Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/04ec6b-251a-4eb7-9199-25194525d516/1/zdzhKuUOgKRTTYD3hqgkSXsm-ts.mft
File: zdzhKuUOgKRTTYD3hqgkSXsm-ts.mft (raw, json)
Hash identifier: BUoLxkUDcoRS/xqB1Pj6ilRRPABzH/VjTdHqmeLSNsk=
Subject key identifier: 7E:1F:2C:97:94:65:33:9D:26:49:0D:5B:BB:52:A0:17:A7:26:73:44
Authority key identifier: CD:DC:E1:2A:E5:0E:80:A4:53:4D:80:F7:86:A8:24:49:7B:26:FA:DB
Certificate issuer: /CN=cddce12ae50e80a4534d80f786a824497b26fadb
Certificate serial: 019FA37302E78E7154262719941F9A1D499F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zdzhKuUOgKRTTYD3hqgkSXsm-ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/04ec6b-251a-4eb7-9199-25194525d516/1/zdzhKuUOgKRTTYD3hqgkSXsm-ts.mft
Manifest number: D0
Signing time: Mon 27 Jul 2026 12:00:51 +0000
Manifest this update: Mon 27 Jul 2026 12:00:51 +0000
Manifest next update: Tue 28 Jul 2026 12:00:51 +0000
Files and hashes: 1: pYYR9UI_sLtKcyNmvvaeAyGho10.roa (hash: Visrk6MwePbwviSVCYu3l4j6eSQ3jEUFOOu9154zYk0=)
2: zdzhKuUOgKRTTYD3hqgkSXsm-ts.crl (hash: fLMbJm1bNYb03zSrM8uBOQgIfHfpJscWDlaZV5SVLTU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/04ec6b-251a-4eb7-9199-25194525d516/1/zdzhKuUOgKRTTYD3hqgkSXsm-ts.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/04ec6b-251a-4eb7-9199-25194525d516/1/zdzhKuUOgKRTTYD3hqgkSXsm-ts.mft
rsync://rpki.ripe.net/repository/DEFAULT/zdzhKuUOgKRTTYD3hqgkSXsm-ts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 12:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:73:02:e7:8e:71:54:26:27:19:94:1f:9a:1d:49:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cddce12ae50e80a4534d80f786a824497b26fadb
Validity
Not Before: Jul 27 12:00:51 2026 GMT
Not After : Jul 28 12:00:51 2026 GMT
Subject: CN=7e1f2c979465339d26490d5bbb52a017a7267344
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:63:87:e5:77:97:b1:e4:7b:15:22:1d:20:61:
ed:4a:cc:37:7b:a6:97:66:da:74:00:8d:fb:59:d3:
ab:81:dc:d8:32:5c:e7:1b:93:ae:55:12:cf:d1:9b:
b0:62:eb:5d:eb:b5:b0:89:f6:75:43:02:69:d3:62:
fa:87:0c:55:25:0e:fd:e9:14:7c:d2:b7:3f:83:55:
06:82:5a:36:ff:73:55:47:8f:ac:da:6a:21:df:da:
19:3f:41:d7:5c:12:a3:31:81:54:4e:64:62:68:f0:
f8:27:47:1b:02:f5:d9:f8:91:67:6e:81:3b:d9:17:
3c:59:0c:f0:38:77:c1:d2:65:2b:f1:a1:2c:ca:5c:
f6:a2:bc:2f:58:6b:8d:c8:f6:ad:c7:0c:96:6b:88:
cc:f7:f0:27:84:7a:db:d7:7d:be:81:83:14:ea:a6:
69:b2:b1:3b:55:50:b7:ec:d0:8f:57:71:4b:d9:49:
9e:c6:9d:98:61:42:16:2d:14:26:e5:15:86:d6:ac:
ce:63:51:09:06:1a:e9:0d:91:30:71:f3:5b:db:64:
02:c3:5c:26:5c:5a:df:d4:b6:c2:56:b6:4e:fe:a0:
37:f9:0b:73:d8:87:46:9f:fd:e8:60:ab:a0:f6:82:
70:71:45:21:16:28:2c:54:5a:00:98:9d:46:5f:b6:
43:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:1F:2C:97:94:65:33:9D:26:49:0D:5B:BB:52:A0:17:A7:26:73:44
X509v3 Authority Key Identifier:
keyid:CD:DC:E1:2A:E5:0E:80:A4:53:4D:80:F7:86:A8:24:49:7B:26:FA:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zdzhKuUOgKRTTYD3hqgkSXsm-ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/04ec6b-251a-4eb7-9199-25194525d516/1/zdzhKuUOgKRTTYD3hqgkSXsm-ts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/04ec6b-251a-4eb7-9199-25194525d516/1/zdzhKuUOgKRTTYD3hqgkSXsm-ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:ca:f0:a7:fa:4f:8f:93:a2:ef:c6:15:30:b2:f0:8e:1a:3e:
49:f7:9f:be:d5:fa:4d:af:c3:64:9d:7f:71:ef:bd:39:9b:16:
27:9a:12:7a:d8:6c:3f:52:aa:46:3c:5b:b9:02:49:27:47:f1:
b8:71:40:f8:24:c8:03:bb:da:20:ed:5e:09:c0:21:f4:b8:d1:
d7:15:fb:71:9f:cc:76:53:ef:ea:74:97:59:f2:e6:a1:0c:7f:
1b:65:20:1b:df:3d:73:7e:ec:a0:3e:62:ed:c3:66:fa:4c:69:
25:e7:64:fd:8b:62:5e:57:18:37:96:d2:9e:da:20:7e:ae:70:
6f:b5:73:f5:16:dd:cd:08:a4:41:ad:21:a7:f3:4f:0c:73:14:
8b:13:d1:98:ce:7f:25:9f:f5:6a:fa:96:4a:08:3a:3e:90:bc:
f8:a6:af:1d:5a:cd:b4:27:cb:51:3c:e6:8b:e7:e6:85:47:8a:
56:85:95:d7:cf:48:3f:fa:66:9f:fd:df:12:8d:90:93:24:d3:
61:da:15:ef:1f:19:0d:c1:c6:bd:46:3e:8c:fc:76:96:8b:8c:
22:8e:9d:02:15:32:01:3b:6c:fe:6d:cb:ce:66:91:cb:97:7b:
8b:d6:97:24:b4:1a:8a:29:6f:d3:c1:ca:6a:f1:19:d8:8d:67:
33:38:6c:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 17:30:51 2026 by rpki-client