b:d2:50:9b:5f:a3:b8:
a5:37:4a:f0:ab:fa:af:af:62:8c:37:c4:81:b6:4d:18:19:92:
8d:d6:25:77:bf:5c:7c:dc:98:a9:51:a7:33:26:19:b0:fd:ea:
25:f6:10:d8:3a:bb:fe:41:80:b0:51:5b:d8:9d:93:0a:81:9e:
a6:ed:77:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:30:26 2026 by rpki-client