Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/_ZRaQP7pGQtdrjV1RenSN91_Kr0.mft
File: _ZRaQP7pGQtdrjV1RenSN91_Kr0.mft (raw, json)
Hash identifier: 2Jc3DyNC2bS6r1sigps83V+4I7h/JGcGWDCjY6Wwmug=
Subject key identifier: 44:40:BA:EC:9F:87:C7:27:AC:BF:19:53:ED:70:2B:5A:65:BC:4A:A7
Authority key identifier: FD:94:5A:40:FE:E9:19:0B:5D:AE:35:75:45:E9:D2:37:DD:7F:2A:BD
Certificate issuer: /CN=fd945a40fee9190b5dae357545e9d237dd7f2abd
Certificate serial: 019F916D63BA70F44686AC35E9D23FAD5B1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ZRaQP7pGQtdrjV1RenSN91_Kr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/_ZRaQP7pGQtdrjV1RenSN91_Kr0.mft
Manifest number: 40
Signing time: Fri 24 Jul 2026 00:01:32 +0000
Manifest this update: Fri 24 Jul 2026 00:01:32 +0000
Manifest next update: Sat 25 Jul 2026 00:01:32 +0000
Files and hashes: 1: FneKNxnzANLquvs5RDh285FbFjo.roa (hash: wM7MaFPVmqdgH2laeuL0dQ1Y/ck3S2iV1sW46582MtM=)
2: _ZRaQP7pGQtdrjV1RenSN91_Kr0.crl (hash: RIK/AZiQpagM7aSDqV3YCT7B5bWv10tOh9u7/khdVU4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/_ZRaQP7pGQtdrjV1RenSN91_Kr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/_ZRaQP7pGQtdrjV1RenSN91_Kr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_ZRaQP7pGQtdrjV1RenSN91_Kr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:63:ba:70:f4:46:86:ac:35:e9:d2:3f:ad:5b:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd945a40fee9190b5dae357545e9d237dd7f2abd
Validity
Not Before: Jul 24 00:01:32 2026 GMT
Not After : Jul 25 00:01:32 2026 GMT
Subject: CN=4440baec9f87c727acbf1953ed702b5a65bc4aa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1b:dc:50:83:59:7d:a7:18:b5:fd:ba:48:84:
0a:bf:a5:31:12:85:13:aa:01:9e:51:ea:7a:3b:e1:
99:5e:67:f6:70:81:3c:02:5f:35:0d:1f:e6:64:0e:
13:a8:a7:90:97:30:e4:21:f1:e0:db:d7:0f:76:59:
89:16:57:7c:f8:17:d6:dd:09:c3:23:77:bd:a1:3f:
f6:d1:30:48:71:ca:47:3b:a9:a5:57:7d:8d:cb:09:
d0:8f:27:94:eb:42:e7:b7:55:ab:5a:4c:c6:e1:9e:
68:8a:d7:7b:78:16:78:02:67:51:52:3a:0c:17:2e:
98:70:b3:a2:20:fd:3f:5a:09:8c:8e:5e:a3:1f:6e:
fc:e2:2d:10:df:9b:62:44:4a:3a:8e:d4:96:de:47:
1c:ef:5d:ef:93:ef:4a:37:75:e5:05:2d:dd:8f:13:
9b:5d:00:33:70:3f:e6:73:82:c5:39:a4:02:75:af:
03:0e:fb:2c:06:6f:85:3a:c9:8e:8e:39:e6:c8:fc:
08:73:9c:c5:cf:1b:f7:14:ca:82:0e:cc:70:d5:c0:
15:40:75:24:19:54:f8:af:75:e1:af:77:7a:72:fa:
35:56:b4:4b:f9:dc:de:1a:78:e0:fc:f3:06:29:50:
f0:8a:00:c8:4d:7a:5e:f6:65:7b:b7:48:64:ac:bb:
22:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:40:BA:EC:9F:87:C7:27:AC:BF:19:53:ED:70:2B:5A:65:BC:4A:A7
X509v3 Authority Key Identifier:
keyid:FD:94:5A:40:FE:E9:19:0B:5D:AE:35:75:45:E9:D2:37:DD:7F:2A:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ZRaQP7pGQtdrjV1RenSN91_Kr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/_ZRaQP7pGQtdrjV1RenSN91_Kr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/_ZRaQP7pGQtdrjV1RenSN91_Kr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:6b:bd:cd:b6:0e:fb:c3:e5:50:14:4e:b4:84:7e:23:29:06:
7e:94:32:e2:84:e3:39:26:1e:12:1a:43:16:16:f4:f7:e8:21:
db:54:a7:f1:01:79:5f:7e:5f:54:72:ad:48:74:b7:d4:84:3d:
83:52:b1:2a:fe:00:d0:65:3f:30:1b:fb:70:5e:ad:57:78:54:
1d:de:46:b5:34:05:9a:6e:df:45:2f:38:b6:c1:22:3d:c8:7b:
ac:1b:aa:a3:64:24:d2:4d:84:21:32:5b:81:67:a8:5a:a4:37:
80:1b:c1:5b:93:81:34:af:1b:56:d2:53:ec:72:aa:28:25:5c:
22:22:fb:14:fa:ac:48:74:69:c9:1f:5f:cf:72:fa:22:ab:4a:
18:75:1c:36:cb:c8:f4:c7:14:bb:cc:bd:45:6e:3a:80:92:4b:
db:b2:2b:ec:a9:f6:fe:1d:81:7f:ef:01:38:4a:c7:37:e1:4f:
6b:06:d0:5a:d3:30:8e:9c:bb:97:95:e9:eb:67:aa:31:ca:fc:
05:f4:6c:a8:fc:9f:47:5f:03:b5:0d:d4:a6:94:bf:a0:8a:65:
6c:bd:b9:0a:ca:5f:3e:84:e0:40:a9:0d:49:61:11:fc:d7:0a:
0c:da:07:d1:05:77:e4:0b:2f:94:c8:e2:61:a8:ed:11:08:09:
68:38:75:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:36:27 2026 by rpki-client