
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.mft
File: ZjhRXzKUSWmuADG94C0fTL0NK5g.mft (raw, json)
Hash identifier: dckxoxv/dCS3EFrckkmy3QjdNfCjMnpNj/GMv5YG4uI=
Subject key identifier: 7A:EA:8A:9C:B9:1D:C3:C7:5F:A6:48:5B:C9:CC:2B:4E:07:62:B9:78
Authority key identifier: 66:38:51:5F:32:94:49:69:AE:00:31:BD:E0:2D:1F:4C:BD:0D:2B:98
Certificate issuer: /CN=6638515f32944969ae0031bde02d1f4cbd0d2b98
Certificate serial: 019FFE6E3E5E78E7B1F4C9F1C8626DE73CE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZjhRXzKUSWmuADG94C0fTL0NK5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.mft
Manifest number: 055F
Signing time: Fri 14 Aug 2026 04:01:05 +0000
Manifest this update: Fri 14 Aug 2026 04:01:05 +0000
Manifest next update: Sat 15 Aug 2026 04:01:05 +0000
Files and hashes: 1: EQIS8hUY1cmRXKR2EV3HGZu3pAA.roa (hash: Wp9jKVUnjH19KZBMjioHvcWYEkt9n8/MKYDMHRVjrW8=)
2: U6_BOZR92hnw_a9L4P6TzqeXhec.roa (hash: g5QjwrMvRa/952IazG0KYw2xw/6dTSo8fap6F5NGQ7c=)
3: ZjhRXzKUSWmuADG94C0fTL0NK5g.crl (hash: pjzs4ZkmFguAqD7gHud2ir0rkoamEqTFucb1RXIDwXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZjhRXzKUSWmuADG94C0fTL0NK5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fe:6e:3e:5e:78:e7:b1:f4:c9:f1:c8:62:6d:e7:3c:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6638515f32944969ae0031bde02d1f4cbd0d2b98
Validity
Not Before: Aug 14 04:01:05 2026 GMT
Not After : Aug 15 04:01:05 2026 GMT
Subject: CN=7aea8a9cb91dc3c75fa6485bc9cc2b4e0762b978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:92:89:a2:e8:b0:5c:7e:45:79:59:1e:7e:86:
7f:1a:b8:39:c2:df:b4:17:e2:a7:5a:3a:e9:71:32:
7f:bf:34:30:f8:ce:87:6e:c6:e1:33:1b:13:55:50:
27:f4:51:db:1b:e6:90:0b:e6:57:63:ae:7b:05:67:
e2:92:8c:bc:51:41:b7:4a:d0:b3:48:e3:cb:3a:eb:
88:99:8b:30:13:dc:51:51:9c:a2:8e:75:8c:12:b0:
5a:bb:45:62:f0:d3:a3:c0:3e:99:56:a5:78:af:46:
ac:98:df:7b:8f:81:1d:df:8e:21:cf:c8:d8:6e:01:
c7:57:67:03:23:2e:ca:f8:03:66:4d:5c:57:a3:05:
3c:8f:f8:91:59:18:08:31:83:3d:10:a7:76:cc:d6:
fd:98:db:15:2f:61:55:d0:49:bf:9f:1a:88:7f:81:
23:9f:f8:2f:f2:bd:d8:38:c4:27:ad:e0:72:b7:f3:
87:b3:c4:bd:3c:f5:52:5a:e4:f5:b7:7f:ee:c1:8d:
44:c9:70:71:82:ec:c0:12:31:78:73:d9:e2:24:e8:
ba:45:8a:d8:06:ae:7e:10:4e:96:7b:44:0c:c2:42:
26:50:15:2d:40:b8:5d:b1:ca:16:95:d5:c2:7b:ad:
94:4e:2b:f8:71:26:1e:d3:94:ef:a9:b7:b0:9c:1b:
c3:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:EA:8A:9C:B9:1D:C3:C7:5F:A6:48:5B:C9:CC:2B:4E:07:62:B9:78
X509v3 Authority Key Identifier:
keyid:66:38:51:5F:32:94:49:69:AE:00:31:BD:E0:2D:1F:4C:BD:0D:2B:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZjhRXzKUSWmuADG94C0fTL0NK5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:da:3b:05:e2:e6:d2:98:7f:2a:f7:2b:90:f5:55:d8:03:90:
ec:92:a4:12:ba:90:42:c6:5c:93:0e:95:73:ae:49:a5:2b:b9:
26:ab:20:4f:41:63:ee:ce:18:51:7c:4e:a0:63:aa:e2:9c:90:
48:98:ca:ac:47:65:32:26:28:c8:c0:56:c7:f2:4c:78:0a:f8:
35:c8:d7:7e:63:fa:5c:8e:59:c7:b2:ae:c5:bc:43:9b:4e:2d:
d9:37:a1:7b:07:08:1d:de:02:44:65:39:f8:93:3e:3a:14:59:
1f:89:c6:8c:88:a7:22:c4:be:e6:46:3b:3a:05:76:af:99:11:
e0:37:ee:a2:b3:74:9f:41:5c:59:2a:7c:e1:0f:ce:2f:f7:78:
50:a1:c7:3c:1a:13:ee:62:ed:e4:0d:70:ee:98:e3:4c:9e:1c:
3a:e0:3f:fa:84:db:d6:de:87:20:cb:5c:cf:fb:f2:96:3b:91:
69:56:87:33:e6:77:a4:58:81:97:33:a9:c9:9f:42:bb:ca:44:
26:19:cf:e2:cc:a8:da:90:c0:13:14:82:28:5d:1d:78:48:06:
38:ca:18:00:fc:45:64:07:9f:58:63:c7:30:85:c0:f3:4f:5e:
fc:c9:64:cc:7d:ba:f5:06:d2:d9:2b:0c:a9:f8:08:a4:61:b6:
75:5d:5e:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 06:33:08 2026 by rpki-client