Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/zWj3o5G3sWSe1JA0gtPpMe0049g.mft
File: zWj3o5G3sWSe1JA0gtPpMe0049g.mft (raw, json)
Hash identifier: 1WBnfQxs4+zSoLShhcdz08xkoNuYlqtSQW057WpHrdU=
Subject key identifier: 6B:49:8C:9D:C4:46:90:2C:C8:4A:BD:92:FE:F0:19:D0:0C:52:88:15
Authority key identifier: CD:68:F7:A3:91:B7:B1:64:9E:D4:90:34:82:D3:E9:31:ED:34:E3:D8
Certificate issuer: /CN=cd68f7a391b7b1649ed4903482d3e931ed34e3d8
Certificate serial: 019F93245737FC88D07560BEDD4F7E1A9ACE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zWj3o5G3sWSe1JA0gtPpMe0049g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/zWj3o5G3sWSe1JA0gtPpMe0049g.mft
Manifest number: 12C3
Signing time: Fri 24 Jul 2026 08:01:00 +0000
Manifest this update: Fri 24 Jul 2026 08:01:00 +0000
Manifest next update: Sat 25 Jul 2026 08:01:00 +0000
Files and hashes: 1: 1-xP6wGH4E4j9NJ-NB2QfLldx1Lw.roa (hash: uFFlZsAMKLJKDEktW5ybjbZi8RHcBaE5UQZ62izVnr4=)
2: G9U4X93rXqstWDjqCmr74O0MOOc.roa (hash: lHIU6yFEQWHJAGlwWMO/pP3VoRev0tS4Byvjv7Nl/Nk=)
3: SV_A5OMf5Dv_YVGf3i03i121qDE.roa (hash: Yx1VNJorHPI+3bEwTwwZMtNZ1vpLF6jyHjPFF9j0vFs=)
4: u0VefA4FNPAM3OaDOe1uGO8G7GM.roa (hash: L/EGbgrpKOwV4dXB0O77kAg3sNSvZROrNTY/PmdUGpM=)
5: zWj3o5G3sWSe1JA0gtPpMe0049g.crl (hash: af00EVRyroHRyti1eyB47iECfKDyM9MHQ0wUuZPLNDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/zWj3o5G3sWSe1JA0gtPpMe0049g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/zWj3o5G3sWSe1JA0gtPpMe0049g.mft
rsync://rpki.ripe.net/repository/DEFAULT/zWj3o5G3sWSe1JA0gtPpMe0049g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:24:57:37:fc:88:d0:75:60:be:dd:4f:7e:1a:9a:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd68f7a391b7b1649ed4903482d3e931ed34e3d8
Validity
Not Before: Jul 24 08:01:00 2026 GMT
Not After : Jul 25 08:01:00 2026 GMT
Subject: CN=6b498c9dc446902cc84abd92fef019d00c528815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:da:8e:d7:43:c6:fe:e2:99:f9:c8:41:6b:e5:
0e:2a:62:cc:51:97:fb:ef:d7:a1:24:5b:a8:bf:34:
60:7b:ca:6b:c4:d0:b2:35:14:90:8d:ca:6e:0f:4d:
27:5e:fa:93:eb:15:6b:95:a7:5e:cf:60:1c:43:b2:
72:61:ce:0c:29:8e:66:63:71:4e:96:58:bb:bc:94:
53:0c:ef:23:71:4d:0a:fe:71:fa:5c:60:a3:1f:05:
e3:29:7c:eb:d4:07:dc:f7:b0:50:7c:ad:e1:cc:80:
09:7c:25:64:d6:44:df:c4:e9:01:6e:a9:a0:66:0d:
0f:d9:f0:21:c5:65:60:15:df:24:4a:9e:bd:69:1d:
79:16:b6:fa:25:12:79:07:8a:95:4f:43:14:41:96:
cc:c3:dd:f0:ec:11:ef:31:9c:ba:08:aa:da:3c:33:
ad:44:6c:d5:4f:8a:e3:96:62:c1:af:90:32:0c:ff:
6f:e1:75:4b:aa:ec:ac:45:74:76:b1:e4:88:5e:a5:
de:08:63:e9:b3:a2:d0:06:58:cb:74:98:9d:cf:0d:
cc:4a:03:e4:93:15:c5:82:4e:47:bd:a3:5b:c4:68:
61:5b:8c:2c:59:6f:7d:9c:80:6a:d8:08:cd:9c:40:
ba:23:dc:9e:14:38:c5:5e:7e:b1:6c:2d:06:81:bf:
28:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:49:8C:9D:C4:46:90:2C:C8:4A:BD:92:FE:F0:19:D0:0C:52:88:15
X509v3 Authority Key Identifier:
keyid:CD:68:F7:A3:91:B7:B1:64:9E:D4:90:34:82:D3:E9:31:ED:34:E3:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWj3o5G3sWSe1JA0gtPpMe0049g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/zWj3o5G3sWSe1JA0gtPpMe0049g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/zWj3o5G3sWSe1JA0gtPpMe0049g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:cd:d1:1d:17:93:59:83:94:7c:16:1c:ec:50:de:0f:02:39:
fc:f7:26:c3:a8:9f:21:74:3a:32:db:9e:92:2c:e7:d6:69:e6:
86:0a:d1:af:2e:df:c0:15:6e:54:52:f9:57:b6:5d:24:ec:b0:
02:6b:28:ba:8d:7d:b5:b1:90:59:81:17:df:de:67:62:3c:80:
6a:43:00:65:bc:77:a5:99:54:06:97:e2:b3:54:45:94:e6:d2:
67:d3:bd:e3:4d:99:f0:7e:4c:d4:8a:66:a9:36:af:2f:a4:bc:
44:b2:ab:d1:25:2a:a0:26:4f:e3:bb:2e:48:7e:62:57:3d:1d:
72:9a:e0:33:84:86:e9:f2:8c:5c:c1:18:92:95:4d:e1:77:9d:
08:90:68:8f:62:34:45:9f:cd:08:34:42:57:b3:d6:b0:f6:3a:
4c:7a:28:0e:dd:f6:41:90:c7:ef:75:93:81:ac:44:62:d9:12:
7c:c2:21:61:3c:38:6d:1e:ab:bd:55:5f:66:f4:45:13:28:c8:
0c:88:cf:76:34:2f:57:5d:a6:e2:a9:fb:92:5e:00:8e:2f:6f:
d7:f0:fd:d7:69:e9:51:e0:89:a6:ad:86:e3:be:79:7e:86:a1:
29:b9:2e:d0:2c:a7:20:bb:cf:33:4a:31:3b:c4:20:53:d3:3f:
5e:52:20:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:03:11 2026 by rpki-client