Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.mft
File: zsR4iytpLHEDscueFhf4s2aRDxM.mft (raw, json)
Hash identifier: mLX9QE8veuOAFUkt6kzJpJzVMVZTlPy4BvTRyHSITts=
Subject key identifier: 06:C7:35:92:E4:1C:64:E8:A7:0A:1F:FF:5E:79:95:63:98:65:0B:E8
Authority key identifier: CE:C4:78:8B:2B:69:2C:71:03:B1:CB:9E:16:17:F8:B3:66:91:0F:13
Certificate issuer: /CN=cec4788b2b692c7103b1cb9e1617f8b366910f13
Certificate serial: 019FA1F2A4DB217131EEE31988BB996BF457
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsR4iytpLHEDscueFhf4s2aRDxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.mft
Manifest number: 1964
Signing time: Mon 27 Jul 2026 05:01:01 +0000
Manifest this update: Mon 27 Jul 2026 05:01:01 +0000
Manifest next update: Tue 28 Jul 2026 05:01:01 +0000
Files and hashes: 1: mnbpCMhVQRFBI3ISYQo0OAu64Rk.roa (hash: kpDbhBfOi3H13L7NCoXgIwXVigbDMdLQLlKaVJyFWOo=)
2: zsR4iytpLHEDscueFhf4s2aRDxM.crl (hash: 4YTImdWrxi498uPWXV7MyuG2tyRaljNRpyxg0zaW2qc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zsR4iytpLHEDscueFhf4s2aRDxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 05:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:f2:a4:db:21:71:31:ee:e3:19:88:bb:99:6b:f4:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec4788b2b692c7103b1cb9e1617f8b366910f13
Validity
Not Before: Jul 27 05:01:01 2026 GMT
Not After : Jul 28 05:01:01 2026 GMT
Subject: CN=06c73592e41c64e8a70a1fff5e79956398650be8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:31:d4:6c:20:bb:16:10:f8:a1:80:5e:75:34:
37:5c:8e:9e:8f:a9:10:49:73:fe:3b:9d:23:9c:ab:
78:fe:da:50:1f:a4:a0:a2:44:42:75:a3:95:99:a0:
66:7a:93:5b:e5:54:40:97:08:bc:90:97:a6:bc:31:
46:16:6c:7e:74:1a:9d:b1:bb:20:34:eb:bb:81:0c:
6b:43:3e:a2:35:3e:df:e3:92:f6:b3:03:41:c9:51:
99:b2:24:6d:56:84:a3:63:91:64:bc:9d:d9:3a:64:
bf:cc:56:d9:d4:7b:92:11:73:df:26:45:b3:8a:67:
d8:a8:9d:03:71:85:ac:90:36:60:30:4c:b8:f0:f0:
b1:80:56:6e:63:48:ac:d5:3f:c3:02:38:0e:83:71:
b5:c2:6c:5a:80:83:ff:45:73:a7:8a:6a:61:c0:af:
f0:13:c8:cc:42:ec:d8:ae:7b:d8:b9:b5:cd:08:13:
d5:0c:21:1b:8b:eb:aa:34:43:e0:85:86:f9:d5:8d:
a9:0b:13:13:06:b5:52:ee:08:13:bf:a1:49:76:5a:
2c:68:fd:62:27:be:3b:44:56:7c:d8:33:3d:9d:ac:
02:6e:d0:77:7a:83:a3:6c:84:3f:72:a7:c9:52:d4:
9e:4e:45:05:81:c0:bc:c4:f5:cd:ea:48:06:fb:6f:
b9:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:C7:35:92:E4:1C:64:E8:A7:0A:1F:FF:5E:79:95:63:98:65:0B:E8
X509v3 Authority Key Identifier:
keyid:CE:C4:78:8B:2B:69:2C:71:03:B1:CB:9E:16:17:F8:B3:66:91:0F:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsR4iytpLHEDscueFhf4s2aRDxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:8f:a3:dc:f4:52:b8:6b:4f:5a:7e:70:86:e4:42:1a:72:ec:
4a:ac:f9:08:b2:b7:45:2b:93:a1:65:aa:bb:6e:5a:76:07:e6:
00:11:ce:e4:41:24:8c:76:f2:1d:d8:19:6b:2e:ce:46:36:cf:
55:35:ae:04:0a:48:d6:db:a1:27:fb:15:05:63:64:7e:3a:de:
3f:2a:91:b0:8a:f7:02:29:9a:6a:ad:20:0a:3a:62:79:c9:85:
85:79:a9:16:a4:1c:cb:08:41:77:bc:f1:d5:db:5b:26:b3:8a:
fe:1d:19:fb:63:63:fe:b9:68:a6:f7:8b:60:38:cf:ed:98:e6:
cb:7f:e9:93:b6:c6:b7:3e:f8:54:fd:f5:43:b8:6c:bf:53:db:
01:1d:2b:5d:e3:c7:0e:5c:1a:cf:f5:2f:3a:a0:26:af:f6:01:
26:31:4f:fd:0e:0c:ee:c2:7c:97:ac:88:87:38:06:76:56:5c:
c1:75:f7:d3:15:b7:9e:36:48:ce:67:6c:9c:c1:0e:3b:3e:cd:
8a:66:c4:d7:b0:b7:8d:84:bc:49:bc:cc:ee:3e:bf:19:4d:e0:
45:76:02:53:ae:af:3b:fc:ab:f7:15:86:32:b1:dd:19:6f:8d:
d0:f2:79:a3:2d:91:23:a3:6a:88:7a:7e:62:97:4f:d7:bb:4b:
d6:8e:bc:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 09:37:33 2026 by rpki-client