Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.mft
File: ZE8DP3gurzKrCQiHddZKxLlLWxE.mft (raw, json)
Hash identifier: XI3YqBpV/3j8dOp/fmW0hWeexj/e/p2UctBR2qOt2EA=
Subject key identifier: 80:88:F9:C6:56:FE:A9:AA:9F:F1:FB:82:84:58:FE:5C:1C:32:26:2E
Authority key identifier: 64:4F:03:3F:78:2E:AF:32:AB:09:08:87:75:D6:4A:C4:B9:4B:5B:11
Certificate issuer: /CN=644f033f782eaf32ab09088775d64ac4b94b5b11
Certificate serial: 019F91DA9B203E0FB20666A546FE56DEAE14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZE8DP3gurzKrCQiHddZKxLlLWxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.mft
Manifest number: 0F11
Signing time: Fri 24 Jul 2026 02:00:50 +0000
Manifest this update: Fri 24 Jul 2026 02:00:50 +0000
Manifest next update: Sat 25 Jul 2026 02:00:50 +0000
Files and hashes: 1: L5oncHcGX0JZWhyPpUVkQ2HdCRo.roa (hash: L2Pt1ipLnJmpkz1LbVmvE4yLg/k+xc8UXnr+qSGpbXY=)
2: XfoYwouinwxpmsIiaKSE5Ihe3J8.roa (hash: qt4foYpy013TlPUVpgU1Ocj8R+P8zvuJGdKNUnqndOk=)
3: ZE8DP3gurzKrCQiHddZKxLlLWxE.crl (hash: Ne0rg/YC2pdb9bx3IKatMK8HFe0ijKfSHLyKTFk78F4=)
4: j34AlrWJB9qIiT39tdgx6GORRPE.roa (hash: TLVwr6WxGYUdU6twEr0V8a4U4NI5yriKBDDpZ2ESBfY=)
5: l8pVdQcsPyvAv3HyaaD26uxVYS8.roa (hash: DQA293T0QyMdTSQE50m48vTaLc10PyZBH6Ba9LHMphE=)
6: lmALzp_C2hj8qDy6u9DneABNWCE.roa (hash: 0GPCM3inwnfBar+n/0nv3z67tNfW/VcLGbHgKFaiiwI=)
7: s1N5kDv4-SpOqan5hJxvvqdzfgk.roa (hash: G1JTBs4ptyy7NKoszv8bHZCq/4kKQ4/tpR/BQXAJYC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZE8DP3gurzKrCQiHddZKxLlLWxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:9b:20:3e:0f:b2:06:66:a5:46:fe:56:de:ae:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=644f033f782eaf32ab09088775d64ac4b94b5b11
Validity
Not Before: Jul 24 02:00:50 2026 GMT
Not After : Jul 25 02:00:50 2026 GMT
Subject: CN=8088f9c656fea9aa9ff1fb828458fe5c1c32262e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7e:06:ab:d2:14:4a:9b:2e:42:35:44:87:88:
b8:da:ec:d4:98:99:8c:5c:a7:ef:e5:87:d1:db:5b:
d6:4e:80:f4:93:a4:46:ef:90:f0:d5:4a:1c:a5:ba:
ed:34:9a:5e:65:37:63:bd:31:96:84:d9:99:a9:a7:
40:53:20:79:fc:87:9f:d8:c4:88:e9:1c:0d:7a:bf:
da:a2:71:ee:10:f5:11:7a:21:bf:eb:54:98:14:30:
4c:86:cb:7c:7c:be:74:13:67:60:18:21:04:52:26:
41:13:2e:3e:c1:d4:06:4b:fe:60:b6:52:65:e8:da:
f8:32:59:59:dd:13:ce:27:e4:2f:68:ae:5c:94:71:
01:75:2c:9c:68:d0:c2:25:89:78:67:11:8a:0a:ac:
ea:4f:be:19:33:53:d1:1d:7c:c9:7f:73:d3:e2:44:
52:e4:00:7f:81:b5:76:3d:06:96:e2:e6:cc:ce:28:
87:8d:09:22:78:64:eb:b8:5b:0d:17:aa:c8:7e:b8:
b2:62:cd:85:9f:ff:3d:85:90:95:2a:21:74:56:38:
e8:c6:45:74:f8:b6:18:33:16:ac:fa:c9:91:5f:c8:
6c:a1:b1:62:dd:e8:17:31:58:a3:e7:ff:14:81:1d:
ad:f3:b5:e8:20:da:8b:01:f4:f9:53:6a:c1:da:db:
ee:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:88:F9:C6:56:FE:A9:AA:9F:F1:FB:82:84:58:FE:5C:1C:32:26:2E
X509v3 Authority Key Identifier:
keyid:64:4F:03:3F:78:2E:AF:32:AB:09:08:87:75:D6:4A:C4:B9:4B:5B:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZE8DP3gurzKrCQiHddZKxLlLWxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:52:9a:2b:ba:eb:4b:ff:1d:bb:ff:45:20:82:f4:5e:76:39:
d9:a9:bc:15:09:1d:95:6c:e1:b4:7b:92:c6:f2:7c:fd:d1:d0:
7b:b2:86:d8:9d:b3:6b:95:ef:e7:ba:f7:f6:09:33:ae:0f:1c:
75:2f:46:95:a9:73:e7:93:17:87:61:fe:33:7d:49:df:f1:e9:
dc:66:01:6b:df:58:e4:9b:6f:86:7d:ce:69:33:dc:e3:14:84:
ce:47:14:fe:9e:12:23:16:e0:07:0b:88:63:dd:88:88:d9:15:
e5:b4:6f:8a:94:8a:88:29:73:e3:00:fa:90:e2:a1:5b:56:57:
94:97:24:09:e5:e4:73:2f:33:0c:81:ac:5d:95:bf:e2:7a:12:
a4:b3:45:57:f2:02:c1:1c:f6:ef:04:ed:ec:18:e2:59:5f:f0:
3b:9b:86:86:60:8c:49:37:ba:b3:bc:94:7c:22:71:37:2b:a0:
24:bb:26:30:f8:6b:6e:1e:32:5a:52:2f:74:48:de:50:7e:02:
b7:df:22:d6:7d:67:22:ea:06:88:bd:83:0f:89:6d:45:20:27:
7d:6c:bb:7e:a6:88:29:cd:52:a8:02:9a:31:0f:4e:0d:d6:9a:
3b:96:c2:cd:2d:a5:88:f5:86:d5:db:0b:d7:1c:1a:55:bd:f5:
96:6c:94:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:10:42 2026 by rpki-client