Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.mft
File: rzrc42ZL8Of2iP9BIlUXNMTRR1Y.mft (raw, json)
Hash identifier: 97fyWmAwZQbxkZ5oOzDEM7yEkTf+VVBzgcTEDwK1650=
Subject key identifier: 72:A9:73:F7:F3:F9:04:EC:2C:E4:8C:9B:52:5A:77:10:8A:10:23:0F
Authority key identifier: AF:3A:DC:E3:66:4B:F0:E7:F6:88:FF:41:22:55:17:34:C4:D1:47:56
Certificate issuer: /CN=af3adce3664bf0e7f688ff4122551734c4d14756
Certificate serial: 019F8EA2EDC3D9C16951D88AB6978AFF8224
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.mft
Manifest number: 03FB
Signing time: Thu 23 Jul 2026 11:01:09 +0000
Manifest this update: Thu 23 Jul 2026 11:01:09 +0000
Manifest next update: Fri 24 Jul 2026 11:01:09 +0000
Files and hashes: 1: hJZnvXC0-UgTlF_AH76uiPfGV7c.asa (hash: p2cFMytFL5OC6zEHyn7h+6EUDN+jaMNyN9xu55GAgrQ=)
2: rzrc42ZL8Of2iP9BIlUXNMTRR1Y.crl (hash: J/rQyYPIdiI90tgSCZKNdWcSo8pEqwRGhocrxfuYq0o=)
3: ymjEj-AVl-jhoYqun7KK_jww1EY.roa (hash: Lravz6mXezUcFlH14r837C4PlhGpAXXPBKh9Ost0iM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:ed:c3:d9:c1:69:51:d8:8a:b6:97:8a:ff:82:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af3adce3664bf0e7f688ff4122551734c4d14756
Validity
Not Before: Jul 23 11:01:09 2026 GMT
Not After : Jul 24 11:01:09 2026 GMT
Subject: CN=72a973f7f3f904ec2ce48c9b525a77108a10230f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d0:33:54:d2:3e:17:8b:16:d2:01:8d:78:50:
c9:3a:ea:02:cc:e6:39:82:4f:d1:a5:7a:aa:41:73:
a9:46:ec:a5:d7:59:9c:75:9e:e6:e7:ed:98:d0:66:
3d:2a:f1:81:b9:ba:01:5f:eb:87:86:20:f7:b8:69:
9f:16:75:6f:ef:c7:76:df:fd:a6:d7:57:a9:66:3e:
87:5f:a9:84:60:d3:54:a7:1c:1d:45:80:08:75:fd:
89:24:44:63:ad:91:cb:01:9b:1b:e6:2d:40:bb:8c:
6d:a5:b9:e4:e0:48:e1:2b:b9:a5:99:0b:a9:64:d3:
71:24:db:49:8b:91:f6:e1:0e:9e:7f:6c:a7:d1:c4:
22:0d:da:05:33:7a:87:f0:b3:ed:d7:ce:18:7f:cf:
ab:9b:12:68:93:2c:61:af:a4:5c:b9:87:84:6e:91:
38:4b:04:c0:ad:e8:13:55:7a:87:17:ef:c5:a6:78:
04:77:c2:71:4e:30:cd:42:8f:7d:71:8f:b9:a5:cb:
3e:ae:bb:3e:97:9f:87:cc:93:29:16:c5:c1:e3:8b:
4f:fc:71:b1:e7:83:26:58:ce:3e:80:34:df:ba:2c:
42:c9:52:1e:53:b4:a4:f8:70:99:6c:50:e1:f7:35:
2b:e5:9a:bc:df:7b:cd:39:62:1c:74:29:9b:4f:eb:
bf:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:A9:73:F7:F3:F9:04:EC:2C:E4:8C:9B:52:5A:77:10:8A:10:23:0F
X509v3 Authority Key Identifier:
keyid:AF:3A:DC:E3:66:4B:F0:E7:F6:88:FF:41:22:55:17:34:C4:D1:47:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:1f:4c:3f:88:7f:ca:38:db:6a:1c:6f:d5:43:cb:00:2b:62:
13:51:df:3d:df:20:0d:5f:c2:52:a4:2a:56:87:b4:7d:3d:64:
e2:d8:17:df:62:21:87:a1:41:db:01:60:0d:02:d8:71:3b:5c:
d2:32:1c:f2:3b:82:75:c9:25:e0:c5:73:8a:df:b7:79:8a:50:
5c:0b:d4:d4:05:d2:a3:87:13:77:6e:4a:1f:3f:82:cc:0f:dc:
76:94:bf:bc:78:fb:a4:09:1c:26:a8:f2:4a:1a:b9:6d:93:f5:
2a:d4:94:27:0b:77:9f:87:d7:d6:08:cc:2d:b0:de:ae:db:a4:
f2:64:8d:63:16:32:df:e7:37:85:ae:f4:ff:4d:3e:6c:3f:d0:
70:3b:26:a2:19:04:c0:05:52:c7:63:9c:b2:a1:d6:40:e6:b3:
e3:02:d8:84:f8:26:e8:a2:94:8a:ea:2f:29:69:04:5a:4e:45:
b5:13:32:c9:df:2f:80:57:05:e6:55:ca:7d:c0:49:df:5d:4e:
1b:12:d5:79:cc:a0:ea:39:85:e9:49:75:b0:96:92:4d:a8:02:
22:98:eb:0d:7f:a9:d1:72:76:25:eb:73:f2:ec:ec:d7:b7:a9:
52:e0:71:6f:37:86:bd:7e:46:f9:17:38:5e:27:e0:6c:39:a0:
f2:6e:74:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:03:17 2026 by rpki-client