Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.mft
File: zp0GR9wXFB2EKzL1EV2ZqpyfM90.mft (raw, json)
Hash identifier: DdquNci7i/PEXiey4sFDtsSrprZUIvoyxHWt8bVjyzk=
Subject key identifier: 68:F4:9C:EF:75:78:5C:F7:A2:99:88:DA:4C:9F:AD:F2:3C:BA:7D:29
Authority key identifier: CE:9D:06:47:DC:17:14:1D:84:2B:32:F5:11:5D:99:AA:9C:9F:33:DD
Certificate issuer: /CN=ce9d0647dc17141d842b32f5115d99aa9c9f33dd
Certificate serial: 019F93C92A9083F5C64AB2654CE2C33C9772
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zp0GR9wXFB2EKzL1EV2ZqpyfM90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.mft
Manifest number: 09DC
Signing time: Fri 24 Jul 2026 11:01:02 +0000
Manifest this update: Fri 24 Jul 2026 11:01:02 +0000
Manifest next update: Sat 25 Jul 2026 11:01:02 +0000
Files and hashes: 1: uqlwtwz2Qs2EiNBrxD0-ZbsYVHs.roa (hash: IkhV4yizozk2dsaRcLN2hmBNAiBYulp+U7a9yEZXbLk=)
2: zp0GR9wXFB2EKzL1EV2ZqpyfM90.crl (hash: bu0CIjFbQT9RIdBmBnCKc4HwoDtr6tdu6ZZeMM5uEzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.mft
rsync://rpki.ripe.net/repository/DEFAULT/zp0GR9wXFB2EKzL1EV2ZqpyfM90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c9:2a:90:83:f5:c6:4a:b2:65:4c:e2:c3:3c:97:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce9d0647dc17141d842b32f5115d99aa9c9f33dd
Validity
Not Before: Jul 24 11:01:02 2026 GMT
Not After : Jul 25 11:01:02 2026 GMT
Subject: CN=68f49cef75785cf7a29988da4c9fadf23cba7d29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:81:c7:27:c5:c6:1e:3b:06:17:bf:39:f5:19:
f1:f6:0a:86:6c:c8:95:df:36:85:90:9b:8d:7a:4c:
76:89:81:c9:26:28:7e:c0:b4:8f:1b:cc:29:15:64:
e6:a0:fe:80:2e:79:76:b9:70:6d:cf:10:78:68:2b:
56:2c:91:fa:21:c9:a7:1e:06:6a:50:69:3e:38:48:
62:7c:61:f5:dc:54:1b:df:0f:4b:16:31:7c:42:50:
7a:fa:1e:a6:bf:a9:4a:b7:5d:ee:ff:69:97:28:4f:
e4:f4:67:d8:5a:04:84:34:3f:51:6b:24:a2:0a:f9:
9c:2d:a3:f7:ba:b6:bf:d9:99:fd:50:8e:27:11:a5:
c0:76:fa:44:3b:e9:d6:1d:8d:89:f7:dd:e5:f6:0d:
fd:c3:b3:57:23:da:88:fe:7f:e6:f8:64:1c:f2:14:
78:51:8e:7a:9c:07:3d:5b:cc:cb:4e:d0:5d:da:53:
49:a4:a4:de:bb:43:85:f3:93:aa:ea:67:33:35:8b:
78:c4:f6:1b:46:e7:f5:2e:c3:6e:c9:93:95:e6:76:
a9:f0:14:ae:54:5d:5b:43:c7:6b:c1:63:1d:b9:e3:
6c:6d:f5:00:10:73:b4:57:28:5a:9b:53:9b:eb:3f:
43:3a:86:f7:c5:c2:9d:be:13:9b:25:90:29:74:3c:
8c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:F4:9C:EF:75:78:5C:F7:A2:99:88:DA:4C:9F:AD:F2:3C:BA:7D:29
X509v3 Authority Key Identifier:
keyid:CE:9D:06:47:DC:17:14:1D:84:2B:32:F5:11:5D:99:AA:9C:9F:33:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zp0GR9wXFB2EKzL1EV2ZqpyfM90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:5c:2c:11:e5:c4:0a:f4:e0:ae:0f:15:da:a3:15:06:ae:04:
71:40:97:39:83:4a:67:f7:89:75:ff:bc:1d:82:41:c3:cb:0b:
35:ac:a4:a2:82:26:4f:64:34:d9:fb:c6:24:b1:0f:bc:10:99:
d7:cb:ff:04:35:21:b1:17:ab:af:b8:95:a0:11:a6:39:d1:0b:
5e:d9:43:20:65:bb:d1:b8:f9:7e:08:e5:7f:ce:99:40:cc:19:
93:8e:f2:16:30:1c:3b:df:f7:45:af:36:aa:5f:ac:82:31:2d:
d1:33:1d:95:86:68:3d:96:1a:c8:33:76:24:fe:39:a9:94:79:
5b:ac:7f:2c:f2:e6:40:28:65:f7:1b:ba:f6:ce:76:3a:0b:da:
b8:d0:07:75:d0:6a:ad:b4:66:84:28:df:23:92:05:88:11:8f:
5b:eb:9b:e8:a1:6c:94:54:b1:a3:da:99:04:05:3f:43:42:44:
54:77:8d:bd:c4:50:48:22:9b:0d:94:13:3b:8c:f4:94:5a:49:
18:2e:41:7d:75:9b:4f:35:c4:bf:92:2e:f1:7b:56:cd:f8:47:
8e:89:e5:c0:83:80:4a:4b:97:0b:6f:b8:57:38:c7:41:44:26:
92:cf:3f:ab:ef:82:8b:d9:2c:71:f4:47:00:be:06:d7:50:85:
9c:34:42:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:39:30 2026 by rpki-client