Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.mft
File: zTmPfz1bO4Lc_eyQKwP3M9iV2uc.mft (raw, json)
Hash identifier: UsyPvR/ut7QmBB5gs5wZi5HsC0e1jeORJ3NorDXVPfs=
Subject key identifier: 88:42:95:40:C4:59:2E:23:98:59:37:5D:61:C3:B3:48:E4:83:E7:D4
Authority key identifier: CD:39:8F:7F:3D:5B:3B:82:DC:FD:EC:90:2B:03:F7:33:D8:95:DA:E7
Certificate issuer: /CN=cd398f7f3d5b3b82dcfdec902b03f733d895dae7
Certificate serial: 019F9059D40146F85F6740F51E3AC5F44B65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.mft
Manifest number: 0851
Signing time: Thu 23 Jul 2026 19:00:33 +0000
Manifest this update: Thu 23 Jul 2026 19:00:33 +0000
Manifest next update: Fri 24 Jul 2026 19:00:33 +0000
Files and hashes: 1: PtaIwv6j_fRPhVi8J0-7j605lCI.roa (hash: TLTnNugB01FAGr+O6mM1yQs38FDf/1kqzR1LqqRn5tM=)
2: iLYecyNvPLJpQj3efxZOTIWXApk.roa (hash: swdILG30N67hGnJzm85h/2MvOrOT4xu46fpnQjTo9Z8=)
3: zTmPfz1bO4Lc_eyQKwP3M9iV2uc.crl (hash: mBRsruDJdL8J9s10Rtz4ToZZevDhEQgr4LLZXBKuo0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:59:d4:01:46:f8:5f:67:40:f5:1e:3a:c5:f4:4b:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd398f7f3d5b3b82dcfdec902b03f733d895dae7
Validity
Not Before: Jul 23 19:00:33 2026 GMT
Not After : Jul 24 19:00:33 2026 GMT
Subject: CN=88429540c4592e239859375d61c3b348e483e7d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:cd:1f:74:07:dd:7e:e3:b9:5b:72:07:fa:98:
e3:7c:b9:62:9f:35:9e:bd:f1:1b:92:84:31:ae:73:
c9:0b:fc:8b:20:24:3f:d9:b0:b0:90:c7:4d:c0:4b:
9b:88:19:80:d8:79:ec:0a:b2:33:28:d7:79:33:2d:
ea:03:fc:64:1e:1d:02:ec:7b:11:f9:ed:48:51:c2:
15:08:a7:4b:bd:a7:e0:72:f2:24:24:ee:0a:af:6b:
e6:e7:37:5f:1c:31:dd:b4:6a:f5:ba:ae:1c:3d:1b:
e4:72:2f:0b:25:ef:d8:df:98:a2:65:a1:80:18:d1:
42:1c:8a:19:2d:01:59:bf:f1:4f:4b:d0:28:9e:9e:
8d:04:db:60:c6:ba:bc:34:87:2d:fd:23:d3:de:55:
4c:50:4a:92:db:e7:c4:99:a5:54:15:c4:0d:36:49:
50:26:06:87:a5:5c:6d:bd:0c:91:90:f9:bb:40:e4:
86:ef:cb:38:77:71:b5:b2:f9:46:12:80:f7:df:cc:
98:16:5b:fc:5e:ac:a8:b6:c7:78:67:78:e6:20:0f:
d8:ed:5f:62:34:57:34:f1:33:4f:57:0a:a3:7d:3a:
a1:03:57:c5:ab:6e:fb:06:05:ce:59:f3:64:ae:d5:
84:36:5b:b7:d0:43:b8:ed:b7:c0:e7:f7:02:d9:84:
02:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:42:95:40:C4:59:2E:23:98:59:37:5D:61:C3:B3:48:E4:83:E7:D4
X509v3 Authority Key Identifier:
keyid:CD:39:8F:7F:3D:5B:3B:82:DC:FD:EC:90:2B:03:F7:33:D8:95:DA:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:ee:e7:0d:6a:b5:87:51:7c:e8:63:0f:62:44:32:b6:ba:1c:
75:4e:15:3d:8f:87:e4:37:10:2c:64:d0:60:cc:2c:1c:7a:a4:
55:4c:e8:f3:28:a6:09:e0:9a:41:56:f6:ef:82:bc:14:c2:06:
9c:f3:37:6e:5d:7a:4a:fd:3a:20:f8:44:bf:1d:dd:8d:c8:1a:
eb:b0:aa:24:67:ca:bd:79:a2:5d:4a:e5:c6:0d:c5:a9:bd:25:
24:5c:60:84:db:21:11:9a:8b:b2:a2:ad:89:5c:0a:3d:90:5f:
3b:f2:40:57:b4:ce:93:1b:8f:55:0d:db:67:4a:25:27:61:52:
a7:6d:87:da:0f:2c:28:88:99:4c:58:e1:2c:2c:4b:f4:c1:5c:
06:06:d9:58:09:13:5a:b6:4c:77:54:cf:48:c6:d9:6c:80:ff:
ab:33:e8:c6:8f:ac:02:20:87:01:93:5a:9a:10:47:56:74:62:
38:ee:70:1c:8a:2c:36:09:ba:34:20:be:c0:12:0d:98:6e:4b:
78:72:ce:de:da:7b:39:59:7b:bb:c5:b6:55:40:cc:b1:f7:3d:
b1:e6:69:e9:50:b3:ba:6f:11:4b:75:30:61:48:56:c8:22:95:
12:f8:d8:ed:c3:50:24:fa:fa:45:3e:67:53:45:36:77:4b:74:
58:e5:fe:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:03:11 2026 by rpki-client