Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/50663b-84b7-4ea6-80d4-5f9e7ab5b2c3/1/zshzRXQrnVgBslMjyCcnWuD5Stk.mft
File: zshzRXQrnVgBslMjyCcnWuD5Stk.mft (raw, json)
Hash identifier: X3TeQF9g+JyFXgJB6FrDgtMg82mI5TDicQcG8K4EMW0=
Subject key identifier: 8D:25:5B:5B:28:98:F6:37:EE:1F:40:0A:E5:58:D9:74:EB:45:1C:2F
Authority key identifier: CE:C8:73:45:74:2B:9D:58:01:B2:53:23:C8:27:27:5A:E0:F9:4A:D9
Certificate issuer: /CN=cec87345742b9d5801b25323c827275ae0f94ad9
Certificate serial: 019F92482AFBE0D225252AAB7ACECF24AD45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zshzRXQrnVgBslMjyCcnWuD5Stk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/50663b-84b7-4ea6-80d4-5f9e7ab5b2c3/1/zshzRXQrnVgBslMjyCcnWuD5Stk.mft
Manifest number: 29
Signing time: Fri 24 Jul 2026 04:00:30 +0000
Manifest this update: Fri 24 Jul 2026 04:00:30 +0000
Manifest next update: Sat 25 Jul 2026 04:00:30 +0000
Files and hashes: 1: JBmrghiTDzjDVafNtUXpcpiVMDA.roa (hash: ytVgRgTltCnzpOMTVkA88MbE1jIuSsREsUuIGqNHZ00=)
2: zshzRXQrnVgBslMjyCcnWuD5Stk.crl (hash: JhM4v0vl+1KsxwbYig9laPG/ocSNLWEJs7QCuP/ASRA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/50663b-84b7-4ea6-80d4-5f9e7ab5b2c3/1/zshzRXQrnVgBslMjyCcnWuD5Stk.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/50663b-84b7-4ea6-80d4-5f9e7ab5b2c3/1/zshzRXQrnVgBslMjyCcnWuD5Stk.mft
rsync://rpki.ripe.net/repository/DEFAULT/zshzRXQrnVgBslMjyCcnWuD5Stk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:2a:fb:e0:d2:25:25:2a:ab:7a:ce:cf:24:ad:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec87345742b9d5801b25323c827275ae0f94ad9
Validity
Not Before: Jul 24 04:00:30 2026 GMT
Not After : Jul 25 04:00:30 2026 GMT
Subject: CN=8d255b5b2898f637ee1f400ae558d974eb451c2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:79:02:07:7e:57:63:d9:22:7d:e3:fe:3c:aa:
fe:52:c6:3b:1c:57:a3:06:05:26:9f:3d:cd:c8:87:
bc:05:95:0b:3a:ec:50:b9:f4:93:6c:a5:97:3d:35:
5d:63:e4:57:6a:cc:81:4b:40:9d:3e:62:de:cc:5f:
5e:73:c2:7a:53:bd:2e:fe:30:48:45:9c:f0:78:61:
32:ae:a0:43:ce:bb:03:5e:f7:a9:4c:5d:61:d6:69:
ac:f3:d2:68:48:76:b1:6e:42:96:1c:71:74:fa:00:
b1:ce:84:42:96:f5:9f:92:86:0a:2b:8e:4f:d9:12:
43:b5:02:68:aa:79:fa:d3:aa:b6:5a:a6:df:ae:ad:
35:39:aa:52:92:de:70:45:c4:46:e6:e3:b7:25:31:
45:7a:de:09:ef:1c:f4:6d:91:eb:98:90:bd:bc:c1:
b0:34:fe:df:76:40:de:be:3d:c0:03:9b:1f:6f:25:
40:99:70:e8:a2:53:61:11:5d:24:32:da:57:1d:a2:
7a:91:7e:aa:dd:4c:3f:d9:53:0c:c1:f2:7f:3a:a9:
87:61:17:d2:1d:11:49:8e:8d:95:6b:6c:01:6a:5a:
b3:b3:6e:58:ed:f2:cb:8b:03:a2:76:35:bb:c2:d5:
f2:e7:0b:3b:8e:a6:c6:da:24:7c:87:73:f0:0d:a0:
ed:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:25:5B:5B:28:98:F6:37:EE:1F:40:0A:E5:58:D9:74:EB:45:1C:2F
X509v3 Authority Key Identifier:
keyid:CE:C8:73:45:74:2B:9D:58:01:B2:53:23:C8:27:27:5A:E0:F9:4A:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zshzRXQrnVgBslMjyCcnWuD5Stk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/50663b-84b7-4ea6-80d4-5f9e7ab5b2c3/1/zshzRXQrnVgBslMjyCcnWuD5Stk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/50663b-84b7-4ea6-80d4-5f9e7ab5b2c3/1/zshzRXQrnVgBslMjyCcnWuD5Stk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:b0:34:04:30:05:59:dc:09:05:5b:6f:8e:13:e5:12:2c:0b:
e2:1d:f3:46:04:72:b3:92:86:7b:e0:90:e6:68:42:9b:46:21:
e7:0a:16:70:21:3f:05:c6:7e:df:10:27:92:d6:48:59:5c:77:
ca:af:a3:99:9b:02:15:89:88:63:77:8b:5f:33:7e:ef:fb:2b:
f2:61:e9:d9:4e:7b:97:69:51:42:84:75:4e:f0:e2:96:bb:f3:
ba:96:ea:46:c4:31:cc:53:5e:e9:bf:bb:83:09:fe:3a:b0:68:
ad:5b:1b:9e:d5:a9:04:be:bd:0e:28:d1:58:3c:d4:4e:fd:6c:
3b:ba:e7:83:30:18:1c:cf:7a:ce:2b:89:68:d7:9b:26:e6:47:
02:47:96:3e:01:50:dc:eb:5e:2b:60:42:96:d0:e4:07:37:e4:
7d:e6:12:7f:e7:4d:eb:bb:cc:bc:13:e9:64:68:c7:74:7e:e3:
d6:0f:56:dc:e6:58:42:0c:6d:77:9d:41:1e:a2:59:47:db:d9:
81:4f:8c:42:bb:1b:99:9c:46:27:63:df:e3:e2:69:69:01:a7:
a7:32:5c:fb:47:f5:fc:28:45:8b:db:e1:44:3e:41:53:30:13:
27:de:c1:23:de:b3:3f:2f:08:f7:56:e9:7f:88:62:b8:fb:48:
7c:bd:3f:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:14:35 2026 by rpki-client