Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft
File: RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft (raw, json)
Hash identifier: zELJK7ojUn7yTy3ZAlSd2tp7i4agTuB1uu790/6rGm0=
Subject key identifier: 6C:B5:9B:9F:10:08:64:C4:31:09:B3:5C:60:BD:D4:F1:8E:E1:40:D5
Authority key identifier: 47:34:69:A9:66:F4:DF:3C:F2:81:71:D8:7C:74:78:0F:C4:72:F9:79
Certificate issuer: /CN=473469a966f4df3cf28171d87c74780fc472f979
Certificate serial: 019F9211B567078898475F1B0E3C8C064F85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzRpqWb03zzygXHYfHR4D8Ry-Xk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft
Manifest number: 0CCF
Signing time: Fri 24 Jul 2026 03:01:01 +0000
Manifest this update: Fri 24 Jul 2026 03:01:01 +0000
Manifest next update: Sat 25 Jul 2026 03:01:01 +0000
Files and hashes: 1: DNxT4KfUnSN5D5Pb2TXRMl9CQRk.roa (hash: U4JVcc+2nFb5M82ma1QdMgZr3eKXlGDJ6qSOPbU6n2I=)
2: RzRpqWb03zzygXHYfHR4D8Ry-Xk.crl (hash: tHDBIjiGk5ODJk4Hk+djlA/u7RcjzL+bAw9rL/IY1+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft
rsync://rpki.ripe.net/repository/DEFAULT/RzRpqWb03zzygXHYfHR4D8Ry-Xk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 03:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:b5:67:07:88:98:47:5f:1b:0e:3c:8c:06:4f:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473469a966f4df3cf28171d87c74780fc472f979
Validity
Not Before: Jul 24 03:01:01 2026 GMT
Not After : Jul 25 03:01:01 2026 GMT
Subject: CN=6cb59b9f100864c43109b35c60bdd4f18ee140d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8e:ce:37:ef:17:00:61:27:c1:48:6a:e5:ee:
0e:27:3a:3c:f4:57:22:36:f2:20:6f:25:9d:17:b4:
00:85:d8:1f:10:62:2b:29:fb:e4:26:2f:3f:c8:a4:
ad:c8:df:1b:23:71:ec:3e:95:c3:72:9f:a3:15:0f:
06:c7:81:3a:ca:e6:11:95:27:69:06:b9:4c:10:7a:
cb:14:8b:95:5a:38:9a:1f:31:a9:1e:69:3e:2e:c4:
95:6f:b9:d8:c9:c1:cc:d5:fb:f4:65:dd:2b:f3:79:
9c:65:1b:a9:c5:10:70:b2:9e:0a:8d:95:ba:0a:89:
28:d0:f7:82:d9:06:99:18:17:63:b6:8d:4b:eb:fe:
a8:7a:3c:58:d0:a8:85:4e:22:ac:e4:2c:2c:91:13:
ad:98:c8:a2:0b:e9:3a:3b:0c:7b:c4:52:c0:cc:1c:
49:c6:1a:b1:a6:30:a5:26:29:fd:82:03:81:66:1b:
7d:f1:c7:45:13:9f:ad:73:ce:c3:2c:da:1a:61:63:
37:e3:d2:f6:f0:50:59:21:c1:61:9b:a8:19:e4:c0:
37:8d:7c:f3:a6:c7:4a:ea:10:0a:11:1d:69:b1:6b:
77:13:f6:1d:90:f7:0e:24:62:97:f3:03:0c:7f:b4:
01:9e:60:6f:df:25:e2:42:5d:87:56:6a:25:ae:ba:
d3:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:B5:9B:9F:10:08:64:C4:31:09:B3:5C:60:BD:D4:F1:8E:E1:40:D5
X509v3 Authority Key Identifier:
keyid:47:34:69:A9:66:F4:DF:3C:F2:81:71:D8:7C:74:78:0F:C4:72:F9:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzRpqWb03zzygXHYfHR4D8Ry-Xk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:41:79:6f:59:f1:b5:8b:d0:49:a3:8e:96:e0:44:10:42:d3:
5c:60:12:45:a5:73:04:ce:c3:05:3b:3a:53:98:d1:eb:21:df:
92:2b:01:55:8d:1d:27:02:32:de:b7:0f:54:fa:29:f8:5f:9b:
c9:79:f1:76:61:7a:cd:dc:70:8a:d3:14:16:64:13:c3:7f:8b:
19:86:f6:8f:47:ca:16:cb:67:0b:60:bc:e7:01:04:93:26:24:
8a:7f:e4:45:62:f8:95:6f:0d:64:e2:f3:b3:b0:4a:6b:8a:a2:
2a:c3:0e:19:7c:19:b7:9c:78:81:0b:d8:84:f0:29:13:2f:ba:
ff:84:78:60:c9:bf:ce:07:03:e4:fd:1e:29:49:cd:f4:97:c4:
9a:9c:a6:64:6b:63:d6:17:d9:82:e1:e0:9f:e6:eb:fa:2b:fc:
bc:48:73:43:d2:47:f1:d6:22:60:c5:00:32:55:27:b0:8a:4f:
57:b7:c9:ed:fd:4e:e0:16:1d:4e:c1:e3:3e:5a:c2:46:bf:95:
83:1e:32:c7:9a:d0:83:2c:24:54:89:b6:1a:f2:86:98:aa:4e:
41:d7:0f:68:eb:96:a5:f2:d3:88:aa:0f:70:13:99:1c:2b:22:
d0:75:e0:bd:b2:96:6b:a0:50:1c:30:1e:be:1e:e1:be:bf:98:
de:66:2c:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:33:53 2026 by rpki-client