Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/925ea2-fff8-4095-9d96-01cd47b6ca0d/1/ZJek5qz7ctUdKe5hpig29mBgl6Y.mft
File: ZJek5qz7ctUdKe5hpig29mBgl6Y.mft (raw, json)
Hash identifier: qeanJIyvbW8kSAs653asFvtTkWxjp5CrC6InYsNASoU=
Subject key identifier: BB:F5:AC:7B:7B:83:06:33:EE:11:97:5E:83:A7:42:12:78:55:AE:3D
Authority key identifier: 64:97:A4:E6:AC:FB:72:D5:1D:29:EE:61:A6:28:36:F6:60:60:97:A6
Certificate issuer: /CN=6497a4e6acfb72d51d29ee61a62836f6606097a6
Certificate serial: 019F916D858B25F3D289260576792EC4EB3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZJek5qz7ctUdKe5hpig29mBgl6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/925ea2-fff8-4095-9d96-01cd47b6ca0d/1/ZJek5qz7ctUdKe5hpig29mBgl6Y.mft
Manifest number: 0842
Signing time: Fri 24 Jul 2026 00:01:41 +0000
Manifest this update: Fri 24 Jul 2026 00:01:41 +0000
Manifest next update: Sat 25 Jul 2026 00:01:41 +0000
Files and hashes: 1: ZJek5qz7ctUdKe5hpig29mBgl6Y.crl (hash: 6XqIqqRf3WnilPi95RUt6ywCDgCjAMtosvFdEz+3Lrs=)
2: t-CPneeaVHYgCJeN9aRr26OHu8s.roa (hash: i5R3976Bs/xCdmNx5+5wTM2K2LQaNxrVpxX02Fkd/C0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/925ea2-fff8-4095-9d96-01cd47b6ca0d/1/ZJek5qz7ctUdKe5hpig29mBgl6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/925ea2-fff8-4095-9d96-01cd47b6ca0d/1/ZJek5qz7ctUdKe5hpig29mBgl6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZJek5qz7ctUdKe5hpig29mBgl6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:85:8b:25:f3:d2:89:26:05:76:79:2e:c4:eb:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6497a4e6acfb72d51d29ee61a62836f6606097a6
Validity
Not Before: Jul 24 00:01:41 2026 GMT
Not After : Jul 25 00:01:41 2026 GMT
Subject: CN=bbf5ac7b7b830633ee11975e83a742127855ae3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d0:94:a9:49:be:c9:8f:b6:1a:3a:11:67:9f:
e6:de:2e:d5:cc:86:c4:74:22:b7:fe:f7:9e:6c:8f:
c7:18:01:43:90:87:b9:25:4a:97:ed:e5:8e:44:e3:
b6:a5:08:a5:03:31:5f:e9:3d:16:b1:68:18:f8:f5:
e9:7f:c6:84:3c:87:5e:03:c7:7b:42:87:4e:f6:15:
e4:e7:c5:5d:5d:38:0d:f1:95:c0:79:a3:5b:68:80:
06:7f:27:25:34:1e:da:db:84:e5:1e:1d:44:98:c5:
3b:ef:a8:3c:91:57:02:7f:69:41:0c:e2:ee:74:8b:
05:5b:4e:21:13:25:cc:f4:e4:d2:1d:45:85:9f:73:
03:4d:cf:4b:be:6a:84:cf:03:1f:16:42:2d:da:6e:
11:37:0a:7e:22:f2:86:56:1e:33:79:6b:1c:95:3b:
a7:cb:d4:7d:d8:0a:58:2c:97:a2:9a:48:cd:ef:88:
a3:b1:f7:6a:eb:f1:0f:65:62:b6:38:8d:17:c2:bf:
45:2e:4c:8a:aa:b3:8d:8f:f8:fa:b9:78:92:f4:d6:
f4:49:29:1e:03:9b:ab:eb:93:75:38:18:e4:1d:44:
e8:8b:f8:90:45:3a:a6:c7:ea:41:b4:41:e3:03:f2:
a9:73:13:d7:8f:f8:ba:2f:67:7e:e1:29:14:c7:57:
c6:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:F5:AC:7B:7B:83:06:33:EE:11:97:5E:83:A7:42:12:78:55:AE:3D
X509v3 Authority Key Identifier:
keyid:64:97:A4:E6:AC:FB:72:D5:1D:29:EE:61:A6:28:36:F6:60:60:97:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZJek5qz7ctUdKe5hpig29mBgl6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/925ea2-fff8-4095-9d96-01cd47b6ca0d/1/ZJek5qz7ctUdKe5hpig29mBgl6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/925ea2-fff8-4095-9d96-01cd47b6ca0d/1/ZJek5qz7ctUdKe5hpig29mBgl6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:0a:5d:82:77:74:f3:74:a6:71:f9:69:ac:e9:57:46:14:14:
09:7e:44:20:75:25:c2:0e:a6:76:5c:58:5b:ae:b7:32:39:d8:
73:e8:7d:81:98:30:61:41:21:24:2d:b1:2a:55:f6:74:52:cb:
de:e6:3e:d8:fc:1a:42:6d:1a:c2:ea:0a:fe:dd:05:c4:af:f2:
df:a7:30:ea:89:72:8e:3e:df:4a:9c:5f:9f:44:a6:2a:01:94:
2e:66:fc:4f:14:6e:cc:33:ff:81:13:2a:bc:96:64:34:0c:c5:
6d:3b:19:cd:ba:ef:f8:a1:cf:55:91:c5:c8:20:4f:d7:0c:bb:
01:d2:2e:5c:c9:df:40:4b:d1:55:d1:9e:4a:94:17:f1:45:44:
bb:86:17:64:0e:c3:fc:73:a2:d9:6d:71:f3:1e:ae:8d:b1:70:
22:5e:71:ba:22:cf:78:9c:13:e1:28:be:87:99:11:0b:1a:b0:
5b:a0:0e:f7:33:ac:f4:d2:06:ef:99:b0:25:47:10:29:8b:b4:
35:11:be:ad:4a:52:17:3a:11:9f:6e:ea:2c:f0:f1:6e:37:0b:
4c:09:01:31:ed:b0:e4:31:33:b6:7b:42:62:c8:11:5d:49:6a:
06:93:b5:c4:fa:b8:c4:f1:4d:3b:f5:04:51:51:c8:d9:e8:bf:
13:55:94:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:05:14 2026 by rpki-client