Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.mft
File: ZK7IAkyqEDqEEmlsfnL3eAPNhpU.mft (raw, json)
Hash identifier: kJCUsIGmGL0xj+tKKPVEtO7TW8X+tGUWDCB0q2iZPaQ=
Subject key identifier: D2:0A:47:18:99:28:CD:BF:4C:B8:AA:AD:DC:AF:D6:56:A1:B2:97:4E
Authority key identifier: 64:AE:C8:02:4C:AA:10:3A:84:12:69:6C:7E:72:F7:78:03:CD:86:95
Certificate issuer: /CN=64aec8024caa103a8412696c7e72f77803cd8695
Certificate serial: 019F9FCCB6D17DDD1F6C6DEB159E03E472A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.mft
Manifest number: 140E
Signing time: Sun 26 Jul 2026 19:00:21 +0000
Manifest this update: Sun 26 Jul 2026 19:00:21 +0000
Manifest next update: Mon 27 Jul 2026 19:00:21 +0000
Files and hashes: 1: SWC8q5CH8zumHrflzVp4e7i8dGY.roa (hash: z98d01QAmvPs9qVeEUxQJcsgJEzGZb8FADftU7i+UZw=)
2: ZK7IAkyqEDqEEmlsfnL3eAPNhpU.crl (hash: ktQD8Zsm22Sd7Ru+pibRoBVw8mx4HBEWXranGiQWJfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 19:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9f:cc:b6:d1:7d:dd:1f:6c:6d:eb:15:9e:03:e4:72:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64aec8024caa103a8412696c7e72f77803cd8695
Validity
Not Before: Jul 26 19:00:21 2026 GMT
Not After : Jul 27 19:00:21 2026 GMT
Subject: CN=d20a47189928cdbf4cb8aaaddcafd656a1b2974e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:02:00:f2:b7:c0:aa:2a:f6:fb:04:5d:2a:f7:
47:9b:16:8c:58:57:28:13:6f:01:15:63:d9:c6:46:
15:a4:ac:64:cc:9f:92:03:52:f0:c7:43:a6:2a:e0:
b4:35:53:27:18:66:8b:5b:1d:d5:a1:fb:68:94:69:
9e:3a:3a:b5:54:24:5a:d4:4b:04:bb:a5:03:20:cb:
92:27:e7:3b:d3:bb:ba:7f:04:47:fa:bf:af:ba:b8:
ab:ed:ff:a8:39:34:3e:de:7b:b3:ac:d7:b6:bc:3d:
4d:c0:ad:60:f2:47:0a:6f:7c:01:54:89:30:76:b4:
0b:05:f1:9d:10:c6:ac:2f:d1:fe:c0:52:8c:b2:d4:
25:67:58:46:ce:49:b4:9f:a0:f2:4e:7c:0e:a4:b9:
c5:c0:a3:1e:d3:5c:4d:67:3c:a8:5a:f8:ee:9f:84:
6c:0a:c2:05:fc:d1:4e:7d:e7:d5:ae:36:59:d5:69:
33:02:0e:fa:0a:33:24:41:b1:87:bc:f9:2f:2a:49:
d2:21:92:76:9f:3b:31:40:14:9a:05:51:b0:fc:31:
97:e1:3c:99:63:7a:77:17:9e:83:17:7f:37:f5:64:
42:94:2d:d2:58:9f:9c:de:9d:97:36:69:50:ae:38:
cd:79:a4:39:ce:79:ed:b1:3e:6e:ba:f5:5d:7a:aa:
8a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:0A:47:18:99:28:CD:BF:4C:B8:AA:AD:DC:AF:D6:56:A1:B2:97:4E
X509v3 Authority Key Identifier:
keyid:64:AE:C8:02:4C:AA:10:3A:84:12:69:6C:7E:72:F7:78:03:CD:86:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:13:5a:93:f4:c4:0a:62:1e:db:51:77:41:81:0f:89:40:00:
ff:dd:9e:d7:c1:3a:1d:17:22:59:56:8d:84:5e:1c:d9:6c:76:
40:e7:98:f6:c9:f3:e6:c7:31:ee:4b:14:04:9b:ca:7a:d9:a7:
43:40:c0:af:23:a8:12:42:e8:67:ed:15:95:e8:9c:dc:f0:a1:
e1:50:62:40:49:d2:0e:f0:b0:c1:ae:c8:9e:39:c7:53:72:b5:
9b:79:b6:7b:f1:f5:49:72:ff:c3:f1:c5:de:d8:36:d9:de:f4:
47:d4:1f:38:31:ca:44:b5:02:63:dd:52:a1:da:31:da:f6:63:
6f:19:5a:c0:b6:c2:54:9b:42:27:b0:fb:d5:78:7c:32:4a:05:
10:ea:e1:c1:bb:45:ae:1e:e2:d7:f1:fa:52:08:92:32:f3:9f:
95:29:aa:38:20:7d:76:4d:d3:cd:93:57:b3:59:28:0b:27:44:
43:c4:49:b9:73:1c:f0:59:8c:81:a5:05:5d:03:9d:e4:a6:78:
58:2f:ed:91:d4:a5:bd:ba:8a:79:62:af:96:62:bc:f2:ba:c7:
37:42:6c:95:37:9f:dc:14:9a:5a:7d:52:90:9a:35:37:e8:81:
27:ea:a3:0d:cf:7b:87:53:55:28:c2:86:23:46:cf:0c:0a:ab:
de:dc:0f:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 01:38:44 2026 by rpki-client