Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft
File: Zw5gd5881NA9XlB4QPX6KjGmq40.mft (raw, json)
Hash identifier: 56hHnJSm0aM69n1m11DwVjw3Zz1Q+9ue4xY7VUTVdJA=
Subject key identifier: BE:F7:7E:66:F9:75:26:F0:51:CE:85:17:7B:AD:68:6D:A6:8F:EF:44
Authority key identifier: 67:0E:60:77:9F:3C:D4:D0:3D:5E:50:78:40:F5:FA:2A:31:A6:AB:8D
Certificate issuer: /CN=670e60779f3cd4d03d5e507840f5fa2a31a6ab8d
Certificate serial: 019F3AF41B57D628425551CDCDFFCB5DCD42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zw5gd5881NA9XlB4QPX6KjGmq40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft
Manifest number: 07F9
Signing time: Tue 07 Jul 2026 05:01:43 +0000
Manifest this update: Tue 07 Jul 2026 05:01:43 +0000
Manifest next update: Wed 08 Jul 2026 05:01:43 +0000
Files and hashes: 1: 99ql3Nj_XXqdJBUKyH1zSjprsmk.roa (hash: 8Q5g46XQnTAlgbAY9G1RdWl4ij89rLN6KeETKWp4UX4=)
2: UKvSxhXp6UeN9PA2d7zmzONW8dI.roa (hash: U2Kl3dxAuyKIqhwNvATcE57d94w+8GaKrGRAFwd2pQQ=)
3: Zw5gd5881NA9XlB4QPX6KjGmq40.crl (hash: zFoJOygFLukFGmklwqKE4ygw3ns0mMMpZQdcCEN/tzs=)
4: yGnTUZ-K5iZvv_QJlyjyr1Vifo0.roa (hash: 3NvMCRIYGPgbO9Y+3R7bmJF+C6D6NUF59+RrT9ZBe2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zw5gd5881NA9XlB4QPX6KjGmq40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 05:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3a:f4:1b:57:d6:28:42:55:51:cd:cd:ff:cb:5d:cd:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=670e60779f3cd4d03d5e507840f5fa2a31a6ab8d
Validity
Not Before: Jul 7 05:01:43 2026 GMT
Not After : Jul 8 05:01:43 2026 GMT
Subject: CN=bef77e66f97526f051ce85177bad686da68fef44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:3d:b0:90:c3:fe:68:dc:4e:c1:67:cd:f9:f7:
30:52:53:e7:ad:59:76:b4:1a:10:95:9c:77:b0:ba:
07:a5:e4:c4:46:60:59:3c:e2:f6:c1:a1:a0:48:54:
73:24:b5:3f:4b:f8:c3:e4:2d:db:da:ea:b3:e0:52:
f8:06:4c:86:99:72:12:9a:04:78:fe:8d:03:dc:1f:
dc:44:ba:0d:21:34:d7:e5:2a:bc:e8:b4:f9:44:3c:
89:d2:15:77:a0:43:53:27:31:bd:97:41:2c:b3:35:
a2:e5:13:6a:78:17:30:dc:40:9b:85:2a:2a:4c:52:
ce:63:46:2f:aa:ff:0c:79:8d:be:4d:28:9d:9b:27:
89:24:fc:b8:24:88:77:65:2a:15:d4:87:c4:ae:f3:
6b:17:8e:43:18:e0:eb:d0:81:39:71:26:67:09:83:
a2:1f:1a:4c:a2:00:07:f0:e5:af:7f:f4:62:31:c3:
a6:82:6e:3c:77:6c:d8:0f:25:3c:f7:c8:51:bc:a8:
bd:7f:26:19:b9:99:f4:f7:d9:c7:81:43:ad:42:7f:
a4:22:c1:2f:17:37:fa:a0:08:38:69:ec:61:cc:fc:
96:8f:0d:88:07:97:fc:56:5e:99:58:ac:9c:3b:96:
1a:25:66:40:8a:76:99:8d:af:ee:59:9e:d8:0c:2c:
57:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:F7:7E:66:F9:75:26:F0:51:CE:85:17:7B:AD:68:6D:A6:8F:EF:44
X509v3 Authority Key Identifier:
keyid:67:0E:60:77:9F:3C:D4:D0:3D:5E:50:78:40:F5:FA:2A:31:A6:AB:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zw5gd5881NA9XlB4QPX6KjGmq40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:1e:0d:d7:d0:ea:80:21:9a:af:6a:27:21:1d:95:d9:95:9d:
b7:1f:b5:f0:f6:3a:cc:96:a0:1d:c0:8b:8c:36:92:45:35:ce:
23:7b:80:b9:5e:ee:20:1c:f0:fd:28:7b:c9:3a:05:47:88:4a:
4e:2e:23:d0:1b:c6:74:de:0f:ce:37:40:3e:17:1b:0d:32:3e:
f9:c8:e5:29:74:80:d4:be:aa:2f:b4:4d:31:6d:15:1b:a4:8d:
cf:66:15:f3:11:91:f8:31:30:7a:f6:16:f3:8c:0e:6c:6c:ec:
bb:f9:af:40:c5:66:f6:3e:39:38:02:56:de:91:3a:91:62:54:
7e:24:77:8c:a7:db:ea:37:4c:49:e6:2d:78:6c:d7:75:49:6a:
ae:6e:ac:a0:af:37:34:bb:4e:e5:fb:46:28:78:74:0c:87:64:
bc:6a:72:15:08:e2:58:83:2a:71:2a:28:e1:ac:10:10:54:71:
6c:8f:26:57:c5:0a:95:9c:92:5e:dc:38:96:e5:29:f5:c5:26:
ad:a1:af:aa:90:0f:3e:90:84:87:57:14:a5:a0:f4:4f:f8:98:
9a:c1:21:54:5b:a2:35:b1:e4:66:ba:a9:b1:e0:c8:4e:9c:cf:
61:16:c9:87:a5:60:71:d5:40:f7:db:a6:bf:de:65:5c:c6:97:
d7:9a:cb:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 14:45:31 2026 by rpki-client