
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/a58803-24e7-46cf-b244-9da7887f6a2f/1/zE4rrFHZy3KbGnVijua0ycHp_8g.mft
File: zE4rrFHZy3KbGnVijua0ycHp_8g.mft (raw, json)
Hash identifier: 2uEzj6/GLJ8vuxSspyLHvsduHBE2H0EhZKB3jpAdObk=
Subject key identifier: BF:EC:A0:2C:A9:47:AA:5D:73:E9:24:D1:49:07:83:1C:CB:17:9A:79
Authority key identifier: CC:4E:2B:AC:51:D9:CB:72:9B:1A:75:62:8E:E6:B4:C9:C1:E9:FF:C8
Certificate issuer: /CN=cc4e2bac51d9cb729b1a75628ee6b4c9c1e9ffc8
Certificate serial: 019FCAEF868A9D72E118BD217D1F1E87A29F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zE4rrFHZy3KbGnVijua0ycHp_8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/a58803-24e7-46cf-b244-9da7887f6a2f/1/zE4rrFHZy3KbGnVijua0ycHp_8g.mft
Manifest number: 058F
Signing time: Tue 04 Aug 2026 04:02:02 +0000
Manifest this update: Tue 04 Aug 2026 04:02:02 +0000
Manifest next update: Wed 05 Aug 2026 04:02:02 +0000
Files and hashes: 1: CVwCEsbzumpXgEnKDDCCAaIDrYM.roa (hash: lxu8mh9bo97HPFI+56oJ6vzMl5ukNpSkTrJqrOGog30=)
2: zE4rrFHZy3KbGnVijua0ycHp_8g.crl (hash: 9keKSztc+xqSCbHig0YLuJBUmq+ve6Zk0e7Tl0hBiUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/a58803-24e7-46cf-b244-9da7887f6a2f/1/zE4rrFHZy3KbGnVijua0ycHp_8g.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/a58803-24e7-46cf-b244-9da7887f6a2f/1/zE4rrFHZy3KbGnVijua0ycHp_8g.mft
rsync://rpki.ripe.net/repository/DEFAULT/zE4rrFHZy3KbGnVijua0ycHp_8g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Aug 2026 04:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ca:ef:86:8a:9d:72:e1:18:bd:21:7d:1f:1e:87:a2:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc4e2bac51d9cb729b1a75628ee6b4c9c1e9ffc8
Validity
Not Before: Aug 4 04:02:02 2026 GMT
Not After : Aug 5 04:02:02 2026 GMT
Subject: CN=bfeca02ca947aa5d73e924d14907831ccb179a79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:24:3c:7b:d5:ba:ef:48:85:b3:ca:f7:d5:e3:
25:20:c8:55:a6:2a:8d:3c:81:46:c4:c2:3e:53:c6:
88:ee:28:97:bc:7f:dd:4a:99:4d:99:76:c2:b7:9b:
6d:1e:38:68:30:f0:64:c6:4a:c8:d1:cd:38:de:f4:
36:a7:20:db:08:2a:90:91:b2:32:46:7f:96:8d:90:
bb:a7:7f:42:4d:47:ef:3d:c7:14:01:1e:88:ee:b0:
69:94:c6:94:b2:c9:da:9a:e2:02:d0:11:f2:05:d3:
3f:0e:03:54:52:9e:8f:b1:1b:26:09:72:4c:05:bc:
6f:da:22:d9:44:d3:59:53:56:e5:ef:2f:33:c4:79:
2a:7b:f9:c2:5d:9a:73:0a:dc:c0:fe:a0:aa:00:33:
8c:20:8c:58:f4:1a:78:81:38:35:7e:f6:29:85:c6:
8a:48:25:68:32:f2:e6:dd:23:50:9c:d4:94:45:2f:
fd:1f:d0:3b:e2:da:d2:38:df:27:37:b2:64:8f:13:
8b:f5:c5:79:dd:2e:ee:85:07:91:ff:93:9e:01:86:
41:65:69:d1:82:20:16:4d:80:c7:90:41:92:9f:70:
17:21:17:99:a6:db:78:87:26:a3:b4:5c:93:91:28:
0a:65:a9:4d:fd:f2:6d:d2:87:63:85:ed:37:1f:d9:
69:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:EC:A0:2C:A9:47:AA:5D:73:E9:24:D1:49:07:83:1C:CB:17:9A:79
X509v3 Authority Key Identifier:
keyid:CC:4E:2B:AC:51:D9:CB:72:9B:1A:75:62:8E:E6:B4:C9:C1:E9:FF:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zE4rrFHZy3KbGnVijua0ycHp_8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a58803-24e7-46cf-b244-9da7887f6a2f/1/zE4rrFHZy3KbGnVijua0ycHp_8g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a58803-24e7-46cf-b244-9da7887f6a2f/1/zE4rrFHZy3KbGnVijua0ycHp_8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:17:20:f9:e6:3b:62:2f:39:59:5c:dd:c9:4b:c7:d2:01:5f:
c3:39:c2:5c:07:bc:77:e3:06:6c:e0:86:01:f8:78:70:3b:b8:
40:b9:26:1d:7a:71:3e:6e:0a:0f:df:50:32:63:91:1e:5d:8a:
f8:33:bb:7a:bd:b1:b8:27:e6:1d:7f:f5:cc:fe:c4:37:c5:0c:
60:a7:c5:f8:6b:f0:92:f7:36:d9:c5:86:3e:8b:e8:16:c2:92:
34:8a:5f:e4:7b:c5:42:1f:13:59:25:e2:51:f6:3d:0c:85:32:
08:f1:7e:27:bc:1e:c6:d3:15:5c:11:5c:46:91:de:0e:f9:d7:
e6:5d:03:16:85:57:0d:a5:8e:d7:35:74:04:6b:b3:a0:ab:ce:
a4:ec:90:24:f5:02:91:fc:6a:e4:5e:22:62:58:ca:27:31:9c:
f4:53:25:5a:f5:20:f6:46:6c:77:d8:64:83:67:c1:f2:c6:d8:
98:2d:3a:bc:07:18:dc:8f:3a:0c:10:ec:b7:e6:10:60:10:85:
8c:06:0f:84:88:30:4d:01:90:6e:fa:2b:de:99:a7:f3:8a:f2:
f3:2a:a0:d7:cc:f3:36:85:56:f7:b6:04:2a:07:eb:e9:a1:de:
16:c9:0b:a5:f9:7f:fa:1a:78:65:1b:73:2c:2b:bf:3e:24:e3:
25:61:15:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 14:00:52 2026 by rpki-client