Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.mft
File: zJd-nVKvvEd5nTl1_O6KxRygz2o.mft (raw, json)
Hash identifier: Gm3u3jlgxCFzjAr7H3PoLANCnat5BZrhkTRyM409pv8=
Subject key identifier: 56:C5:B9:67:CF:0C:B6:12:B9:BB:F8:42:9A:FF:2B:EB:71:A1:F2:11
Authority key identifier: CC:97:7E:9D:52:AF:BC:47:79:9D:39:75:FC:EE:8A:C5:1C:A0:CF:6A
Certificate issuer: /CN=cc977e9d52afbc47799d3975fcee8ac51ca0cf6a
Certificate serial: 019F927F05CE72C623636A7927D9509B6E7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zJd-nVKvvEd5nTl1_O6KxRygz2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.mft
Manifest number: 189A
Signing time: Fri 24 Jul 2026 05:00:25 +0000
Manifest this update: Fri 24 Jul 2026 05:00:25 +0000
Manifest next update: Sat 25 Jul 2026 05:00:25 +0000
Files and hashes: 1: Sq1CvQy8o0B9tgh2Xu1eMwRJZtk.roa (hash: HdfFsuae+bs6Px2O/nXidzw9nHeIbmVY360ACfcO/uA=)
2: apKWJZAqjwjRd0dehHbbTa9ZY3A.roa (hash: nVaIovGi66UncedynfpwyGBTPpXsXon+jV7FMQbYQEg=)
3: zJd-nVKvvEd5nTl1_O6KxRygz2o.crl (hash: mzE9MgnA5GthQU1rOPyMZLBaDIPnQ2ma6iBPbvHUrhQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/zJd-nVKvvEd5nTl1_O6KxRygz2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7f:05:ce:72:c6:23:63:6a:79:27:d9:50:9b:6e:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc977e9d52afbc47799d3975fcee8ac51ca0cf6a
Validity
Not Before: Jul 24 05:00:25 2026 GMT
Not After : Jul 25 05:00:25 2026 GMT
Subject: CN=56c5b967cf0cb612b9bbf8429aff2beb71a1f211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:82:df:5e:e7:6b:1f:96:e5:f1:56:88:eb:8b:
5f:d2:75:f1:ed:09:d7:34:f5:3a:58:36:1c:3e:d9:
33:61:09:2b:44:4a:e7:f5:8b:01:fd:70:ad:e2:d2:
32:5e:26:bc:ab:01:ea:70:47:8a:1b:b6:85:44:3c:
3c:56:a9:da:c2:43:c4:f6:94:9f:5d:b3:25:dd:33:
94:7c:ed:78:58:e5:20:33:65:3f:89:87:a1:da:97:
f7:43:85:92:82:c1:c2:41:5a:3b:5d:04:d5:6a:a1:
ea:d9:bf:3d:7b:8f:6c:71:ff:f9:bd:6a:5c:9e:6f:
a1:7f:fa:50:a9:3e:53:cb:25:8e:23:dd:5a:e9:c8:
07:38:59:9b:40:3b:c6:b4:ce:c5:62:cd:0d:db:c3:
f8:38:3c:35:e8:5c:56:ab:3c:5d:aa:d5:fc:12:8b:
cd:00:76:cb:09:aa:b7:37:a3:61:86:42:d2:aa:94:
fd:d8:32:b4:e8:f5:e4:df:18:8e:89:06:b6:6e:6c:
20:c8:f9:02:da:f0:0a:b7:7e:f2:7d:e5:a0:f5:74:
62:8f:64:7a:0b:7b:9b:8d:06:e0:c2:d4:95:31:e0:
c2:f2:d0:c7:cf:88:c6:51:8a:25:03:5a:b1:c8:3c:
b0:56:97:14:b3:fa:72:f4:e3:0c:b0:43:5d:c7:a5:
41:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:C5:B9:67:CF:0C:B6:12:B9:BB:F8:42:9A:FF:2B:EB:71:A1:F2:11
X509v3 Authority Key Identifier:
keyid:CC:97:7E:9D:52:AF:BC:47:79:9D:39:75:FC:EE:8A:C5:1C:A0:CF:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zJd-nVKvvEd5nTl1_O6KxRygz2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:5c:93:1a:1b:7c:5f:39:8e:3d:21:16:6b:8a:a1:6c:09:14:
1a:b5:ed:53:83:f9:f7:47:ed:20:1b:7a:72:6a:3f:1b:84:ed:
f8:fa:bb:7e:34:fa:b5:25:96:50:3c:a8:3a:03:b2:1e:52:5f:
59:42:2e:82:f2:54:6b:22:a4:33:1f:8e:1c:1d:1b:5c:3a:5f:
d8:d1:61:16:96:d6:c8:30:a8:1b:30:72:73:e9:8f:f7:12:0b:
92:05:18:0c:f4:51:db:9d:72:86:a3:1b:2c:f6:38:52:41:a6:
02:6f:a4:8d:7c:a2:b2:40:43:2e:e5:d4:09:d0:42:be:84:4f:
08:bd:f8:58:b2:d0:55:e2:15:eb:e7:10:c8:a3:0c:9d:8c:00:
89:32:1a:37:23:f8:78:9f:22:4e:de:fd:91:93:1e:66:6a:c3:
5d:a1:8d:35:6c:0d:e4:8a:c0:17:94:56:a8:4b:bd:ef:fd:58:
a9:a1:dd:49:d9:9e:36:8d:59:01:27:77:14:ee:1c:fa:04:08:
25:4a:84:63:a4:9a:6d:47:50:28:64:66:ec:d7:98:1e:74:b2:
e6:37:7e:6d:04:b0:f0:71:c9:e4:a0:99:af:cc:79:4c:63:78:
1a:c6:e5:e4:de:b5:51:41:41:47:38:83:86:8a:f9:d0:77:53:
1e:43:ee:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:27:30 2026 by rpki-client