Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/27cbd0-a7b9-45fb-9954-78d1144ad967/1/zl1FYESPeKTc3LeRoH2tIWOgjN8.mft
File: zl1FYESPeKTc3LeRoH2tIWOgjN8.mft (raw, json)
Hash identifier: otgytpNF6KqmGecR+Yiy0jvbXFLIXIdQu1O2PKoubCA=
Subject key identifier: 98:39:1E:68:1E:35:FC:81:54:5E:47:9B:BD:89:99:7A:46:3B:0D:45
Authority key identifier: CE:5D:45:60:44:8F:78:A4:DC:DC:B7:91:A0:7D:AD:21:63:A0:8C:DF
Certificate issuer: /CN=ce5d4560448f78a4dcdcb791a07dad2163a08cdf
Certificate serial: 019F9F5EF242B9263120A067580CA70BD66F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zl1FYESPeKTc3LeRoH2tIWOgjN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/27cbd0-a7b9-45fb-9954-78d1144ad967/1/zl1FYESPeKTc3LeRoH2tIWOgjN8.mft
Manifest number: 1961
Signing time: Sun 26 Jul 2026 17:00:27 +0000
Manifest this update: Sun 26 Jul 2026 17:00:27 +0000
Manifest next update: Mon 27 Jul 2026 17:00:27 +0000
Files and hashes: 1: kJTuRCvouXJMaVDF0pdJUxYymkE.roa (hash: u4BkMutspCjtHl2p10ecFJYI7igX5XDffjXXKmzdde8=)
2: zl1FYESPeKTc3LeRoH2tIWOgjN8.crl (hash: uz6Jk8pIW6V04QEgWbdx1agMsd0cSvjiuiJ2mx4wUd0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/27cbd0-a7b9-45fb-9954-78d1144ad967/1/zl1FYESPeKTc3LeRoH2tIWOgjN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/27cbd0-a7b9-45fb-9954-78d1144ad967/1/zl1FYESPeKTc3LeRoH2tIWOgjN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zl1FYESPeKTc3LeRoH2tIWOgjN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9f:5e:f2:42:b9:26:31:20:a0:67:58:0c:a7:0b:d6:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce5d4560448f78a4dcdcb791a07dad2163a08cdf
Validity
Not Before: Jul 26 17:00:27 2026 GMT
Not After : Jul 27 17:00:27 2026 GMT
Subject: CN=98391e681e35fc81545e479bbd89997a463b0d45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:36:eb:09:2b:63:58:9e:2f:94:38:f0:c2:a8:
05:88:6c:92:7e:4a:c3:ef:49:e0:a0:1e:ac:52:2a:
fa:b3:be:2c:42:f0:e9:ce:81:f4:d4:a3:94:99:e8:
87:55:99:e9:fd:e7:db:fd:43:4d:95:3d:fa:38:53:
98:6e:7c:9b:17:f4:90:f2:f9:b2:06:57:ec:57:38:
13:6a:db:ed:9b:b0:ca:a5:fd:aa:78:2f:5b:5c:e7:
ff:54:d5:3c:48:74:fc:ce:41:5c:bc:53:6d:6a:05:
bd:3b:cf:76:ad:61:7c:07:cd:f9:55:9c:1f:93:36:
43:a2:f7:09:49:89:bd:06:cf:b4:15:b2:bc:c7:30:
b5:a7:f2:24:34:6b:36:a0:aa:d1:d2:bb:85:e4:52:
69:23:bd:fb:24:5d:72:33:e1:c7:b1:f1:e2:2e:44:
4a:1a:dd:de:cb:29:51:9c:e5:ac:f7:e1:3d:58:f5:
16:1d:91:19:aa:8d:8c:2e:07:f1:b6:61:31:d9:a7:
06:1d:a4:a3:93:98:72:0d:44:d4:84:10:9b:4a:58:
c8:14:fa:89:e2:96:40:72:25:ba:1e:c3:05:30:67:
64:71:19:e7:68:99:7b:be:c6:6b:8a:a0:58:3a:3d:
bf:1d:9f:b4:84:88:79:9f:a1:70:6e:a2:88:0c:bc:
68:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:39:1E:68:1E:35:FC:81:54:5E:47:9B:BD:89:99:7A:46:3B:0D:45
X509v3 Authority Key Identifier:
keyid:CE:5D:45:60:44:8F:78:A4:DC:DC:B7:91:A0:7D:AD:21:63:A0:8C:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zl1FYESPeKTc3LeRoH2tIWOgjN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/27cbd0-a7b9-45fb-9954-78d1144ad967/1/zl1FYESPeKTc3LeRoH2tIWOgjN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/27cbd0-a7b9-45fb-9954-78d1144ad967/1/zl1FYESPeKTc3LeRoH2tIWOgjN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:00:25:a7:30:c3:93:8b:0d:80:53:a3:51:82:8b:3a:24:44:
ca:2c:77:47:ee:42:85:70:d7:22:4d:f9:73:b1:6a:ec:ea:1b:
ca:86:03:e3:0d:c0:1d:1e:99:33:61:0d:67:ea:f2:3b:e0:d1:
54:8a:a8:ef:7d:f3:67:67:41:b3:e1:47:35:18:d2:14:59:85:
36:c9:78:90:b6:d3:e1:b1:4d:55:3d:0f:a8:25:37:08:da:26:
7d:21:a2:8d:84:53:82:c7:1f:ea:a0:03:33:ec:ff:b6:2d:d0:
9b:db:27:d5:ef:a1:d1:62:1a:a5:4b:59:50:52:aa:90:44:ad:
0c:8c:42:da:3e:c9:22:6c:32:87:80:02:37:c5:37:00:18:0c:
2c:53:14:7f:e6:82:0e:b8:8e:37:9a:f9:38:b9:8b:6e:57:03:
ce:17:5a:81:70:2a:aa:ee:d2:57:b0:e6:0d:3c:86:52:4c:5c:
08:b3:10:87:48:87:02:2f:f6:f6:9d:37:3e:e0:bc:42:5b:d1:
5a:c1:e4:b5:a8:fe:7d:bf:11:ed:72:80:3a:e5:58:9f:11:a1:
60:fc:f6:0f:57:7c:4c:e2:72:31:da:aa:6e:15:cf:7e:07:f4:
c9:ec:c5:ce:7c:7a:87:86:8e:89:fa:b5:50:3b:d0:41:14:89:
6b:bf:7d:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 20:23:09 2026 by rpki-client