Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/Z1g3tKd23KNiTol_HHTm4n0fwVQ.mft
File: Z1g3tKd23KNiTol_HHTm4n0fwVQ.mft (raw, json)
Hash identifier: ZenmVhoeCn/0e6nWcMH9xapp/lrEhcA2/BC7hz+O4uA=
Subject key identifier: 1C:D6:AE:C4:B4:30:B3:4C:31:F3:30:8F:A5:27:78:47:D0:2B:8B:2B
Authority key identifier: 67:58:37:B4:A7:76:DC:A3:62:4E:89:7F:1C:74:E6:E2:7D:1F:C1:54
Certificate issuer: /CN=675837b4a776dca3624e897f1c74e6e27d1fc154
Certificate serial: 019F85D6DDF03B6801109518EC9B700B4D2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z1g3tKd23KNiTol_HHTm4n0fwVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/Z1g3tKd23KNiTol_HHTm4n0fwVQ.mft
Manifest number: 3A
Signing time: Tue 21 Jul 2026 18:01:18 +0000
Manifest this update: Tue 21 Jul 2026 18:01:18 +0000
Manifest next update: Wed 22 Jul 2026 18:01:18 +0000
Files and hashes: 1: Z1g3tKd23KNiTol_HHTm4n0fwVQ.crl (hash: NIjgVs5usaTS4tB2h2hqxASwuSzGaeSmlX0WCRMp4Uc=)
2: _99RUrGdci44Oq4_4xcT9uSL-jY.roa (hash: YvmqrGHSZPjUN26szsH0GLTZcYZv0BvXR40esmV5asY=)
3: h658PKckKesTLernUES_denhymQ.roa (hash: TondVlbf8pLFUhLFF4XczbxXR4UNpHDTwhjMbduJWEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/Z1g3tKd23KNiTol_HHTm4n0fwVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/Z1g3tKd23KNiTol_HHTm4n0fwVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z1g3tKd23KNiTol_HHTm4n0fwVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:d6:dd:f0:3b:68:01:10:95:18:ec:9b:70:0b:4d:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=675837b4a776dca3624e897f1c74e6e27d1fc154
Validity
Not Before: Jul 21 18:01:18 2026 GMT
Not After : Jul 22 18:01:18 2026 GMT
Subject: CN=1cd6aec4b430b34c31f3308fa5277847d02b8b2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:04:fb:3a:cd:70:23:ca:de:9b:e5:07:a7:5f:
52:da:f2:8f:fc:08:dd:d3:c2:33:bb:c2:d3:ed:74:
48:d7:de:19:79:47:35:82:50:16:22:d3:17:65:f6:
db:19:ef:db:eb:26:3a:f4:ab:f9:07:c7:e7:91:89:
af:01:da:96:46:5e:ec:14:ba:9f:af:99:a5:34:bc:
4f:16:03:b2:9b:3b:57:c2:06:2b:58:38:ac:22:e4:
60:1e:9f:3d:be:48:89:de:81:e3:c7:37:a7:12:92:
c2:05:7c:a2:8e:4e:16:c7:ff:49:3e:01:8b:ad:a9:
02:25:86:8b:75:2d:f3:80:bf:c3:0e:5d:8b:34:bf:
bd:5a:64:80:1e:51:30:f6:c4:b1:6b:81:d2:9e:2b:
2a:66:af:2e:8f:af:f9:5a:82:22:2e:17:c8:b6:95:
b5:22:ae:34:cd:d4:2b:ec:2b:1e:a0:68:60:27:b4:
d9:0a:7a:dd:87:d1:10:b5:ef:2d:66:e7:23:c9:f3:
93:e3:df:98:ae:c7:36:24:b7:38:d8:50:1e:c5:12:
66:9f:c0:6e:fd:d9:88:a6:cd:4e:3d:a2:48:56:9d:
b2:5c:b3:04:25:1b:e2:03:12:43:59:fc:e5:3c:58:
1a:2d:77:6e:36:f0:c9:01:e6:2d:fb:41:e4:f9:69:
0b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:D6:AE:C4:B4:30:B3:4C:31:F3:30:8F:A5:27:78:47:D0:2B:8B:2B
X509v3 Authority Key Identifier:
keyid:67:58:37:B4:A7:76:DC:A3:62:4E:89:7F:1C:74:E6:E2:7D:1F:C1:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z1g3tKd23KNiTol_HHTm4n0fwVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/Z1g3tKd23KNiTol_HHTm4n0fwVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/Z1g3tKd23KNiTol_HHTm4n0fwVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:4c:b5:3d:05:f1:30:b9:2d:62:d4:ba:ab:2b:33:46:71:56:
f4:be:8e:a7:f0:4f:f9:95:cf:54:1a:7d:43:26:04:cc:e9:fd:
76:cd:e0:e4:8e:55:dd:68:2c:e0:f0:76:bc:9a:9f:69:4d:aa:
06:f8:db:6a:a9:d1:f4:b5:ed:a9:92:48:87:40:bb:f0:62:c1:
5f:57:d3:94:70:fb:7e:ad:7e:1f:36:02:63:dc:ee:32:aa:3c:
43:58:ee:c0:11:1f:d2:45:9c:1c:20:62:7a:a9:7f:58:80:c6:
2c:94:0c:3f:50:26:b4:98:5a:b6:4c:08:4d:41:27:2a:ec:d4:
bb:81:fe:bc:1f:81:c8:bf:6e:d2:15:ad:33:49:d8:1a:2c:5e:
2f:b2:75:3c:43:1e:ed:db:17:fa:63:77:eb:3b:70:a1:ab:48:
60:52:e9:aa:36:82:9c:ae:6b:1d:3e:e1:5c:c6:c7:29:9d:b5:
1b:f0:31:91:d1:74:7b:14:3e:1b:0b:bf:62:ad:45:95:11:f6:
61:c7:53:7f:ce:19:5c:d2:67:a5:f9:9b:b9:13:44:e2:9e:01:
a2:4a:86:2a:9e:52:44:41:70:a3:98:81:25:0f:66:0b:e3:f0:
c0:b6:30:2f:76:f4:21:1a:4e:99:d1:75:87:37:05:3d:b4:5d:
e5:95:5d:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:14:23 2026 by rpki-client