Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/a52b04-efb0-415b-9b1a-409ea1208926/1/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.mft
File: Zc-Zli-Yn3tzPaeqcOr55BBSrhk.mft (raw, json)
Hash identifier: kWGDKAAi3DnfL0ArfUh9E0KL+XSBj03/82q2jeRYLQA=
Subject key identifier: 9B:63:D7:39:9D:CA:8D:58:38:FA:55:D3:90:8B:DD:5A:6D:1C:7E:FB
Authority key identifier: 65:CF:99:96:2F:98:9F:7B:73:3D:A7:AA:70:EA:F9:E4:10:52:AE:19
Certificate issuer: /CN=65cf99962f989f7b733da7aa70eaf9e41052ae19
Certificate serial: 019F9391BDDE5C69C10D2B7B7BE0783B5C85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/a52b04-efb0-415b-9b1a-409ea1208926/1/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.mft
Manifest number: 19C7
Signing time: Fri 24 Jul 2026 10:00:29 +0000
Manifest this update: Fri 24 Jul 2026 10:00:29 +0000
Manifest next update: Sat 25 Jul 2026 10:00:29 +0000
Files and hashes: 1: D4Ig0boR8l83Ddi1KhhZUDj3BIM.roa (hash: h7w8EdAomdlx4AIn+vosPrC32sePfUw5l3+p/ucsXto=)
2: Zc-Zli-Yn3tzPaeqcOr55BBSrhk.crl (hash: CoJ7yBPAQhBdO6CYYrPvfhAWeqNaYwYtMJ5zKiqRaww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/a52b04-efb0-415b-9b1a-409ea1208926/1/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/a52b04-efb0-415b-9b1a-409ea1208926/1/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 10:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:91:bd:de:5c:69:c1:0d:2b:7b:7b:e0:78:3b:5c:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65cf99962f989f7b733da7aa70eaf9e41052ae19
Validity
Not Before: Jul 24 10:00:29 2026 GMT
Not After : Jul 25 10:00:29 2026 GMT
Subject: CN=9b63d7399dca8d5838fa55d3908bdd5a6d1c7efb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d4:a4:dd:71:8a:a4:8a:0a:90:b4:c9:c1:8b:
7e:0e:a6:f6:21:bd:b2:db:5f:46:ca:5c:bc:89:ab:
78:1e:c5:8a:5b:52:27:1c:8d:85:c4:8c:28:32:f5:
78:57:b8:33:68:fb:3b:95:aa:2b:c0:84:da:1a:2c:
b3:25:2a:34:4b:f2:f8:52:1f:e6:97:67:f0:3c:c8:
03:1b:b6:79:b2:84:e9:e3:bf:4b:71:66:f7:fe:a5:
4a:49:7b:29:03:12:ef:98:d8:36:26:74:99:39:35:
5e:97:53:3a:2e:21:08:2d:75:fc:fb:50:b2:97:df:
ac:b1:88:29:9b:87:6e:b1:dc:a3:59:07:aa:4f:f7:
69:45:10:f9:a9:9c:2d:b7:db:df:46:b0:7b:5e:ca:
ff:f2:73:2c:33:81:b8:7f:f6:d8:c6:3c:78:cc:64:
7c:6e:95:8d:ee:e5:f1:6e:4c:23:0f:45:9e:93:12:
06:6e:ce:bb:87:ef:5d:ba:ab:eb:6c:e8:68:01:59:
d0:a1:31:71:df:11:9d:5a:04:61:5c:22:be:45:7e:
7e:a8:88:13:94:9f:41:3f:f5:1a:91:dc:e5:0c:c8:
e3:e1:2f:5f:1c:a7:a3:be:f6:69:cf:03:ce:78:e0:
35:65:e0:5d:2e:a2:81:4d:af:67:73:19:57:98:1b:
47:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:63:D7:39:9D:CA:8D:58:38:FA:55:D3:90:8B:DD:5A:6D:1C:7E:FB
X509v3 Authority Key Identifier:
keyid:65:CF:99:96:2F:98:9F:7B:73:3D:A7:AA:70:EA:F9:E4:10:52:AE:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a52b04-efb0-415b-9b1a-409ea1208926/1/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a52b04-efb0-415b-9b1a-409ea1208926/1/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:20:4f:06:17:46:0c:47:6c:9b:b5:46:45:25:4e:c3:8e:39:
6b:6c:c6:a1:31:be:72:3e:1a:93:1d:8e:32:86:43:92:8b:7d:
e9:0b:21:34:1d:85:04:90:e8:ed:69:f2:a3:cd:22:1a:30:66:
83:a8:a1:c9:d2:b0:00:ac:38:74:51:b2:5a:62:c5:10:58:a0:
11:1d:92:77:98:e4:f8:46:63:a1:40:9e:c4:a3:9e:29:98:49:
6d:2b:30:06:8e:0c:c8:34:0e:40:ce:ce:82:c3:31:06:96:27:
8e:44:c4:93:d6:a5:7d:b2:eb:db:91:c8:60:1c:0b:5c:b9:56:
87:88:28:3b:08:03:bb:54:d1:78:05:c7:ae:34:e1:89:d5:1b:
47:8a:ae:41:ff:c2:d9:a2:c1:b6:13:08:59:5c:91:13:9a:30:
77:9a:d6:9f:66:ed:b3:9f:8d:ff:ad:1f:da:40:f8:35:84:86:
87:da:88:a3:48:f7:55:82:6d:e2:91:8c:22:75:26:b9:5a:7c:
c1:91:38:01:6e:59:1b:83:3f:a0:49:9d:9a:5f:2b:86:3c:0a:
95:95:46:79:51:9e:be:ef:66:36:20:b4:d6:15:b7:61:13:66:
b1:b0:88:ad:33:ad:59:88:27:ee:2c:ca:d0:c7:9e:63:ed:b2:
7d:e9:b1:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:16:08 2026 by rpki-client