Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/8d6f1a-d334-418f-b726-6f5d8a74a0e4/1/ZKemzVg4FNOTvuJjW1RVdMx1Ygw.mft
File: ZKemzVg4FNOTvuJjW1RVdMx1Ygw.mft (raw, json)
Hash identifier: B0fd6WtZVie6GB44dOiQddLSkq8JaPZDLFG/XTtePoU=
Subject key identifier: 84:A5:1C:7C:16:85:73:7D:1A:66:F2:58:31:E7:28:0A:D6:99:30:5B
Authority key identifier: 64:A7:A6:CD:58:38:14:D3:93:BE:E2:63:5B:54:55:74:CC:75:62:0C
Certificate issuer: /CN=64a7a6cd583814d393bee2635b545574cc75620c
Certificate serial: 019F932414A0FF540A0EC9739B7BBF679AD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZKemzVg4FNOTvuJjW1RVdMx1Ygw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/8d6f1a-d334-418f-b726-6f5d8a74a0e4/1/ZKemzVg4FNOTvuJjW1RVdMx1Ygw.mft
Manifest number: 15FA
Signing time: Fri 24 Jul 2026 08:00:43 +0000
Manifest this update: Fri 24 Jul 2026 08:00:43 +0000
Manifest next update: Sat 25 Jul 2026 08:00:43 +0000
Files and hashes: 1: EsvahZdQZVhluZsLSr98J_sMDK4.roa (hash: DNS5SQ17LOTRnwWYUw1eb+IWwNLBZu1qV/4r+8SuduY=)
2: ZKemzVg4FNOTvuJjW1RVdMx1Ygw.crl (hash: hwML57DeTQXyNopLn7atlNlrvVJt+B9o0EIJKpsMu8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/8d6f1a-d334-418f-b726-6f5d8a74a0e4/1/ZKemzVg4FNOTvuJjW1RVdMx1Ygw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/8d6f1a-d334-418f-b726-6f5d8a74a0e4/1/ZKemzVg4FNOTvuJjW1RVdMx1Ygw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZKemzVg4FNOTvuJjW1RVdMx1Ygw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:24:14:a0:ff:54:0a:0e:c9:73:9b:7b:bf:67:9a:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64a7a6cd583814d393bee2635b545574cc75620c
Validity
Not Before: Jul 24 08:00:43 2026 GMT
Not After : Jul 25 08:00:43 2026 GMT
Subject: CN=84a51c7c1685737d1a66f25831e7280ad699305b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9b:27:29:ed:0d:24:89:82:11:7e:79:3a:49:
22:cc:88:cf:3c:a6:18:4a:bc:b7:79:72:c6:a2:2e:
7a:a6:7a:5c:a8:95:32:84:90:ee:2a:40:7c:93:37:
84:11:03:9a:94:8c:e6:f2:c0:d2:74:26:20:dd:0f:
4d:b3:c3:4e:c7:ef:88:c6:22:24:15:6b:ea:7a:81:
d8:cb:d9:75:fb:01:5a:54:2a:dd:07:71:cc:e2:e8:
94:a2:64:39:3e:bf:50:ce:50:b8:86:89:e8:2e:ea:
49:2d:dc:e9:9c:78:ce:b8:87:7c:0b:b4:7d:93:2a:
1c:f1:b1:be:30:c6:d7:d4:04:25:ea:11:82:be:40:
14:8f:3e:30:78:8e:9b:55:bb:2c:85:81:46:6c:d4:
c1:58:b3:f0:cd:2c:03:ad:39:0c:63:5d:1f:08:f3:
fa:20:20:52:31:41:d5:d9:27:08:e7:c6:30:54:d6:
93:d4:e5:ab:aa:48:91:d2:7f:e1:a4:1d:6c:d7:8d:
5a:a2:cf:71:96:82:c3:56:aa:04:c1:08:90:e5:fc:
f4:e4:67:33:5f:5e:58:e4:70:a7:c9:ba:98:ad:3c:
a7:51:bf:e6:83:8e:f9:cd:67:a0:1c:52:fc:30:2d:
41:d1:db:1f:83:f4:79:6d:8f:31:4c:d8:56:aa:8e:
fc:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:A5:1C:7C:16:85:73:7D:1A:66:F2:58:31:E7:28:0A:D6:99:30:5B
X509v3 Authority Key Identifier:
keyid:64:A7:A6:CD:58:38:14:D3:93:BE:E2:63:5B:54:55:74:CC:75:62:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZKemzVg4FNOTvuJjW1RVdMx1Ygw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/8d6f1a-d334-418f-b726-6f5d8a74a0e4/1/ZKemzVg4FNOTvuJjW1RVdMx1Ygw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/8d6f1a-d334-418f-b726-6f5d8a74a0e4/1/ZKemzVg4FNOTvuJjW1RVdMx1Ygw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:8d:58:89:24:b9:71:27:4b:b2:7b:9e:ee:9f:19:33:03:eb:
0f:ba:37:0f:b5:8a:5d:9d:59:c7:f6:8e:26:f8:84:8b:be:da:
4d:5d:cc:e5:e3:8c:b7:ce:37:3a:d5:40:71:6f:e0:bb:83:bb:
0a:8d:14:24:2d:7c:dc:8e:b3:1f:80:62:62:73:02:3d:42:ef:
7e:80:59:84:a7:69:ec:2b:7c:64:17:63:73:b1:d3:af:2f:67:
63:94:f1:7c:8a:9c:45:1a:6d:f3:a6:32:8c:91:e8:b7:db:02:
2d:b3:e1:a0:3c:85:04:b0:e1:9b:0e:09:f0:93:65:22:05:37:
d3:5a:0c:36:3e:4a:34:2c:cc:51:f1:90:4b:af:64:9b:5c:cb:
5a:ba:51:37:67:92:f2:83:53:26:42:8f:9b:15:bb:d5:06:4a:
46:53:83:f2:f5:8d:6c:97:c6:3c:75:cf:a0:97:4c:60:85:4f:
14:f2:56:ef:22:fe:3e:10:40:58:fd:09:2f:c3:2b:05:3b:d3:
d7:d5:fe:a2:7c:c6:df:ec:fb:d3:aa:b0:02:8f:15:91:f4:da:
03:44:27:91:66:be:fe:0d:e0:ab:90:98:da:27:75:03:c1:45:
4b:ba:3e:eb:5a:7b:00:84:0d:ee:f2:76:ad:6b:66:66:d6:2e:
7a:43:de:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:08:54 2026 by rpki-client