Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.mft
File: zQYCONBmjUWgQWGKxd92f1mgxK4.mft (raw, json)
Hash identifier: fGNDM3cgmyeaunD2mACLMOGT1C5vwIlv32YMIWnM/Dc=
Subject key identifier: 4A:5C:2A:3A:05:21:32:12:E2:62:09:EA:73:55:1E:D7:F8:69:64:56
Authority key identifier: CD:06:02:38:D0:66:8D:45:A0:41:61:8A:C5:DF:76:7F:59:A0:C4:AE
Certificate issuer: /CN=cd060238d0668d45a041618ac5df767f59a0c4ae
Certificate serial: 019F86B1BE1ADCA712709DDA5A366FCA8E7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQYCONBmjUWgQWGKxd92f1mgxK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.mft
Manifest number: 1051
Signing time: Tue 21 Jul 2026 22:00:23 +0000
Manifest this update: Tue 21 Jul 2026 22:00:23 +0000
Manifest next update: Wed 22 Jul 2026 22:00:23 +0000
Files and hashes: 1: B0xeJ6OlptEzuwHkDKb2uLt1U_4.roa (hash: 0mnm00N6t5GT0+PQLMuChkiPF3X09nPjo6FNCsIiX9w=)
2: DHWxwhm5BstgQrswTpmXlNRqB68.roa (hash: U4MLvKfxIOpMtW85VWgOrj7JclXnEEYGlYHrxV44rNY=)
3: zQYCONBmjUWgQWGKxd92f1mgxK4.crl (hash: 7ROSJxO7T6oNqACgcyJ0mH5e1gknWCj99o2lisUJr44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zQYCONBmjUWgQWGKxd92f1mgxK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 22:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:b1:be:1a:dc:a7:12:70:9d:da:5a:36:6f:ca:8e:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd060238d0668d45a041618ac5df767f59a0c4ae
Validity
Not Before: Jul 21 22:00:23 2026 GMT
Not After : Jul 22 22:00:23 2026 GMT
Subject: CN=4a5c2a3a05213212e26209ea73551ed7f8696456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0d:24:d5:28:06:ef:b5:9c:75:c5:5e:c1:f4:
a1:18:48:51:ed:46:bd:c6:08:ed:80:1b:e3:0c:b9:
e2:0b:fb:e2:0c:0b:58:91:7e:1c:6b:e3:10:4d:a7:
4c:14:3d:1c:f9:bf:9c:04:aa:8b:84:fd:37:3d:64:
00:1e:7f:15:53:7d:01:e5:64:f2:32:a4:fa:68:8a:
78:f4:88:5c:3c:17:a8:57:9b:dc:23:5c:bc:ee:a3:
2b:6d:7e:d8:f5:db:c4:49:d2:c6:ad:35:e2:ae:a5:
44:8a:ac:43:1f:59:9c:fd:1a:e8:09:8a:14:b3:49:
3b:33:04:ef:a6:ba:ab:c4:a3:11:c3:37:02:39:6a:
5a:37:61:22:d1:69:dd:90:e3:81:bf:6e:22:2a:36:
98:cb:3a:65:73:fa:28:6e:71:63:a5:72:73:e7:a0:
49:27:7e:bf:12:23:c4:d1:3e:ef:59:0a:a1:34:c7:
45:0d:ae:b3:4f:08:af:df:75:78:7c:db:19:a1:17:
b3:bf:92:32:19:f2:d0:56:52:df:24:11:60:b7:17:
16:f5:dd:8a:85:cd:ad:5e:36:8a:11:a1:ba:54:82:
68:99:f4:35:31:a4:53:24:7f:d6:44:55:ef:59:e5:
de:6b:96:40:20:6d:fd:c5:0a:1f:fe:70:bc:32:3e:
9b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:5C:2A:3A:05:21:32:12:E2:62:09:EA:73:55:1E:D7:F8:69:64:56
X509v3 Authority Key Identifier:
keyid:CD:06:02:38:D0:66:8D:45:A0:41:61:8A:C5:DF:76:7F:59:A0:C4:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQYCONBmjUWgQWGKxd92f1mgxK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:97:da:27:54:45:72:25:30:03:62:4d:cf:10:39:d0:dc:65:
8f:24:f6:19:cc:22:20:86:49:1d:58:fe:f7:a7:33:1d:0d:19:
a3:1d:dd:f4:fe:fa:00:c6:28:53:55:3e:b4:a5:d7:65:be:63:
a1:df:65:45:88:18:4d:23:4b:93:21:5e:45:60:9c:66:8b:ed:
40:85:56:01:ac:ea:6e:9a:bd:58:dd:17:5b:c6:4b:dd:a9:69:
3c:91:d4:4c:70:75:82:0b:91:3a:95:0c:38:81:c4:d6:4b:a4:
88:92:a0:6a:fe:fe:ec:55:c1:cb:fe:a2:93:ac:2c:33:e6:55:
b3:d6:0b:f3:2e:01:94:72:da:81:0a:fa:ea:c9:69:d3:3c:dd:
4c:bc:5e:65:25:bb:a1:9f:1b:04:63:26:f1:ba:24:4f:a2:99:
59:e5:49:2a:a3:1e:ca:ae:2b:62:c0:e4:54:7c:f4:5a:f4:9b:
e1:07:03:15:d5:43:63:2a:2f:36:e2:e2:38:fe:e3:e7:d2:81:
85:4b:a1:d3:55:d6:8d:18:1b:3d:41:6e:a7:2f:53:d1:22:c5:
c1:55:08:d5:d3:3c:19:77:49:cf:5b:d7:65:b2:b5:9d:55:71:
d2:5c:5d:9e:fd:49:12:38:c9:4d:dc:b9:19:98:4b:3f:8c:a0:
93:da:66:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 03:09:00 2026 by rpki-client