Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/6fcb84-017c-4aaf-bde7-aa91c92d5c48/1/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.mft
File: Z_sDKMvwslSvfJnTtp_GNM_Y9gA.mft (raw, json)
Hash identifier: FcwHrAyg9Gyw4Q6jwkmwU+UQpUHHQjgijEf/L5fKxHQ=
Subject key identifier: A8:05:10:AD:5F:98:7C:15:4C:24:02:11:65:7E:A0:9E:31:59:76:D9
Authority key identifier: 67:FB:03:28:CB:F0:B2:54:AF:7C:99:D3:B6:9F:C6:34:CF:D8:F6:00
Certificate issuer: /CN=67fb0328cbf0b254af7c99d3b69fc634cfd8f600
Certificate serial: 019F86B250A5774968C9576BD9F5349D4239
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/6fcb84-017c-4aaf-bde7-aa91c92d5c48/1/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.mft
Manifest number: 1170
Signing time: Tue 21 Jul 2026 22:01:00 +0000
Manifest this update: Tue 21 Jul 2026 22:01:00 +0000
Manifest next update: Wed 22 Jul 2026 22:01:00 +0000
Files and hashes: 1: Z_sDKMvwslSvfJnTtp_GNM_Y9gA.crl (hash: nqwWd+Z+rCoxi2Cnb6wgyCNN1MSs55W606lkOn+zueY=)
2: zY7N7I-0j2wyToIYtsy8gjVgKFc.roa (hash: eG6Aql8AjY8k7IpGUPh2hREkMKRNs6mKuXLIFh3G5Wk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/6fcb84-017c-4aaf-bde7-aa91c92d5c48/1/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/6fcb84-017c-4aaf-bde7-aa91c92d5c48/1/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:b2:50:a5:77:49:68:c9:57:6b:d9:f5:34:9d:42:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67fb0328cbf0b254af7c99d3b69fc634cfd8f600
Validity
Not Before: Jul 21 22:01:00 2026 GMT
Not After : Jul 22 22:01:00 2026 GMT
Subject: CN=a80510ad5f987c154c240211657ea09e315976d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:17:11:e3:a9:aa:3c:18:b5:3e:2f:00:f5:8c:
6d:29:fc:16:ea:a9:ee:9a:e6:ad:99:4c:97:c5:22:
1d:cd:f6:5c:71:e7:ce:0d:80:05:19:80:d1:b4:77:
02:96:6a:bf:04:8f:01:52:55:67:0c:83:8c:4c:e2:
21:6d:d9:11:6b:4c:f7:8d:81:f3:c6:ed:20:dd:bf:
4b:9a:0f:ee:f6:e8:9b:f1:df:a2:14:be:07:c1:74:
35:ad:e6:22:ac:cb:80:5b:2a:10:e8:b7:72:dd:77:
7f:ec:e1:10:f0:42:08:59:3e:86:57:77:5c:8e:85:
17:87:85:db:a9:58:23:c9:85:3d:6c:27:fb:a7:78:
8e:60:a3:ac:7f:95:e0:05:3d:e5:b3:c7:11:58:97:
9c:80:f0:ad:a8:c4:00:15:d5:9e:3e:e5:44:1f:6e:
92:fc:18:c4:6b:cf:50:53:04:58:53:d0:95:4f:cc:
9a:07:19:55:ea:69:1e:4d:8d:02:8e:72:0f:ae:7e:
e3:e3:b3:d6:a3:02:88:38:9f:75:50:98:0e:bc:f8:
4b:2a:a6:bb:e2:1b:f9:1e:40:98:48:f3:ab:a3:93:
fe:6e:7a:cc:79:62:0d:c4:e2:3e:9f:d7:e6:c1:b5:
cf:b4:18:e5:94:a1:04:a3:8f:71:b0:9b:9c:be:54:
15:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:05:10:AD:5F:98:7C:15:4C:24:02:11:65:7E:A0:9E:31:59:76:D9
X509v3 Authority Key Identifier:
keyid:67:FB:03:28:CB:F0:B2:54:AF:7C:99:D3:B6:9F:C6:34:CF:D8:F6:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6fcb84-017c-4aaf-bde7-aa91c92d5c48/1/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6fcb84-017c-4aaf-bde7-aa91c92d5c48/1/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:a5:c9:1c:3c:52:94:09:28:fc:34:fc:ee:d0:1b:9d:96:b4:
f4:81:a2:c6:f4:75:0a:e4:63:67:17:a9:22:7e:21:d8:f7:1c:
b3:c7:64:19:d8:af:62:43:76:db:a3:bd:11:52:7c:7f:ec:c2:
75:ad:2c:2f:be:c3:f3:2c:8f:ad:42:64:65:1c:8d:7e:f5:b7:
7d:5b:f1:52:9a:52:53:7f:de:78:7d:5a:8e:ac:e7:30:95:7e:
6d:cf:c1:98:e8:dd:3b:a6:34:6c:19:33:84:31:13:af:0c:62:
95:4a:50:3b:d0:01:8e:6e:a0:47:fd:cd:cb:58:ab:a6:19:70:
4d:26:95:da:37:cd:4f:aa:1b:77:a1:94:1a:3d:b2:82:bf:75:
36:3f:4c:38:d2:df:61:57:a7:d2:85:c2:2f:75:2c:8f:02:28:
47:dc:f9:3e:f3:85:29:53:d5:0d:fc:97:ac:fe:95:24:0d:60:
2c:90:a6:84:3c:24:76:7f:c5:73:44:93:93:6d:7d:dd:c2:88:
81:a4:10:53:55:00:96:e0:4a:04:34:fc:6e:cb:c5:54:29:65:
77:af:07:71:47:45:54:fb:7d:9f:27:11:ee:c4:7d:8b:c1:94:
01:ea:ef:71:a4:48:e7:12:e7:1c:13:79:df:c0:0c:8c:65:32:
c0:e7:24:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:02:52 2026 by rpki-client