Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/zepK3ugLBlGc5A3T0T8oup9XWVc.mft
File: zepK3ugLBlGc5A3T0T8oup9XWVc.mft (raw, json)
Hash identifier: TdKQzbvsMEGqsJ3Rear/zFA9uQfIJnzLnaiOPMW2BvI=
Subject key identifier: 20:E9:8B:48:BF:13:51:D9:17:43:4E:1B:90:4D:21:11:88:5D:83:34
Authority key identifier: CD:EA:4A:DE:E8:0B:06:51:9C:E4:0D:D3:D1:3F:28:BA:9F:57:59:57
Certificate issuer: /CN=cdea4adee80b06519ce40dd3d13f28ba9f575957
Certificate serial: 019F36A9AC2D52F65B87E5F615F5A297A6AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zepK3ugLBlGc5A3T0T8oup9XWVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/zepK3ugLBlGc5A3T0T8oup9XWVc.mft
Manifest number: 16A8
Signing time: Mon 06 Jul 2026 09:01:56 +0000
Manifest this update: Mon 06 Jul 2026 09:01:56 +0000
Manifest next update: Tue 07 Jul 2026 09:01:56 +0000
Files and hashes: 1: q_Sdx_pDux5HG_B-3KML3ZxV1Q4.roa (hash: ht/8yca5f/4MvUCuC03a4MjP5eq5Ql1KG2x7zVYULEQ=)
2: v8cGXi_NSEn4R2Pj8ik0gEWzS6g.roa (hash: Tc7POOVIwZMXLz0qNFWoVFFcyKsqMyAM9BmZSJShLfc=)
3: zepK3ugLBlGc5A3T0T8oup9XWVc.crl (hash: X/FvfVWlWU65vPkaMCBXL0LrbqIZYZfZWoZw9rjZMVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/zepK3ugLBlGc5A3T0T8oup9XWVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/zepK3ugLBlGc5A3T0T8oup9XWVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zepK3ugLBlGc5A3T0T8oup9XWVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 09:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:36:a9:ac:2d:52:f6:5b:87:e5:f6:15:f5:a2:97:a6:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdea4adee80b06519ce40dd3d13f28ba9f575957
Validity
Not Before: Jul 6 09:01:56 2026 GMT
Not After : Jul 7 09:01:56 2026 GMT
Subject: CN=20e98b48bf1351d917434e1b904d2111885d8334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:9f:1f:77:e8:10:2f:7c:5a:d4:dc:44:4b:66:
f2:b5:2e:34:df:75:83:fb:b4:89:b6:24:60:7e:73:
f4:56:29:bb:1e:a4:78:03:8f:92:a2:5c:83:2f:af:
52:73:ad:be:d8:98:21:b3:30:ae:d0:1a:e8:93:10:
8a:31:3a:66:09:13:93:b2:86:69:da:6f:ef:96:1b:
14:82:c6:a9:ae:6b:8e:38:01:bc:15:22:75:de:f1:
38:61:f4:69:8c:2f:b5:a2:02:3b:49:ac:46:fc:cf:
c4:ac:9a:4b:6a:09:1b:06:c3:6d:c2:d6:db:44:e0:
62:88:d5:ca:4f:7d:ce:d9:c3:07:6d:0f:83:97:2f:
06:69:bb:c3:2d:7c:f9:6a:62:02:b5:e5:b2:fe:0e:
19:31:70:d7:85:0b:b4:4c:b8:ef:04:43:e0:cc:74:
51:bc:f5:a2:a4:2f:c7:ac:95:31:d5:24:0c:6e:85:
9e:3c:73:55:d7:31:1f:86:0c:99:b2:a9:20:16:fe:
fe:56:2b:d9:c8:90:c0:23:84:c6:a9:9a:c7:1c:04:
db:7f:f1:2c:fc:9c:59:3c:75:bc:80:9f:ae:8d:ca:
e0:94:d2:34:81:7b:66:39:c5:03:10:c2:14:38:01:
13:f5:98:64:7d:54:40:dd:fa:fa:cf:6e:39:32:70:
39:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:E9:8B:48:BF:13:51:D9:17:43:4E:1B:90:4D:21:11:88:5D:83:34
X509v3 Authority Key Identifier:
keyid:CD:EA:4A:DE:E8:0B:06:51:9C:E4:0D:D3:D1:3F:28:BA:9F:57:59:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zepK3ugLBlGc5A3T0T8oup9XWVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/zepK3ugLBlGc5A3T0T8oup9XWVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/zepK3ugLBlGc5A3T0T8oup9XWVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:06:95:d2:05:54:e6:10:81:ca:ba:1d:1b:3d:8b:1a:ea:47:
9f:bc:37:1c:85:63:54:e0:12:32:0d:f8:a4:2a:9a:d5:8c:6e:
cd:56:01:77:d0:09:2a:94:9b:6b:d7:02:b5:68:9f:22:83:62:
78:6e:42:fe:1b:64:4c:13:4d:2d:b4:1c:2d:7b:fe:88:e6:9c:
3a:b3:86:0f:56:f2:b8:98:1f:85:ad:1e:d5:f8:d5:0c:53:23:
b4:63:21:45:22:90:70:aa:5f:a0:84:52:42:e5:ec:0d:88:2f:
83:1c:65:a9:f1:69:7f:1f:f2:fa:1c:4b:6e:0c:1c:38:64:85:
89:ec:1c:6a:00:99:ab:d4:65:1c:4b:21:03:88:9b:09:c2:7b:
c0:83:54:5b:9b:af:b5:d5:d0:f1:55:ea:20:b7:bb:f0:40:e4:
41:6d:6d:06:96:a9:13:89:46:7e:93:eb:ff:43:02:92:3f:a6:
32:31:70:65:68:39:c4:97:1a:56:06:0b:84:43:9a:4d:9d:0e:
9a:01:78:a4:15:90:1a:67:ca:ec:94:4b:89:d4:c3:cb:d7:9a:
cf:94:48:56:17:2d:e7:b2:6c:ec:11:5a:81:bb:8b:f2:ba:64:
c5:f8:f9:81:19:28:11:c8:b9:6d:c3:21:42:c7:ed:cc:3a:8d:
16:f3:23:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:14:17 2026 by rpki-client