Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft
File: ZPpm-4SngaBYT9DRwt85vaR2BRk.mft (raw, json)
Hash identifier: ETxukSZIaqrdUqGf9kkpamT7c4U0wA3zHuPY5Rl9OSY=
Subject key identifier: DB:99:BE:78:82:93:FE:3C:C0:E5:1B:B7:42:EF:0D:CB:AB:85:F7:5D
Authority key identifier: 64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19
Certificate issuer: /CN=64fa66fb84a781a0584fd0d1c2df39bda4760519
Certificate serial: 019F9F285597C718078C2190D0D701F23927
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft
Manifest number: 1A42
Signing time: Sun 26 Jul 2026 16:00:48 +0000
Manifest this update: Sun 26 Jul 2026 16:00:48 +0000
Manifest next update: Mon 27 Jul 2026 16:00:48 +0000
Files and hashes: 1: 5fUbTKl8FSPc1kSYGwQAsVfb2vQ.roa (hash: PLRtthNs8hk5vDeIh9r/ACQzulJpBpXJunHHwis/BW4=)
2: KHKZ9oAR4pOjsmM70Mx2jjXuCSc.roa (hash: KQJvV0lMLENSykGh1gJfx02ynaMwFLdd0OilipOgatU=)
3: KhGccG-9kSJW0nKCk6yANGIBUFg.roa (hash: zywPAJ1T+FuIU1G9CdS4XD+lquEKkevubyLrKuYUwfk=)
4: WfYZ1TfImT3yRIrYlNuuVCM96nE.roa (hash: 4hQnLNa6AvcfooEXSYRpCYSRQGf1HFK3GJPOn5OeTYg=)
5: ZPpm-4SngaBYT9DRwt85vaR2BRk.crl (hash: q/3E8gqaHHWSntmlDcvltCEUJlU30QOKhDPHV4p/Uvc=)
6: bWULgqZwLFtgMnHWpi5ob6mG51g.roa (hash: lfo7CD8cFvuweAa0KOVUGNQ19lLzJ7antvDI5XPAMSI=)
7: dukbn33Ogir7i7r4vD8U_2-uD0k.roa (hash: Qnah27HWaQWC9U8nihXoX9JQsARGjKgGqZfWIx2YcYg=)
8: oTNGV0Y7SaXlCklNzwFHJ1qEeUI.roa (hash: 1MTRBJjbkgRiCWVR5beZsUo8EaPKlW5X/iPni1dYgA8=)
9: tOjC-880lUvIDXcMv4Td0baNxyA.roa (hash: 9ecFS71NaP3AlhNnMbdDSrsMVob6HFpLwU4ec3vZFPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9f:28:55:97:c7:18:07:8c:21:90:d0:d7:01:f2:39:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64fa66fb84a781a0584fd0d1c2df39bda4760519
Validity
Not Before: Jul 26 16:00:48 2026 GMT
Not After : Jul 27 16:00:48 2026 GMT
Subject: CN=db99be788293fe3cc0e51bb742ef0dcbab85f75d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:bc:84:84:46:77:bb:b3:07:83:68:cc:6d:e9:
43:e2:41:87:87:5f:c2:94:33:be:c6:2d:70:aa:7c:
c1:e4:13:69:5a:92:76:71:0e:d5:2a:0b:a7:b5:d7:
06:86:36:e4:d9:9e:03:2d:fd:cd:df:c4:70:a4:52:
bf:df:0f:7d:9d:bc:28:66:24:16:01:5f:a6:1b:ad:
38:bf:fd:85:3b:78:45:c2:0a:c2:28:33:fa:0e:3f:
65:b3:4f:0e:8d:14:8e:97:58:32:3e:f4:1a:4f:96:
09:5f:2f:9a:fd:70:31:31:46:ee:ab:d6:b8:55:2a:
d6:7c:bc:df:6a:4b:61:9d:79:10:2f:c5:61:35:78:
27:fc:c6:5c:2c:1b:f6:68:62:6a:97:01:56:ae:cc:
bd:97:92:af:db:f4:45:48:f4:7b:4c:64:31:23:32:
55:85:46:00:34:3f:75:1d:a0:23:ce:d6:4d:e7:d6:
ed:9c:28:1f:c0:72:df:85:78:38:fb:2f:d8:92:02:
3d:db:09:4b:d0:4c:e0:9f:04:86:6d:9d:79:8b:ae:
91:ff:ec:0f:72:93:7c:fe:2b:1d:13:c7:a1:c8:d0:
15:0c:ad:50:f2:f8:8e:fa:0e:a9:a3:cc:67:47:4e:
4b:36:cb:4b:85:7e:1e:f6:6a:d8:28:ce:4e:a1:c6:
d8:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:99:BE:78:82:93:FE:3C:C0:E5:1B:B7:42:EF:0D:CB:AB:85:F7:5D
X509v3 Authority Key Identifier:
keyid:64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:10:c4:c3:a0:bf:cd:58:56:26:3f:24:57:75:5b:5a:b8:82:
38:06:df:b9:a5:f8:f9:a1:85:bb:c0:e6:57:ec:d8:76:98:54:
38:3d:57:11:c0:41:30:d3:c5:43:29:e1:2e:4b:c5:32:3c:3d:
6b:85:2d:fe:86:45:df:34:ca:52:44:0f:a5:51:9c:89:13:4f:
68:95:74:24:b4:5e:bc:7a:bf:bb:82:f7:c3:46:19:aa:a3:8e:
95:b1:19:a3:fd:5a:59:45:65:0d:61:a9:68:29:dc:c1:50:7a:
dc:d4:1f:be:9d:93:34:1f:0c:f1:31:3a:fe:77:58:ab:d3:0d:
55:cf:34:17:da:7c:32:f3:aa:a4:88:4d:89:09:0e:f3:6c:1c:
7a:0c:c5:02:f5:1f:e6:22:15:fa:fd:95:57:61:63:62:5e:78:
d4:82:2a:a4:8f:ef:65:4e:2a:25:b5:f0:f6:6d:ed:61:1c:ee:
a4:c8:d8:4d:53:e0:7b:02:ff:e0:dd:fb:df:aa:df:7c:11:13:
8f:d4:65:b0:26:6b:ad:10:02:b6:ac:f8:86:c6:9c:16:3b:da:
b3:5e:08:0f:4c:c6:4f:a4:49:49:c0:25:44:da:de:87:bf:57:
cf:49:f2:4b:37:30:d2:8b:5d:ca:50:1d:94:89:ba:8d:bd:e7:
27:1b:52:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 23:35:41 2026 by rpki-client