Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.mft
File: zo6b4kjHQbpqJqyM_iwrt8LXo7E.mft (raw, json)
Hash identifier: 4IXXoh4n6O0gy2HUJFc0I0v69sXAb4ZGfXjf7KmbBf4=
Subject key identifier: 46:7F:E3:A1:C3:F1:C4:B4:B1:42:43:E2:52:29:78:A6:C0:53:24:16
Authority key identifier: CE:8E:9B:E2:48:C7:41:BA:6A:26:AC:8C:FE:2C:2B:B7:C2:D7:A3:B1
Certificate issuer: /CN=ce8e9be248c741ba6a26ac8cfe2c2bb7c2d7a3b1
Certificate serial: 019F954A130AFCF42B51E340D67665B8EADE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zo6b4kjHQbpqJqyM_iwrt8LXo7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.mft
Manifest number: 131C
Signing time: Fri 24 Jul 2026 18:01:27 +0000
Manifest this update: Fri 24 Jul 2026 18:01:27 +0000
Manifest next update: Sat 25 Jul 2026 18:01:27 +0000
Files and hashes: 1: z0HMvI8Tn4kNW4qTvegWr7zZfkQ.roa (hash: gn2Rwh38asVwA7jLccAuFqntHaZG2BuAuv36mcj+c3Q=)
2: zo6b4kjHQbpqJqyM_iwrt8LXo7E.crl (hash: 6bs2ymOiH8nFrJvjLQvCPwQfVid2AT4WfW4hT3xonwI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/zo6b4kjHQbpqJqyM_iwrt8LXo7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:4a:13:0a:fc:f4:2b:51:e3:40:d6:76:65:b8:ea:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce8e9be248c741ba6a26ac8cfe2c2bb7c2d7a3b1
Validity
Not Before: Jul 24 18:01:27 2026 GMT
Not After : Jul 25 18:01:27 2026 GMT
Subject: CN=467fe3a1c3f1c4b4b14243e2522978a6c0532416
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c2:bb:a6:37:d3:5a:5b:33:55:75:7e:00:cf:
8e:16:23:c8:37:4c:4c:bc:4e:5c:4b:d1:66:2f:9f:
3b:ef:30:ac:7b:3a:0f:a2:4c:ed:7f:c4:18:3b:3f:
23:13:e1:60:7d:54:d7:ea:84:f7:6c:d1:e0:4a:b1:
52:1a:55:40:67:f2:2b:ae:3f:cb:c5:64:ac:78:83:
e4:5b:99:b3:2d:07:d1:f2:16:a3:8b:30:47:7b:cd:
8e:40:1f:c2:77:5f:25:5c:89:91:27:b4:d3:2b:5e:
92:00:76:5b:0c:88:bb:ad:32:c7:00:59:16:e2:09:
11:a8:96:a8:44:48:af:8f:88:05:64:ac:ca:48:bf:
38:11:55:21:86:c7:86:67:29:7f:2a:d4:c2:c2:7b:
48:14:06:f2:25:2f:f3:ca:59:ef:9e:a5:d4:a5:02:
6a:88:51:fb:56:d0:a1:6f:c5:3e:c1:65:9a:01:90:
6f:78:4d:ca:62:bf:35:70:bc:c1:0f:84:1a:ba:57:
a1:3f:fa:9a:1a:17:e8:48:2d:ac:03:19:26:c3:c6:
79:2f:58:8e:eb:80:91:ff:19:58:00:d8:d9:6b:0c:
3f:b9:fc:96:d0:83:56:41:a8:a2:bf:f2:44:ea:00:
b1:ed:fa:bb:38:51:58:16:12:e4:d8:aa:c7:63:de:
d5:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:7F:E3:A1:C3:F1:C4:B4:B1:42:43:E2:52:29:78:A6:C0:53:24:16
X509v3 Authority Key Identifier:
keyid:CE:8E:9B:E2:48:C7:41:BA:6A:26:AC:8C:FE:2C:2B:B7:C2:D7:A3:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zo6b4kjHQbpqJqyM_iwrt8LXo7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:57:05:af:b7:62:2c:0c:b8:30:e8:27:ca:4a:2f:2e:be:e1:
a4:0e:34:9c:60:57:8e:28:cb:66:10:37:d5:dc:80:2c:18:47:
92:f8:75:05:59:5f:b9:a7:52:90:71:91:21:11:f6:c6:1f:e4:
e3:7b:f4:a6:90:14:f0:35:13:7f:eb:5e:32:0a:70:d4:c8:27:
ee:e8:a5:17:01:cf:92:dd:0b:d5:87:35:35:e2:05:61:cb:fd:
20:3b:30:dd:ad:af:ca:93:e5:74:e5:61:6a:4d:bd:88:5f:ec:
26:03:d5:99:da:6e:2e:33:e9:85:62:62:f6:56:27:bf:e2:09:
be:9a:90:d2:de:28:da:91:42:b9:22:0f:f2:db:fe:de:61:29:
44:26:cd:80:76:ed:7a:00:9c:3b:04:05:e1:da:f8:6d:44:10:
e9:b9:14:d6:32:26:db:eb:c3:e5:c9:05:c5:67:a4:7f:7b:5e:
4e:cb:da:6c:4d:70:9f:ec:53:c4:cb:5b:e8:d9:e7:be:63:08:
80:6d:a0:d7:b4:86:81:42:c8:d7:59:32:10:73:27:97:4b:7a:
51:a2:f7:82:28:25:50:00:58:0e:17:72:84:1f:a6:b0:88:63:
67:b8:82:80:f0:a9:67:e5:a1:27:d3:a9:88:43:ad:33:eb:76:
31:52:4c:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:20:13 2026 by rpki-client