Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.mft
File: zPJHTehBFnUrkICnoNsyJTXFYCY.mft (raw, json)
Hash identifier: J3iLm5ScKm0wCZxUO3BSzHBT3s/KmR2/BDAlz83fV9o=
Subject key identifier: DC:6A:18:D3:AC:9C:61:20:19:55:05:C0:17:B6:94:15:B5:E6:C2:79
Authority key identifier: CC:F2:47:4D:E8:41:16:75:2B:90:80:A7:A0:DB:32:25:35:C5:60:26
Certificate issuer: /CN=ccf2474de84116752b9080a7a0db322535c56026
Certificate serial: 019F9548FDBA0D6090D0C70C84FAF2D5697E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zPJHTehBFnUrkICnoNsyJTXFYCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.mft
Manifest number: 13E7
Signing time: Fri 24 Jul 2026 18:00:16 +0000
Manifest this update: Fri 24 Jul 2026 18:00:16 +0000
Manifest next update: Sat 25 Jul 2026 18:00:16 +0000
Files and hashes: 1: DmCEvnPa2cR0m4Wq8MgYYGsM2fc.roa (hash: FlCMboWRwBxntExiPGM7Dlg1+J7ywCWO67fbQBOqoGo=)
2: zPJHTehBFnUrkICnoNsyJTXFYCY.crl (hash: 2nshc4UHcOvGGprhVbzw9aHK+mdEC48OPddR/rNNm/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zPJHTehBFnUrkICnoNsyJTXFYCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:48:fd:ba:0d:60:90:d0:c7:0c:84:fa:f2:d5:69:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccf2474de84116752b9080a7a0db322535c56026
Validity
Not Before: Jul 24 18:00:16 2026 GMT
Not After : Jul 25 18:00:16 2026 GMT
Subject: CN=dc6a18d3ac9c6120195505c017b69415b5e6c279
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:61:82:22:5f:4d:8f:72:06:90:5d:96:a7:69:
84:ed:52:ae:b3:0e:00:b2:0d:94:02:d0:ad:e3:f3:
90:41:0b:a9:92:d3:8b:91:84:18:c3:e7:f4:c2:22:
35:49:9b:7f:03:a3:96:dc:98:2b:c8:a6:e4:6c:c7:
15:26:58:57:94:dd:27:fa:a3:91:b4:cb:16:b7:e5:
fb:6a:7e:b5:6f:85:f5:cb:81:4e:71:ad:5c:17:e7:
36:42:e2:b0:94:39:86:b3:a4:0b:67:75:91:e1:c9:
1d:e2:5c:cc:24:92:cb:31:72:42:51:cc:31:6b:48:
55:12:49:7b:8e:a6:79:0e:5a:ba:5d:74:00:3a:ee:
f9:57:49:3c:b0:85:62:e0:f6:f8:e6:fc:19:03:03:
4b:fe:83:a4:7a:1c:2a:e8:74:09:76:12:d5:5e:8f:
dd:76:2f:00:0f:02:df:42:77:11:74:29:06:80:58:
f5:d2:42:17:9e:76:0a:da:2b:90:fb:f0:64:f0:19:
70:27:df:7b:68:ed:81:8a:54:cf:32:9a:4f:25:50:
9e:1c:f9:85:90:3f:fa:91:a3:f8:f1:0e:94:1b:61:
07:5a:41:ee:ed:a0:0e:4a:e0:60:ca:c6:c1:6d:f8:
16:43:ce:3d:a0:14:5f:b4:5b:10:aa:32:96:89:d4:
b4:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:6A:18:D3:AC:9C:61:20:19:55:05:C0:17:B6:94:15:B5:E6:C2:79
X509v3 Authority Key Identifier:
keyid:CC:F2:47:4D:E8:41:16:75:2B:90:80:A7:A0:DB:32:25:35:C5:60:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPJHTehBFnUrkICnoNsyJTXFYCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:d0:ba:40:c8:3d:ac:a8:2a:e5:77:e5:0c:41:19:3f:6d:53:
bd:76:60:24:23:a9:c9:99:96:09:a7:f1:95:b1:30:81:e0:66:
f8:b0:71:7f:2d:e3:33:66:e9:95:e8:31:4d:39:c4:97:20:ef:
b3:12:f2:2c:64:a6:15:a5:99:42:85:f3:88:5e:91:00:da:da:
78:d4:c9:ce:83:3e:16:e1:a2:12:1e:d1:ed:5b:f0:bc:f0:f2:
20:37:4b:eb:3a:7b:66:c5:39:99:28:4b:8f:30:f8:5f:26:2c:
e7:4a:e2:ac:d7:49:8c:18:5b:df:37:52:89:bb:2f:2a:ab:2f:
27:c2:82:7a:e6:a5:66:1d:5f:c4:c1:c9:b2:be:d4:81:16:ae:
31:4a:3a:62:95:62:c5:6e:89:41:cc:f9:5e:2e:1f:35:e8:8d:
ae:6d:d1:39:7a:43:4d:9f:bb:16:2c:84:a6:20:9a:85:f8:3c:
ea:69:ef:02:74:15:93:47:18:5d:aa:aa:6a:55:8a:ff:27:db:
ea:cf:89:b7:08:55:9c:84:b9:6f:96:ea:bb:d6:59:87:7c:07:
50:c0:c2:ff:21:2a:ec:0b:1f:b2:80:f4:1c:70:20:89:f3:90:
64:54:3c:0c:31:1b:ce:8f:fc:38:cf:c1:0c:d4:74:56:50:1e:
8a:19:ba:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:07:12 2026 by rpki-client