Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft
File: ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft (raw, json)
Hash identifier: BYRWHb1zC64oKwL97z7cSkco61o9KoHsU74vtRY1QCg=
Subject key identifier: 5C:A9:FE:56:24:8C:03:1D:45:77:F5:48:62:ED:5F:56:92:32:DA:0A
Authority key identifier: 64:FF:B3:09:C2:89:AC:FF:C1:BE:34:A6:F0:B6:67:5C:00:17:13:EA
Certificate issuer: /CN=64ffb309c289acffc1be34a6f0b6675c001713ea
Certificate serial: 019F93FF911D1CE5DA2370EE0CF744D9FA85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft
Manifest number: 0E7F
Signing time: Fri 24 Jul 2026 12:00:27 +0000
Manifest this update: Fri 24 Jul 2026 12:00:27 +0000
Manifest next update: Sat 25 Jul 2026 12:00:27 +0000
Files and hashes: 1: 3wE9z3o-LZC9L1Wi744_KuJH-nA.roa (hash: vmvu4StBrIILT2zOsTXLqhGSv13Lo4k+H588mDsH8cM=)
2: ZP-zCcKJrP_BvjSm8LZnXAAXE-o.crl (hash: 9JKv8Qgl2tdlWf0JeLcHH6ecFu5jAIW1CWgaE+wuoPg=)
3: amULFHSQIT1lD63zvSrNJGtGM-I.roa (hash: UX9F+FQcAi88JV/0o8okdIg01PgokJoY/+NJIGfsY+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:ff:91:1d:1c:e5:da:23:70:ee:0c:f7:44:d9:fa:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64ffb309c289acffc1be34a6f0b6675c001713ea
Validity
Not Before: Jul 24 12:00:27 2026 GMT
Not After : Jul 25 12:00:27 2026 GMT
Subject: CN=5ca9fe56248c031d4577f54862ed5f569232da0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0c:b2:77:36:e3:47:24:88:36:6f:33:c8:5a:
91:5b:54:a4:e7:93:43:e1:ca:76:32:3b:c7:dd:62:
c4:4f:29:91:a0:5f:78:8c:aa:87:07:c5:35:9c:d2:
b2:b9:59:8a:49:4a:ac:dc:e0:0a:85:f5:7e:03:13:
06:b5:40:fe:db:eb:91:97:fd:d6:9d:ae:c5:ea:99:
d6:3a:fd:1b:66:77:3e:d3:1b:99:3f:23:99:ab:c6:
bd:d6:11:bb:da:bf:fb:09:89:03:e6:d8:58:d7:72:
ec:4d:f2:d1:6a:bd:3c:53:bd:66:31:d6:dc:ef:fa:
6e:a9:7a:16:44:8f:e6:1e:6d:83:66:aa:6d:15:09:
ee:28:3a:db:6f:39:4f:dd:98:7d:6a:11:15:52:b9:
0a:8e:ac:c1:1f:4c:c2:45:a9:4e:ff:9d:fd:75:dc:
7d:1b:d8:83:36:01:0a:56:cc:a5:7c:8c:5f:87:52:
97:67:24:f7:6c:18:f9:fd:cf:81:45:c6:8a:48:da:
04:ca:d1:57:0e:17:e6:56:10:f0:db:7e:c3:14:b0:
70:3f:cb:ae:cf:11:75:90:15:3c:c3:36:99:8a:6e:
ba:bb:b5:86:20:e2:d2:a1:97:f0:e5:42:c3:ab:ea:
74:98:25:33:72:c2:ff:8c:dc:cc:3e:10:a1:5b:b1:
82:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:A9:FE:56:24:8C:03:1D:45:77:F5:48:62:ED:5F:56:92:32:DA:0A
X509v3 Authority Key Identifier:
keyid:64:FF:B3:09:C2:89:AC:FF:C1:BE:34:A6:F0:B6:67:5C:00:17:13:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:5c:f0:85:b0:f2:4e:6d:e9:4c:19:c0:cf:b7:02:02:09:4f:
f5:49:b3:c3:57:be:d3:af:99:a2:11:5f:ee:52:a9:ad:b7:e0:
52:e5:e0:17:95:01:84:1c:ce:43:77:59:d4:7a:e2:33:7e:55:
33:49:c2:0e:a6:fa:f0:60:e2:f2:42:99:64:ec:b9:4a:a2:3c:
ac:0b:9b:f9:9e:04:5e:0f:89:64:10:ba:7c:89:a1:56:0d:cd:
48:d9:76:47:b9:cf:c0:c2:66:b1:77:37:4d:f3:82:d2:06:ee:
b0:8b:cf:4d:8c:d5:17:c8:72:55:49:ef:36:90:51:a5:93:7e:
88:c9:ef:f1:5e:6a:a8:3d:6e:bb:63:3f:96:b6:55:55:a4:1d:
77:ee:cc:3e:1b:7a:a8:fa:1f:a9:b5:ea:d8:d0:c5:61:22:89:
45:94:43:75:6b:a4:17:51:85:eb:15:78:85:85:a1:4f:50:93:
66:4d:1e:2d:82:c2:da:cb:ee:dd:97:2e:af:f9:e7:75:1b:48:
31:e8:77:5a:9f:81:d2:b7:68:c2:95:73:93:2f:75:37:ed:b7:
85:88:7d:8f:9d:cb:25:9d:db:1b:a3:b3:83:08:6f:b2:04:1f:
69:a8:97:ea:6f:09:39:b6:54:c4:dd:54:39:ff:b4:5a:89:45:
67:47:06:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:09:30 2026 by rpki-client