Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/194e97-e5db-4a6a-afb5-552e210354f4/1/ZfhSy9HN8kShcO2sJEDQ0vS9Uxk.mft
File: ZfhSy9HN8kShcO2sJEDQ0vS9Uxk.mft (raw, json)
Hash identifier: 0xRh31Bbj7uYpOHNPfhyOMRfQa7D6NK2xtHaNL08G8U=
Subject key identifier: CA:49:FD:FF:9C:3E:5A:53:92:32:B5:80:C4:36:7E:82:E6:0C:F4:B7
Authority key identifier: 65:F8:52:CB:D1:CD:F2:44:A1:70:ED:AC:24:40:D0:D2:F4:BD:53:19
Certificate issuer: /CN=65f852cbd1cdf244a170edac2440d0d2f4bd5319
Certificate serial: 019F9F963897799D83883F53D5F17C8EFA2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZfhSy9HN8kShcO2sJEDQ0vS9Uxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/194e97-e5db-4a6a-afb5-552e210354f4/1/ZfhSy9HN8kShcO2sJEDQ0vS9Uxk.mft
Manifest number: 0100
Signing time: Sun 26 Jul 2026 18:00:49 +0000
Manifest this update: Sun 26 Jul 2026 18:00:49 +0000
Manifest next update: Mon 27 Jul 2026 18:00:49 +0000
Files and hashes: 1: ZfhSy9HN8kShcO2sJEDQ0vS9Uxk.crl (hash: j1F1NZZVuZrcB9nnOCiQSxvdLaPvvc1RKVjQz4yPyhw=)
2: fX47DA3aknJjMaNF3kpMk1RfVDY.roa (hash: QnbSVkKJ1tgtZD036KjNU81Gb7v/2YPgVvv50U+eDiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/194e97-e5db-4a6a-afb5-552e210354f4/1/ZfhSy9HN8kShcO2sJEDQ0vS9Uxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/194e97-e5db-4a6a-afb5-552e210354f4/1/ZfhSy9HN8kShcO2sJEDQ0vS9Uxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZfhSy9HN8kShcO2sJEDQ0vS9Uxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9f:96:38:97:79:9d:83:88:3f:53:d5:f1:7c:8e:fa:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65f852cbd1cdf244a170edac2440d0d2f4bd5319
Validity
Not Before: Jul 26 18:00:49 2026 GMT
Not After : Jul 27 18:00:49 2026 GMT
Subject: CN=ca49fdff9c3e5a539232b580c4367e82e60cf4b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c4:55:52:af:d8:10:46:84:c5:a3:45:4c:8d:
f4:08:cf:7b:83:ca:4f:17:3d:0f:ee:06:65:e1:7e:
d8:a6:6e:25:89:e7:d9:97:94:9a:04:4f:2a:c8:b4:
e0:79:2f:bb:a1:1d:b0:0a:fd:f6:ad:7e:a8:ef:7f:
9b:8c:b1:36:28:93:b0:d1:f3:8a:0d:ef:f0:47:68:
01:f7:eb:bc:6d:7b:62:ba:8c:d2:8e:2e:c6:46:c6:
65:99:b7:23:3c:97:63:a5:84:8b:10:db:70:ae:7f:
ab:ff:18:aa:7c:db:72:87:95:6c:57:b4:08:62:0c:
21:b5:77:b2:bc:f8:df:6e:60:7e:29:52:0a:9c:e6:
cc:03:e0:ab:3a:f4:e7:15:5b:1f:94:e2:34:7c:0f:
23:4c:f7:a0:09:0b:d8:f3:a7:50:4a:ef:3f:3d:f9:
74:68:0e:6b:34:0a:23:c6:23:27:6d:38:73:e8:bd:
24:4a:64:26:ed:f7:4c:41:e0:d3:cc:0c:19:5e:66:
84:04:8b:b9:97:fb:9e:6c:ea:12:8a:80:36:0c:cd:
ed:59:18:51:c6:f0:f9:fc:61:87:13:7b:79:9c:75:
5e:bd:9d:0f:8d:15:4d:c0:c7:bf:a9:85:58:1e:49:
e6:c8:84:6e:fa:4c:68:d6:4f:3d:2c:6a:f4:75:16:
97:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:49:FD:FF:9C:3E:5A:53:92:32:B5:80:C4:36:7E:82:E6:0C:F4:B7
X509v3 Authority Key Identifier:
keyid:65:F8:52:CB:D1:CD:F2:44:A1:70:ED:AC:24:40:D0:D2:F4:BD:53:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZfhSy9HN8kShcO2sJEDQ0vS9Uxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/194e97-e5db-4a6a-afb5-552e210354f4/1/ZfhSy9HN8kShcO2sJEDQ0vS9Uxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/194e97-e5db-4a6a-afb5-552e210354f4/1/ZfhSy9HN8kShcO2sJEDQ0vS9Uxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:b9:fc:16:e2:a2:a0:72:3c:4d:17:0c:93:49:d2:99:f8:83:
78:8d:35:f9:52:38:3c:47:d0:e2:44:14:d1:ce:4e:b1:aa:11:
55:be:57:eb:1a:16:2f:19:1f:e0:40:b6:23:ea:1c:ab:2b:92:
51:d6:69:8d:81:04:4b:ad:b6:65:d1:1f:66:89:ee:31:4c:02:
27:5e:ac:ab:13:88:93:db:f7:ad:fd:de:59:b0:81:9f:52:f7:
cc:e1:fa:c4:ce:97:4e:77:3d:f7:22:d7:57:5a:4a:29:e0:41:
a8:43:70:60:a5:a3:7c:d5:b3:b4:66:e7:4a:26:f7:03:4d:f1:
c8:68:80:b3:2d:ac:5f:b4:9b:85:d0:ae:35:88:ab:8d:8f:b2:
ba:00:35:fb:7c:51:29:e2:84:6f:cf:9a:4f:17:39:c8:45:aa:
e8:28:4e:d1:8a:2a:bc:1b:e3:a9:b9:92:5e:8c:33:37:45:2f:
dd:36:ba:89:80:84:2e:47:74:00:4d:df:1e:4a:23:d5:a6:18:
44:40:ab:7a:56:8c:b0:97:36:18:c3:0d:81:c5:98:eb:81:c8:
18:64:a1:83:5c:46:ed:1d:a8:49:25:1e:72:38:2b:fd:71:09:
2c:7a:f2:4f:94:59:57:10:71:92:9b:11:a0:11:48:8c:5b:13:
33:38:89:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 00:04:31 2026 by rpki-client