Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/bd75b1-174b-417c-8750-eb8a453bc56e/1/ZgiZEzMp-qW1cWsclfuvkwIfvGE.mft
File: ZgiZEzMp-qW1cWsclfuvkwIfvGE.mft (raw, json)
Hash identifier: VgjFhDCE1Sw6dSeEUlxM4YydbYEco+FxWdCh22UMeFs=
Subject key identifier: A6:2D:F4:2A:A6:8E:E8:C5:F9:C3:31:14:30:00:DE:DE:7E:F5:70:FC
Authority key identifier: 66:08:99:13:33:29:FA:A5:B5:71:6B:1C:95:FB:AF:93:02:1F:BC:61
Certificate issuer: /CN=660899133329faa5b5716b1c95fbaf93021fbc61
Certificate serial: 019FA37311B337E1CF1650DBCE7878A81767
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZgiZEzMp-qW1cWsclfuvkwIfvGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/bd75b1-174b-417c-8750-eb8a453bc56e/1/ZgiZEzMp-qW1cWsclfuvkwIfvGE.mft
Manifest number: 10B4
Signing time: Mon 27 Jul 2026 12:00:55 +0000
Manifest this update: Mon 27 Jul 2026 12:00:55 +0000
Manifest next update: Tue 28 Jul 2026 12:00:55 +0000
Files and hashes: 1: ZgiZEzMp-qW1cWsclfuvkwIfvGE.crl (hash: ZdJlXlZMSAghkC1ibA5nvZl6U6rAFtWd+K8785R0ze4=)
2: kO3ikc55etvofjUz54lkxBw2Zts.roa (hash: FQtm/UjIvg0izBKVwcfTdDDZlcQWbE25eid7tWcMESM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/bd75b1-174b-417c-8750-eb8a453bc56e/1/ZgiZEzMp-qW1cWsclfuvkwIfvGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/bd75b1-174b-417c-8750-eb8a453bc56e/1/ZgiZEzMp-qW1cWsclfuvkwIfvGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZgiZEzMp-qW1cWsclfuvkwIfvGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 12:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:73:11:b3:37:e1:cf:16:50:db:ce:78:78:a8:17:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=660899133329faa5b5716b1c95fbaf93021fbc61
Validity
Not Before: Jul 27 12:00:55 2026 GMT
Not After : Jul 28 12:00:55 2026 GMT
Subject: CN=a62df42aa68ee8c5f9c331143000dede7ef570fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3a:e5:2f:42:d9:e4:cc:df:e9:f9:5a:10:51:
f9:6a:2b:8d:e4:06:58:b3:9f:ad:d3:92:c5:7d:19:
ff:05:e4:13:44:69:f2:0d:8d:57:03:41:9f:ee:45:
cb:3f:27:57:2f:83:61:e1:01:a9:d2:4e:ad:a0:90:
f4:5a:44:dc:3c:54:dd:b3:8c:7a:10:bc:f3:f1:a4:
7e:bd:2c:e0:65:0c:fd:dd:9f:ea:1b:55:3c:24:f0:
2d:06:c7:21:fc:c0:20:eb:ec:ce:67:c6:a7:45:8f:
45:87:d1:3f:ec:25:75:1b:a2:74:fc:fe:d2:84:fc:
a8:0d:d0:9c:9c:1c:e5:8d:cb:01:89:b4:94:39:2f:
98:d0:67:eb:05:f4:74:62:c2:e2:9b:ed:a9:29:de:
fa:dd:37:d1:aa:0a:18:38:c7:af:de:ae:29:3d:1f:
b6:b7:d9:0e:21:f4:34:79:2c:5a:c2:ca:99:b3:51:
2c:40:41:ce:6f:9c:98:b6:38:9b:9e:f4:5e:1b:df:
7d:ca:24:22:6f:f4:09:25:7f:43:ea:79:2d:62:a6:
d2:fe:0b:61:e3:e5:bf:b5:05:a8:a2:40:42:5b:ae:
2e:f9:c5:7a:8b:f0:86:94:f2:d8:cf:1d:cf:c7:f7:
ce:50:36:77:20:2d:0d:93:2e:99:13:5c:6d:28:49:
9d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:2D:F4:2A:A6:8E:E8:C5:F9:C3:31:14:30:00:DE:DE:7E:F5:70:FC
X509v3 Authority Key Identifier:
keyid:66:08:99:13:33:29:FA:A5:B5:71:6B:1C:95:FB:AF:93:02:1F:BC:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZgiZEzMp-qW1cWsclfuvkwIfvGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/bd75b1-174b-417c-8750-eb8a453bc56e/1/ZgiZEzMp-qW1cWsclfuvkwIfvGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/bd75b1-174b-417c-8750-eb8a453bc56e/1/ZgiZEzMp-qW1cWsclfuvkwIfvGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:1d:02:4a:0f:46:ad:82:e9:6e:3d:96:dd:72:d9:29:f5:af:
3d:53:78:a7:4a:c4:29:13:97:2e:25:45:a7:bc:ac:d4:cf:f0:
b9:83:fc:1f:22:5e:b1:71:8d:72:f2:42:f2:1a:e4:bc:48:96:
a2:94:75:7d:76:c4:65:76:ec:eb:1a:18:7b:ee:75:8f:6e:f1:
f2:63:1e:97:b7:0e:85:18:6a:6b:55:3d:55:ed:e9:a1:c4:02:
c7:b4:db:b5:81:c3:c6:6d:34:9f:c8:25:24:53:7d:d3:80:c8:
72:11:f4:c3:97:15:aa:4b:99:a7:fe:c3:3e:20:76:0d:c1:51:
27:52:76:b5:cc:db:f1:4c:9d:bd:3f:90:0a:13:df:e6:85:c1:
bb:a3:a3:c2:e2:46:d9:09:98:fd:7d:5f:ad:2d:bc:b0:6c:af:
86:c3:74:e5:04:b8:ca:d0:23:41:8c:a5:3a:66:07:e1:c8:3d:
9d:f1:5e:b9:b0:96:ca:45:85:0f:97:44:9c:49:ce:60:2d:5e:
d6:ce:d3:1e:1e:13:bd:69:ea:00:a4:62:2f:71:c9:0a:ed:cd:
c1:6f:1e:64:21:2f:e8:89:57:4e:ed:52:64:71:d2:c2:83:e6:
d1:38:89:4b:69:c3:95:b9:c4:56:ca:31:08:9c:de:31:5f:7e:
81:26:74:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 16:04:26 2026 by rpki-client