Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/27d409-7659-453e-b36f-297d52f0c283/1/zzKCScw17CfMEOGLiCxsE4l8hJc.mft
File: zzKCScw17CfMEOGLiCxsE4l8hJc.mft (raw, json)
Hash identifier: 2MQOc7gCzy/8MWDBXDWLfgZZxQ8g9LMSxCi9ndWWjDY=
Subject key identifier: 28:5A:D0:0A:8D:CF:B5:F8:5C:40:76:A0:FB:3B:7F:A4:C5:BE:86:6E
Authority key identifier: CF:32:82:49:CC:35:EC:27:CC:10:E1:8B:88:2C:6C:13:89:7C:84:97
Certificate issuer: /CN=cf328249cc35ec27cc10e18b882c6c13897c8497
Certificate serial: 019F946DB1FD82BEE1261CE3FAC0FE6C9F36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zzKCScw17CfMEOGLiCxsE4l8hJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/27d409-7659-453e-b36f-297d52f0c283/1/zzKCScw17CfMEOGLiCxsE4l8hJc.mft
Manifest number: 1162
Signing time: Fri 24 Jul 2026 14:00:44 +0000
Manifest this update: Fri 24 Jul 2026 14:00:44 +0000
Manifest next update: Sat 25 Jul 2026 14:00:44 +0000
Files and hashes: 1: xybwCV1hWwBn4MLDW9HYu0-_w6w.asa (hash: t3PVU0MZBtOUV0rI7OL9UqMXFGu/+sqRp88+GVOPUEU=)
2: zzKCScw17CfMEOGLiCxsE4l8hJc.crl (hash: 75OrfSMNT2VypllTrfsyAtvrfODZkBOv0IWf/Z7NSho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/27d409-7659-453e-b36f-297d52f0c283/1/zzKCScw17CfMEOGLiCxsE4l8hJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/27d409-7659-453e-b36f-297d52f0c283/1/zzKCScw17CfMEOGLiCxsE4l8hJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zzKCScw17CfMEOGLiCxsE4l8hJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 14:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:6d:b1:fd:82:be:e1:26:1c:e3:fa:c0:fe:6c:9f:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf328249cc35ec27cc10e18b882c6c13897c8497
Validity
Not Before: Jul 24 14:00:44 2026 GMT
Not After : Jul 25 14:00:44 2026 GMT
Subject: CN=285ad00a8dcfb5f85c4076a0fb3b7fa4c5be866e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:41:6f:74:61:90:a2:b6:9b:e3:bf:66:4b:67:
4f:78:48:8c:75:50:b9:e1:68:f4:12:e7:43:00:34:
cc:e0:ca:8a:23:e4:e9:90:4b:2a:9e:d9:05:3f:d5:
77:00:e0:65:76:62:77:25:50:66:3b:c2:70:58:73:
72:1a:9a:81:2a:88:17:a6:2e:b5:1f:46:56:6e:f2:
0c:5f:e2:95:2c:1d:7c:c2:7c:bb:b3:b9:c7:e2:67:
29:99:b3:cb:95:e7:fa:3e:4f:c0:e8:de:32:99:7f:
87:1b:95:89:14:12:96:57:06:0f:24:98:bf:38:7d:
f9:d7:57:ab:38:e0:95:2f:aa:07:8f:10:ee:0f:a8:
a6:54:9f:b6:eb:55:ed:2c:6a:be:71:a9:62:97:6d:
22:a2:97:dd:71:f7:62:62:c2:78:72:0a:74:05:fa:
13:c4:ef:87:f5:28:2e:f8:fa:a9:ff:47:4d:e7:6d:
35:2d:72:de:84:e4:23:fc:14:c7:df:bb:8f:83:79:
9a:32:ee:17:43:5b:f1:11:7c:63:42:46:d4:da:ea:
cf:c7:01:45:d9:8e:32:40:a8:69:16:7f:58:83:8b:
53:60:72:4e:77:87:bc:e1:a7:02:3a:03:66:6d:23:
6b:70:f6:4c:11:98:8b:9a:8c:cf:e1:8e:2e:13:79:
7e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:5A:D0:0A:8D:CF:B5:F8:5C:40:76:A0:FB:3B:7F:A4:C5:BE:86:6E
X509v3 Authority Key Identifier:
keyid:CF:32:82:49:CC:35:EC:27:CC:10:E1:8B:88:2C:6C:13:89:7C:84:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zzKCScw17CfMEOGLiCxsE4l8hJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/27d409-7659-453e-b36f-297d52f0c283/1/zzKCScw17CfMEOGLiCxsE4l8hJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/27d409-7659-453e-b36f-297d52f0c283/1/zzKCScw17CfMEOGLiCxsE4l8hJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:81:7e:54:71:7f:9f:90:52:44:d5:35:30:86:83:b8:7f:d9:
2a:d1:e9:68:4b:85:39:af:7d:dc:cd:ec:26:43:81:4b:47:18:
c9:22:e9:d8:7a:99:8a:a9:d5:05:15:1e:b8:60:fc:2a:09:fc:
8d:08:ce:b7:99:ca:43:3e:43:b1:f1:ba:75:8f:68:0a:76:ba:
21:b0:b0:23:af:77:ab:19:ba:80:8e:a4:1e:1e:7a:cd:6e:00:
73:86:99:76:fe:cf:94:b5:b5:ce:98:ce:aa:14:81:c8:cb:f2:
09:3b:de:ab:a6:7a:7c:6c:9d:52:8b:18:7a:72:84:0f:97:f8:
56:fe:26:c4:b4:e7:c3:17:bd:32:21:c8:ad:23:a8:96:c9:c2:
30:ca:b3:13:86:f6:e0:90:5a:6b:49:c4:bf:76:e5:82:b7:d0:
85:cf:43:3c:dc:4c:4f:a9:08:29:91:b2:fc:85:1e:89:48:3f:
81:19:6a:5c:22:5f:16:68:6b:3e:12:25:3a:61:b4:ac:12:a1:
e4:1c:bd:1e:15:b5:f1:66:18:36:f8:36:23:89:ab:23:46:92:
46:97:bb:e5:57:fa:df:82:ac:22:31:a5:5d:fc:a5:e0:91:ab:
79:83:c0:a6:ae:ee:93:ee:92:94:dd:53:5d:d0:16:a1:9e:d0:
b3:ad:ee:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:28:06 2026 by rpki-client