Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft
File: ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft (raw, json)
Hash identifier: dXmE3vnOlfa+qMjYyQ7nX99V+aqbf1LK8Ez4rad6+To=
Subject key identifier: 33:09:A4:42:74:75:7C:9E:D7:1E:2A:56:66:7C:FC:81:AD:12:F1:F2
Authority key identifier: 65:4D:96:67:2A:59:EC:38:95:FC:15:84:7A:CA:1B:29:DB:79:12:44
Certificate issuer: /CN=654d96672a59ec3895fc15847aca1b29db791244
Certificate serial: 019F93921AE54620239F730DBF433A1BF88F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZU2WZypZ7DiV_BWEesobKdt5EkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft
Manifest number: 094A
Signing time: Fri 24 Jul 2026 10:00:53 +0000
Manifest this update: Fri 24 Jul 2026 10:00:53 +0000
Manifest next update: Sat 25 Jul 2026 10:00:53 +0000
Files and hashes: 1: Utc_slWR8yHDk290AryGYchTlYA.roa (hash: NUCfh9s0WjqwyOFskJUWEakWr/HjDtF3kDLbwsne7Ro=)
2: ZU2WZypZ7DiV_BWEesobKdt5EkQ.crl (hash: TG0bHOS4tijfoSfYgz8oganWvmoXc1x2KqoZoWgpxzA=)
3: zynEh3pPdQY3KJQVgvhOsaYxciw.roa (hash: rOMrg3wVXzNicfVb9K/t1LGxhcGrIWejZTOsjk80vqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZU2WZypZ7DiV_BWEesobKdt5EkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 10:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:92:1a:e5:46:20:23:9f:73:0d:bf:43:3a:1b:f8:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=654d96672a59ec3895fc15847aca1b29db791244
Validity
Not Before: Jul 24 10:00:53 2026 GMT
Not After : Jul 25 10:00:53 2026 GMT
Subject: CN=3309a44274757c9ed71e2a56667cfc81ad12f1f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b8:ec:46:31:cd:7d:14:2e:8c:b4:12:b4:0c:
35:91:d0:6e:19:fc:89:ef:66:26:81:90:80:8f:cf:
ba:d3:b7:0f:8d:09:29:f0:69:07:26:bc:0c:84:fd:
4f:aa:c2:52:5d:ae:b2:75:36:f8:db:47:62:16:3d:
8d:3b:df:df:c0:59:3c:b7:62:c6:69:03:f9:32:17:
1d:e3:71:08:ef:be:3a:ff:23:e5:ac:e6:c4:47:26:
48:dc:49:d8:06:34:69:26:77:1a:c0:07:bd:65:22:
01:f3:b0:ee:6b:63:0f:e5:bc:c2:f1:10:f3:6b:2a:
4d:4c:ca:e6:f0:57:26:90:88:38:65:c2:02:25:a8:
82:18:56:01:94:74:81:66:86:ef:d8:64:87:51:89:
d0:63:2a:60:b4:74:bb:7c:fd:c8:b3:4b:27:04:20:
e9:22:5d:21:ad:76:f5:51:cd:06:8c:24:aa:93:ee:
92:51:72:c3:fb:92:cb:3e:8b:1e:6f:94:08:80:85:
c4:bd:ec:72:77:d7:04:a6:3a:ed:96:6f:41:b7:1b:
51:74:14:74:ff:85:4d:56:60:af:df:6e:c2:7c:1d:
43:63:0b:2d:95:82:0f:df:a3:3d:d9:0d:4b:08:b4:
ae:85:52:b0:d4:e0:a1:d6:bd:bf:82:ee:2b:a8:1a:
84:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:09:A4:42:74:75:7C:9E:D7:1E:2A:56:66:7C:FC:81:AD:12:F1:F2
X509v3 Authority Key Identifier:
keyid:65:4D:96:67:2A:59:EC:38:95:FC:15:84:7A:CA:1B:29:DB:79:12:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZU2WZypZ7DiV_BWEesobKdt5EkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:94:0d:26:d1:e0:09:37:2d:49:69:64:75:c1:26:31:b8:71:
09:46:ce:b8:76:df:a7:b4:da:3d:ec:21:71:99:2b:65:6f:b4:
36:7d:dc:e2:c3:37:14:86:f7:c9:af:63:7d:bf:5c:28:38:8f:
5c:4d:29:7d:c5:f6:dd:d9:bd:60:a6:4d:b7:4b:5e:c5:9d:52:
5f:6f:ea:cf:78:8f:0c:a7:1a:65:d3:3b:0e:54:5a:bd:ed:bb:
b2:1d:57:4b:e3:08:de:8b:70:79:c4:b3:16:9e:91:8e:d8:88:
ad:ff:e9:76:b0:78:58:fc:de:f5:1a:6f:b6:82:28:c2:a3:c5:
07:7e:83:42:e4:48:a9:a2:85:bf:74:85:a6:ad:63:0f:77:b6:
1e:06:64:6b:7f:49:e7:c1:2a:bf:26:16:af:8c:1c:1f:11:92:
4e:63:ef:1f:92:e5:7a:14:51:b0:44:9c:c4:02:eb:dc:ac:58:
f3:f7:8f:97:1d:a3:6f:f5:26:77:b5:96:e3:74:93:c4:d4:ee:
f3:fa:18:67:f5:39:88:13:15:7f:73:27:66:cf:ad:30:7b:b1:
fa:f7:ab:03:1e:b0:4e:bc:7c:28:62:77:18:42:b1:f8:6c:1b:
41:1d:58:ed:4e:13:e2:bc:06:5d:66:74:07:46:7b:b8:2f:bd:
73:60:f5:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:07:19 2026 by rpki-client