Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft
File: ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft (raw, json)
Hash identifier: CBhlRMiXzI017xUooLjpuvnE88fTzQBlf/8jnb+rrvo=
Subject key identifier: AC:98:95:0A:58:3A:46:C5:5D:3F:7A:DC:71:2C:B3:22:84:A4:E0:A3
Authority key identifier: 64:65:79:56:1E:CA:58:79:A7:47:02:5E:57:98:48:7B:19:CD:2A:97
Certificate issuer: /CN=646579561eca5879a747025e5798487b19cd2a97
Certificate serial: 01A01F432CCEB8FE3111F2289DC57C1E4BDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft
Manifest number: 1A11
Signing time: Thu 20 Aug 2026 13:01:30 +0000
Manifest this update: Thu 20 Aug 2026 13:01:30 +0000
Manifest next update: Fri 21 Aug 2026 13:01:30 +0000
Files and hashes: 1: 1-ar0P82ef_StXuE7zueriWBD8hE.roa (hash: u9ZMHFdbfeEonEHEjHmh9TkFg76are6Y/T2IPG1BknM=)
2: HmIJXkixJ1rahF7EYYPCTla8Klc.roa (hash: gwb50AaVi0ThYCb3TRftn7wyLBQSCU21VtQTQhMGtAM=)
3: ZGV5Vh7KWHmnRwJeV5hIexnNKpc.crl (hash: tkA4GklP9GRsYIDsypBYwzUe7fI/plLtP6OqeFYE5VM=)
4: g95v2zig0ZqaQU7eeusrbdTK5G0.roa (hash: cLTgf25tE2pedm+NWY4o5xvbCdWa6GTqSbkhECMQQmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 13:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1f:43:2c:ce:b8:fe:31:11:f2:28:9d:c5:7c:1e:4b:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=646579561eca5879a747025e5798487b19cd2a97
Validity
Not Before: Aug 20 13:01:30 2026 GMT
Not After : Aug 21 13:01:30 2026 GMT
Subject: CN=ac98950a583a46c55d3f7adc712cb32284a4e0a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:89:5e:02:b6:ff:95:16:ad:ff:e1:9e:ea:97:
90:8b:83:37:6b:5b:e1:eb:dc:4e:7b:4f:91:e7:5d:
68:b3:89:dd:b9:68:54:10:33:b0:db:29:a0:71:c9:
ed:17:6d:92:65:48:74:4f:f3:47:48:e0:72:49:df:
e1:4c:3f:06:14:02:10:3e:81:32:da:8e:fc:d5:d2:
69:e6:c0:1d:1d:62:68:48:1e:23:dc:72:06:6b:21:
af:aa:09:79:2a:88:b7:88:2d:7c:ea:6d:bc:4b:3c:
c1:33:f1:dc:c0:3c:39:04:0f:2f:f7:24:a2:91:9c:
c7:0c:7a:3c:0f:e4:b7:94:0b:61:de:a8:a6:4f:e2:
fd:da:c3:db:d9:40:41:47:03:fe:87:04:11:fc:de:
27:a0:ce:d2:da:9f:8c:dd:13:e3:bd:16:fa:aa:dd:
8d:10:bd:3e:91:f4:8b:ad:f3:a1:aa:d0:77:f8:89:
24:c5:4c:00:e2:cb:eb:17:4b:ab:7f:71:7f:cd:b0:
52:67:a2:73:fa:3f:8e:cc:e8:50:1b:bd:a8:5b:38:
ae:11:9b:ff:6b:43:18:84:4d:d1:de:bc:ae:68:27:
57:3d:fc:12:dc:7a:84:5c:38:e2:2e:7a:41:f5:3f:
0c:bf:56:31:ec:75:cb:57:85:2e:08:a3:2f:78:bc:
7d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:98:95:0A:58:3A:46:C5:5D:3F:7A:DC:71:2C:B3:22:84:A4:E0:A3
X509v3 Authority Key Identifier:
keyid:64:65:79:56:1E:CA:58:79:A7:47:02:5E:57:98:48:7B:19:CD:2A:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:b1:fc:7e:90:d1:be:49:bf:f6:41:ce:87:2c:f1:36:d9:79:
55:2f:98:84:e2:31:74:07:73:a6:2d:6b:a9:7d:b7:66:9a:b9:
54:bc:2c:c2:df:5c:5d:e7:52:b8:67:31:fe:05:11:a3:ae:ae:
ba:35:b7:d5:b5:e3:02:0b:3d:8a:45:4d:ff:c6:03:2e:2e:e3:
53:23:22:a1:e5:26:18:1d:c9:cc:6e:4d:46:d5:70:45:a9:20:
79:61:e5:80:7a:8b:dc:fc:5a:69:6c:74:09:16:58:68:a3:70:
1a:10:c7:3a:62:df:90:e4:02:43:b8:dc:6d:9e:d8:72:6d:0d:
c4:fe:ee:08:7a:e4:1d:67:7f:26:d5:7e:eb:05:42:ea:d2:45:
84:55:09:6a:e1:b3:32:bc:b7:d4:f3:5e:b2:d7:d7:86:70:ac:
c1:b8:6e:23:61:b3:3d:a5:fe:73:fb:cf:62:4e:34:01:ac:d0:
69:dc:1f:e2:55:b7:3c:e0:e7:56:93:5c:b4:b2:5a:d1:33:9a:
5f:b8:05:48:1e:c2:cc:04:eb:e8:00:34:12:37:fc:e9:6e:b0:
b4:23:80:ac:35:46:f3:6d:d7:99:08:0e:ca:07:e2:83:a9:3c:
3e:61:0b:c7:56:58:31:bf:bc:c3:73:0f:6c:4a:c8:1f:29:94:
dd:20:aa:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 22:54:58 2026 by rpki-client