Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/a725e2-e715-4fd2-81ec-ea42d6c159f3/1/ZRUuTmwkXAP-zfpIv5E5bL7-168.mft
File: ZRUuTmwkXAP-zfpIv5E5bL7-168.mft (raw, json)
Hash identifier: Nu/V8YzzmiQvSedn1py7ZBbX2XZbSTCs2Ut8jmwKzoU=
Subject key identifier: 70:A6:97:D4:58:53:03:4C:C7:B4:90:76:F8:10:DA:53:6A:39:3C:77
Authority key identifier: 65:15:2E:4E:6C:24:5C:03:FE:CD:FA:48:BF:91:39:6C:BE:FE:D7:AF
Certificate issuer: /CN=65152e4e6c245c03fecdfa48bf91396cbefed7af
Certificate serial: 019F848C936597F0425C7A973D447ACB41E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZRUuTmwkXAP-zfpIv5E5bL7-168.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/a725e2-e715-4fd2-81ec-ea42d6c159f3/1/ZRUuTmwkXAP-zfpIv5E5bL7-168.mft
Manifest number: 018A
Signing time: Tue 21 Jul 2026 12:00:33 +0000
Manifest this update: Tue 21 Jul 2026 12:00:33 +0000
Manifest next update: Wed 22 Jul 2026 12:00:33 +0000
Files and hashes: 1: ZRUuTmwkXAP-zfpIv5E5bL7-168.crl (hash: LPVxaqxUSV3oI+34ubPhbKBucx6Hnstw+oe9DyC4RG4=)
2: zNqty2MMMtiYifN34tRpIOVX9sQ.roa (hash: yLB5f8Ek8IZkDyn4YFbsPyCUS3Yue+tSUM0kBMSr3B8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/a725e2-e715-4fd2-81ec-ea42d6c159f3/1/ZRUuTmwkXAP-zfpIv5E5bL7-168.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/a725e2-e715-4fd2-81ec-ea42d6c159f3/1/ZRUuTmwkXAP-zfpIv5E5bL7-168.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZRUuTmwkXAP-zfpIv5E5bL7-168.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 12:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:8c:93:65:97:f0:42:5c:7a:97:3d:44:7a:cb:41:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65152e4e6c245c03fecdfa48bf91396cbefed7af
Validity
Not Before: Jul 21 12:00:33 2026 GMT
Not After : Jul 22 12:00:33 2026 GMT
Subject: CN=70a697d45853034cc7b49076f810da536a393c77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:80:38:a9:74:c1:78:67:84:f3:f7:c3:6c:38:
fe:06:7c:77:3d:81:00:eb:b4:8c:db:c2:7a:8f:69:
05:e8:3f:39:09:5d:77:ea:07:93:53:3f:7a:9f:85:
08:88:53:8b:15:08:9c:cf:19:d0:58:b4:26:e1:c3:
81:33:32:48:67:14:fa:5e:b8:ef:8d:d8:4c:a2:a9:
6f:c2:0f:ed:0c:1b:8e:7e:b1:5b:c0:39:dd:f8:74:
16:bc:bc:43:75:48:7a:63:3c:ae:91:15:5f:2f:0c:
81:ed:95:a0:0f:56:da:95:72:74:e9:31:70:87:89:
a8:eb:e3:50:e3:9a:56:a6:aa:0d:de:1d:2b:b7:2f:
4f:50:3a:66:bc:b3:4b:8e:7b:03:93:5c:5f:e9:af:
d8:06:dc:9a:49:22:03:83:0a:5b:cc:e3:de:17:9f:
6a:23:fc:1d:a0:5a:a8:6c:e3:4f:b0:23:fd:31:59:
02:d6:89:93:db:4d:ac:8b:88:52:78:a8:34:97:00:
63:d4:ed:09:ba:10:4b:e0:a8:c6:ae:6c:17:fa:07:
10:7b:09:9a:2e:47:5b:9b:7f:f8:28:95:66:6c:94:
5a:72:67:f2:11:b2:ae:09:bc:32:11:ad:84:2c:e2:
57:3d:5c:eb:54:17:85:e7:1e:15:85:8d:5d:84:1a:
b1:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:A6:97:D4:58:53:03:4C:C7:B4:90:76:F8:10:DA:53:6A:39:3C:77
X509v3 Authority Key Identifier:
keyid:65:15:2E:4E:6C:24:5C:03:FE:CD:FA:48:BF:91:39:6C:BE:FE:D7:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRUuTmwkXAP-zfpIv5E5bL7-168.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a725e2-e715-4fd2-81ec-ea42d6c159f3/1/ZRUuTmwkXAP-zfpIv5E5bL7-168.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a725e2-e715-4fd2-81ec-ea42d6c159f3/1/ZRUuTmwkXAP-zfpIv5E5bL7-168.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:56:06:ce:af:2c:10:c1:b3:12:7d:a4:5a:ad:57:06:1d:8e:
9a:a3:1a:1a:1f:82:98:0a:44:00:23:01:9f:26:c8:40:8f:54:
f6:da:c5:85:ce:65:e5:28:84:66:03:bb:eb:d4:ca:11:93:5b:
1a:7b:80:50:7d:fb:a4:d9:84:8f:08:04:d2:c1:a0:8e:cf:df:
13:a4:d4:a4:3d:d1:52:2e:66:4f:79:93:30:c1:8d:2d:39:9d:
b7:d7:42:3a:3a:46:4d:6d:ae:5b:44:e1:b8:42:e8:28:62:e8:
e5:8a:84:e8:40:56:91:a9:e1:2b:43:b0:19:66:98:2d:fd:72:
0e:89:06:ad:5c:6a:e1:52:f2:5f:11:4a:8b:82:dd:c7:c0:77:
e2:6f:4a:cc:de:be:94:da:11:f7:c5:29:06:63:4f:8c:0b:8a:
07:34:8a:56:8e:c6:cb:4d:77:f2:4d:56:5a:79:17:96:c2:43:
82:44:d3:76:9f:b2:9d:17:6b:32:34:d9:ef:86:93:f7:0e:e8:
99:4e:c5:62:05:24:a9:57:29:28:68:30:66:d2:61:55:4c:bd:
45:d0:60:61:e3:fa:c1:f7:c4:6b:22:a0:06:4f:f1:7b:e0:14:
46:91:95:80:bc:03:83:92:17:c5:33:9a:96:b0:32:fa:fe:50:
c2:63:4d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:49:54 2026 by rpki-client