Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.mft
File: zHrEehn2b0GDl-6l_vFaB_8sACM.mft (raw, json)
Hash identifier: YPdsHBd0cSvoWIyl/5E3qC+c0cXTzRszUS6cs9pRcfk=
Subject key identifier: 69:66:12:A5:41:B0:F9:32:DA:09:59:9D:37:FD:85:90:E4:80:FE:0E
Authority key identifier: CC:7A:C4:7A:19:F6:6F:41:83:97:EE:A5:FE:F1:5A:07:FF:2C:00:23
Certificate issuer: /CN=cc7ac47a19f66f418397eea5fef15a07ff2c0023
Certificate serial: 019F9135546665443F102D40C3D94C96DAE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zHrEehn2b0GDl-6l_vFaB_8sACM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.mft
Manifest number: 19C8
Signing time: Thu 23 Jul 2026 23:00:18 +0000
Manifest this update: Thu 23 Jul 2026 23:00:18 +0000
Manifest next update: Fri 24 Jul 2026 23:00:18 +0000
Files and hashes: 1: AENYJALANSjKlBoltdKemnCFKjs.roa (hash: s2OVjDuX6iIGr8lYPRWiO+GCWriVBdcRjsgW+JAkKFY=)
2: WT3Gx2IH-UOQxMFe0DcDIk0_2gs.roa (hash: 8xLda/bRGDPhlqY86QUEIR+DAlGhY+eQ/Yy7FCK+A6E=)
3: zHrEehn2b0GDl-6l_vFaB_8sACM.crl (hash: fFKQtRrGlc3ePIFjO49BaGp91IuCbk/os7sYOniz5SI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zHrEehn2b0GDl-6l_vFaB_8sACM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:54:66:65:44:3f:10:2d:40:c3:d9:4c:96:da:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc7ac47a19f66f418397eea5fef15a07ff2c0023
Validity
Not Before: Jul 23 23:00:18 2026 GMT
Not After : Jul 24 23:00:18 2026 GMT
Subject: CN=696612a541b0f932da09599d37fd8590e480fe0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a9:4c:2a:1d:8c:c5:ec:ec:26:d1:c1:53:36:
ae:5a:58:d1:3f:75:b2:7b:5c:81:80:bf:6f:95:ed:
a1:7f:06:48:7b:5f:56:54:45:44:50:8d:ff:a2:ee:
d6:85:53:6b:cd:c7:12:26:9e:1c:f1:1b:be:e0:13:
14:20:6a:da:97:cb:2e:fa:84:52:e1:05:bb:6d:60:
80:8c:23:5f:04:9b:fe:1c:46:7a:11:f0:8c:83:ce:
f7:64:3a:72:84:96:a4:ee:01:11:ef:ca:79:d7:ee:
37:97:20:75:eb:66:f1:27:03:47:b7:82:78:6d:e8:
f6:82:a7:49:bd:df:fb:dd:ef:d3:fa:63:6f:2f:9a:
ca:e3:fa:9c:96:c5:0a:69:95:e3:c9:03:07:21:67:
91:32:cb:03:8f:f7:ed:91:ab:6e:30:35:2e:f3:92:
09:66:7d:41:d8:2c:63:62:dc:76:8f:a4:b3:bf:4e:
ee:ab:b4:ce:a6:23:4c:02:ca:5a:26:55:c5:87:89:
c3:70:93:fb:29:5f:b9:27:29:ae:77:13:65:d3:c1:
d0:52:e2:c4:c4:7c:d1:73:e3:43:9f:c2:58:b5:c1:
93:aa:0a:41:42:c5:89:1d:de:78:91:99:4e:39:7b:
c1:2e:f3:5c:85:0c:f8:c2:f8:0a:d3:84:2a:b8:dd:
2d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:66:12:A5:41:B0:F9:32:DA:09:59:9D:37:FD:85:90:E4:80:FE:0E
X509v3 Authority Key Identifier:
keyid:CC:7A:C4:7A:19:F6:6F:41:83:97:EE:A5:FE:F1:5A:07:FF:2C:00:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zHrEehn2b0GDl-6l_vFaB_8sACM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:34:4e:de:ba:da:d7:61:32:00:8f:fc:ea:b7:aa:9b:0a:7e:
50:ea:6f:1e:97:3b:0f:7b:eb:38:5e:04:44:f5:8f:43:b2:60:
34:ae:7d:eb:24:78:47:8a:18:5a:b3:5f:28:93:d8:8b:8f:87:
47:6e:be:11:b1:ae:ff:d1:98:80:69:ac:15:68:fd:5a:ae:a7:
23:ea:79:4d:3e:a7:c1:8f:49:88:06:04:fd:2b:b8:ba:14:52:
50:21:3d:55:59:e5:4e:49:19:31:07:7d:d4:04:2d:c3:d7:b4:
5a:db:3f:ae:57:10:25:1d:10:91:31:13:55:89:c9:5e:7e:ac:
43:df:53:a0:98:81:e2:a8:96:e3:84:b9:37:1f:41:ca:00:98:
2e:62:4e:b3:27:12:ed:40:89:ba:ef:be:8a:5f:e0:6d:88:d2:
e6:28:e6:fa:03:0e:87:d1:29:cf:54:26:84:0d:1a:b7:31:93:
73:2c:a3:dd:da:0f:96:ab:03:ef:d9:1a:0e:e8:4d:53:02:f7:
e1:95:f2:73:39:61:b4:0e:0c:65:b7:45:99:92:e0:cf:86:59:
13:da:d2:a2:42:2a:a7:ac:ee:1b:20:02:8a:37:a7:dd:f7:7a:
6e:00:44:8f:0f:8e:48:5b:90:e8:36:28:cc:9b:26:9a:43:fa:
6a:99:19:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:35:33 2026 by rpki-client