Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/fa7711-37ff-4aec-9853-1edde6c9d96a/1/ZdCTIXKqLRx3xLuYNwqrPeasNFc.mft
File: ZdCTIXKqLRx3xLuYNwqrPeasNFc.mft (raw, json)
Hash identifier: 1s7igTtl/HpMJtsvfNM61F/XynA4kM2qChdoGAq9f6Y=
Subject key identifier: 2B:6E:41:BA:ED:AA:EB:F9:38:D4:9D:27:2C:B7:F3:1C:DB:F7:B8:BB
Authority key identifier: 65:D0:93:21:72:AA:2D:1C:77:C4:BB:98:37:0A:AB:3D:E6:AC:34:57
Certificate issuer: /CN=65d0932172aa2d1c77c4bb98370aab3de6ac3457
Certificate serial: 019FF54D9A8D3E7051CB8F3C5C6189FAD4D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZdCTIXKqLRx3xLuYNwqrPeasNFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/fa7711-37ff-4aec-9853-1edde6c9d96a/1/ZdCTIXKqLRx3xLuYNwqrPeasNFc.mft
Manifest number: 04B0
Signing time: Wed 12 Aug 2026 09:28:51 +0000
Manifest this update: Wed 12 Aug 2026 09:28:51 +0000
Manifest next update: Thu 13 Aug 2026 09:28:51 +0000
Files and hashes: 1: 4khbVFEEtELbVKjdX-EOY4D-84o.asa (hash: jJbuP4gphJUD/kkuEq/w+9/whek2vyfSwhJa4fmVm8Y=)
2: OpiyEA7jLNoth377L3JQZRW22EA.asa (hash: r8ONgzWitytpplKZRKdun1LH8tmOWmyteR7//LNHOZ8=)
3: TBDRW3pZmuh3LqJB0SgJxwzZcn8.asa (hash: hzhoB7Z5vY10r4VrziTI+hp0NwmrNuDhAq362RHDbhc=)
4: ZdCTIXKqLRx3xLuYNwqrPeasNFc.crl (hash: ldOSVJC9aEXyvqsSACARww1+9GtPSBuKR4QI9XyXZNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/fa7711-37ff-4aec-9853-1edde6c9d96a/1/ZdCTIXKqLRx3xLuYNwqrPeasNFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/fa7711-37ff-4aec-9853-1edde6c9d96a/1/ZdCTIXKqLRx3xLuYNwqrPeasNFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZdCTIXKqLRx3xLuYNwqrPeasNFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 07:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f5:4d:9a:8d:3e:70:51:cb:8f:3c:5c:61:89:fa:d4:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65d0932172aa2d1c77c4bb98370aab3de6ac3457
Validity
Not Before: Aug 12 09:28:51 2026 GMT
Not After : Aug 13 09:28:51 2026 GMT
Subject: CN=2b6e41baedaaebf938d49d272cb7f31cdbf7b8bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:64:c1:7b:d5:c1:50:99:28:63:a4:b0:06:6b:
59:45:50:61:25:db:57:29:17:78:91:93:20:f8:e4:
4b:6e:68:26:06:74:de:63:b6:81:18:e5:48:34:e2:
70:65:c3:f9:ee:e4:5f:43:7b:dc:b2:98:91:dc:16:
82:a0:a7:20:bd:dc:55:8a:2c:74:47:ea:f0:df:11:
51:de:6d:d1:c1:b9:0f:ae:aa:b7:0c:cb:66:cc:0e:
91:66:d4:6d:3c:84:ba:a3:30:bd:2b:ce:9a:b4:05:
98:0e:17:8c:c4:ed:07:4b:3c:fc:ee:7b:37:4c:b7:
fe:f8:1b:c7:f3:c7:63:45:df:f9:90:bc:c2:54:09:
33:10:81:20:ea:f9:d8:a0:11:0c:d1:7f:1c:16:4e:
c6:2d:dd:6d:6e:b2:d0:fb:4c:f4:15:c5:86:79:e1:
96:dd:3a:47:56:27:8d:50:60:71:39:0f:d3:ae:49:
4a:dd:1d:dd:e1:f5:4f:c8:0f:f7:d3:0f:05:82:a2:
b9:1a:c9:57:09:b6:8c:e6:13:3a:f2:4c:d9:5b:c6:
af:82:b0:6e:dc:8c:b7:98:4c:92:79:e1:15:06:2d:
3d:78:67:57:58:40:41:75:b3:6a:d3:a3:46:a9:1f:
f8:e0:4d:70:26:6d:f5:07:51:90:9e:e4:1e:a8:e3:
ab:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:6E:41:BA:ED:AA:EB:F9:38:D4:9D:27:2C:B7:F3:1C:DB:F7:B8:BB
X509v3 Authority Key Identifier:
keyid:65:D0:93:21:72:AA:2D:1C:77:C4:BB:98:37:0A:AB:3D:E6:AC:34:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZdCTIXKqLRx3xLuYNwqrPeasNFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/fa7711-37ff-4aec-9853-1edde6c9d96a/1/ZdCTIXKqLRx3xLuYNwqrPeasNFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/fa7711-37ff-4aec-9853-1edde6c9d96a/1/ZdCTIXKqLRx3xLuYNwqrPeasNFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:f4:5c:5c:ad:59:15:a1:34:8c:67:57:aa:7a:f5:a3:d0:63:
0f:c1:9a:41:08:67:4d:d6:51:ca:3c:82:67:b9:ff:99:72:c3:
05:88:90:b3:92:1d:ac:2a:89:48:26:8c:fb:6f:dc:a1:07:c0:
ef:4b:e8:31:09:7d:14:b9:0a:a7:69:ba:b1:b0:4a:7e:fb:39:
94:4e:7d:dd:df:b3:44:eb:c9:b9:2f:a2:3e:b6:e7:71:f1:e0:
d6:e3:ae:ec:ce:bf:ca:1e:ec:5d:36:ef:a2:ab:10:66:50:13:
bb:75:9a:01:ed:9f:cb:20:49:9f:59:ac:05:2d:6e:8e:cd:1b:
92:dc:7d:57:23:a9:97:4b:d6:6a:a9:16:2d:1a:d2:c0:20:c1:
bd:9b:2d:61:08:da:70:e1:b7:d4:19:a7:9a:ae:99:51:00:25:
f4:3f:3c:e6:e1:41:fe:b1:a0:ff:c6:d5:83:9a:11:d3:94:99:
a8:5b:71:52:13:61:e0:86:b7:ce:96:ca:37:c5:d2:f0:5d:da:
e3:e4:ba:36:a9:4d:96:36:12:1e:f7:da:ed:50:6c:39:25:5f:
bb:59:12:30:ac:43:c1:89:20:bb:f4:b9:49:fb:b9:59:03:af:
ba:d1:d8:90:88:11:ec:fd:69:fc:a2:3e:e8:6b:19:ca:59:ed:
33:5c:92:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 15:55:58 2026 by rpki-client