Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/307be8-5e11-4110-a1d3-3a9c0fbc8a0a/1/ZpPysE64W2oqbiHAPPu3coekWv8.mft
File: ZpPysE64W2oqbiHAPPu3coekWv8.mft (raw, json)
Hash identifier: Evb0aPuCUlh15tsRRF2KCTTBnvwT82sDsc/NxzBPpkA=
Subject key identifier: 36:8B:81:31:C8:B0:04:14:9A:BD:0B:6D:A0:BB:9C:ED:27:BE:46:0D
Authority key identifier: 66:93:F2:B0:4E:B8:5B:6A:2A:6E:21:C0:3C:FB:B7:72:87:A4:5A:FF
Certificate issuer: /CN=6693f2b04eb85b6a2a6e21c03cfbb77287a45aff
Certificate serial: 019F867AC6D7B8A397681CC57925D6DF07DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZpPysE64W2oqbiHAPPu3coekWv8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/307be8-5e11-4110-a1d3-3a9c0fbc8a0a/1/ZpPysE64W2oqbiHAPPu3coekWv8.mft
Manifest number: 0B38
Signing time: Tue 21 Jul 2026 21:00:20 +0000
Manifest this update: Tue 21 Jul 2026 21:00:20 +0000
Manifest next update: Wed 22 Jul 2026 21:00:20 +0000
Files and hashes: 1: 4kNIwYTUrVA18oIc_9jtqMOd7CI.roa (hash: L+g00yM7LCta/KmSbttT3iWTPXIIbIasMm1ZRHqbtYg=)
2: ZpPysE64W2oqbiHAPPu3coekWv8.crl (hash: +YdRwBEp6QBLLlpXLr7n454y1Zin34QBPQwCjEk2v7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/307be8-5e11-4110-a1d3-3a9c0fbc8a0a/1/ZpPysE64W2oqbiHAPPu3coekWv8.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/307be8-5e11-4110-a1d3-3a9c0fbc8a0a/1/ZpPysE64W2oqbiHAPPu3coekWv8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZpPysE64W2oqbiHAPPu3coekWv8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 21:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:7a:c6:d7:b8:a3:97:68:1c:c5:79:25:d6:df:07:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6693f2b04eb85b6a2a6e21c03cfbb77287a45aff
Validity
Not Before: Jul 21 21:00:20 2026 GMT
Not After : Jul 22 21:00:20 2026 GMT
Subject: CN=368b8131c8b004149abd0b6da0bb9ced27be460d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f4:70:91:70:8c:5c:53:5f:3e:ed:4e:30:8a:
1f:16:09:97:99:09:89:52:db:c2:9c:01:b2:78:cb:
fe:d1:1e:87:12:67:03:71:52:9c:d3:f9:da:b3:07:
51:63:8b:50:3c:be:04:6c:a3:27:e6:ce:ee:e5:b2:
c1:af:f1:43:1f:7b:95:26:20:27:b4:5b:4e:5d:5b:
e4:2e:12:0e:d2:f8:db:e6:5e:1b:fe:c3:d9:fe:4f:
71:34:25:6a:6f:3f:43:75:9b:c8:1f:3a:17:6b:5a:
3b:15:b9:47:8a:03:d3:15:19:bd:3d:c3:b9:91:41:
34:25:d1:b0:f6:16:f5:cf:09:ac:7d:f4:0d:44:71:
02:5d:15:1f:86:76:f2:f1:ed:ce:21:25:96:c8:6c:
48:2f:f8:e2:67:e8:72:f2:be:34:57:f6:ac:0c:82:
5a:35:90:a5:16:00:76:39:73:bb:4c:37:b8:e6:e5:
64:0b:50:50:5e:f8:58:fc:87:05:9c:c8:bd:a7:cb:
31:cd:86:1f:1d:9b:f4:00:4c:d2:cc:c8:29:98:66:
df:8c:b3:22:35:63:19:83:95:78:dd:6c:df:67:16:
cd:6f:ea:ab:34:8f:78:92:16:07:33:d4:3d:78:e3:
9e:8c:f0:e6:a0:28:26:d9:33:e9:84:a9:77:d2:34:
9f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:8B:81:31:C8:B0:04:14:9A:BD:0B:6D:A0:BB:9C:ED:27:BE:46:0D
X509v3 Authority Key Identifier:
keyid:66:93:F2:B0:4E:B8:5B:6A:2A:6E:21:C0:3C:FB:B7:72:87:A4:5A:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZpPysE64W2oqbiHAPPu3coekWv8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/307be8-5e11-4110-a1d3-3a9c0fbc8a0a/1/ZpPysE64W2oqbiHAPPu3coekWv8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/307be8-5e11-4110-a1d3-3a9c0fbc8a0a/1/ZpPysE64W2oqbiHAPPu3coekWv8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:82:59:8c:19:f2:69:30:68:11:8f:1d:08:5c:43:08:18:67:
ff:57:de:7d:e6:d5:6b:56:00:88:e0:e2:2a:c9:f9:03:3e:88:
05:b8:b5:83:51:0d:55:9b:31:dc:77:a2:53:03:5d:a4:e4:9e:
70:f8:49:fc:4b:7e:9f:dc:0e:c9:79:ad:54:bc:ee:b2:aa:bb:
7b:7c:73:dc:70:7d:ed:93:d2:58:7b:fd:a8:c8:38:8e:8b:96:
73:09:05:5d:74:a3:91:21:94:09:38:12:94:91:b3:c9:63:18:
ef:fd:f6:9a:b5:74:1e:3a:48:e9:56:a7:e3:92:fb:ab:a3:be:
a4:7f:63:22:95:ac:a3:e8:2b:14:d0:67:18:38:b8:bd:34:5e:
7a:e4:09:b0:e7:98:59:f1:1e:05:b0:74:27:de:11:68:db:9d:
69:38:9a:5f:e0:19:19:da:c1:90:7b:b6:ae:a4:0c:f1:21:9e:
5c:5f:bb:4f:8c:3a:6a:82:f0:4d:ec:25:e1:68:68:c8:b5:a6:
0e:5d:9b:5b:5d:1e:07:eb:ae:00:74:b4:cd:a7:32:1e:66:94:
d1:1c:d3:53:61:db:6d:30:4b:db:b1:79:da:d9:fd:f1:2d:23:
9c:99:d1:fa:9a:de:d9:87:d0:22:73:45:ea:08:80:db:72:0d:
72:31:e5:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 01:40:57 2026 by rpki-client