Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/7a1274-03ac-494d-ba8e-cfcffa3c0665/1/zT5kktRzFSDB7tvNopZ5UArAg6s.mft
File: zT5kktRzFSDB7tvNopZ5UArAg6s.mft (raw, json)
Hash identifier: l4WDnDHnmBWo6bq6zhC5tuEnIhiN8POTTxqPxLHQH5A=
Subject key identifier: D2:DC:BD:47:30:AF:CE:DE:1C:93:29:88:52:FF:EB:8A:EA:3D:B1:AA
Authority key identifier: CD:3E:64:92:D4:73:15:20:C1:EE:DB:CD:A2:96:79:50:0A:C0:83:AB
Certificate issuer: /CN=cd3e6492d4731520c1eedbcda29679500ac083ab
Certificate serial: 019F287FDB1816070DBDB348C5128F97C13D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zT5kktRzFSDB7tvNopZ5UArAg6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/7a1274-03ac-494d-ba8e-cfcffa3c0665/1/zT5kktRzFSDB7tvNopZ5UArAg6s.mft
Manifest number: 085E
Signing time: Fri 03 Jul 2026 15:01:35 +0000
Manifest this update: Fri 03 Jul 2026 15:01:35 +0000
Manifest next update: Sat 04 Jul 2026 15:01:35 +0000
Files and hashes: 1: C-10eoHVV_ERuNuHp1M0fCx__Ag.roa (hash: kJJFsA3C5xKnlbqZn0ozkgC1qO7Vwfq9ha16s0RBd0k=)
2: zT5kktRzFSDB7tvNopZ5UArAg6s.crl (hash: XXLWl0SzdgAsDGZFo3yZggE/cnm1WREA2Sad/9oD3nA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/7a1274-03ac-494d-ba8e-cfcffa3c0665/1/zT5kktRzFSDB7tvNopZ5UArAg6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/7a1274-03ac-494d-ba8e-cfcffa3c0665/1/zT5kktRzFSDB7tvNopZ5UArAg6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/zT5kktRzFSDB7tvNopZ5UArAg6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 15:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:28:7f:db:18:16:07:0d:bd:b3:48:c5:12:8f:97:c1:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd3e6492d4731520c1eedbcda29679500ac083ab
Validity
Not Before: Jul 3 15:01:35 2026 GMT
Not After : Jul 4 15:01:35 2026 GMT
Subject: CN=d2dcbd4730afcede1c93298852ffeb8aea3db1aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:eb:67:44:3e:5f:05:64:9c:e4:34:42:4e:61:
14:eb:0e:2e:c8:21:f8:2e:51:6f:2e:2d:dc:28:e4:
8f:9e:6d:2f:b2:7c:90:1b:21:3e:d3:3c:23:69:72:
06:3e:1f:c9:28:a7:03:a6:9a:33:45:cc:55:f3:8b:
2e:fa:1a:9b:ad:23:9e:55:4d:4a:bb:ee:6a:4c:68:
7f:ad:6e:45:45:56:de:1a:27:64:2d:91:c0:7f:1d:
6f:b0:7d:51:16:99:4b:55:2c:9d:38:57:47:4e:9b:
00:c7:49:9c:a4:d6:2e:97:26:8a:8b:4c:63:dd:d9:
00:cd:cf:06:c7:b8:fc:b8:11:1b:73:bc:b7:e9:45:
5a:bd:10:42:0b:42:16:6e:f7:72:6a:18:d3:fa:f1:
a6:2b:9c:7a:8b:1b:94:4d:9b:fb:ca:b0:19:35:b4:
10:f7:18:a6:de:11:ce:c2:5b:95:44:e9:9f:3c:5e:
11:6b:ce:58:e6:c4:c8:c1:b4:b0:53:a6:d4:f5:04:
1e:ec:55:40:18:9e:2d:ca:9e:2c:b5:fb:a2:69:84:
0f:96:b4:ce:74:8a:1e:20:07:8f:76:ab:94:67:a4:
dd:e9:be:6d:6f:a8:75:12:47:9e:7f:c5:d8:63:75:
82:3f:20:c4:79:bb:21:00:fd:00:72:dc:ba:a5:57:
3c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:DC:BD:47:30:AF:CE:DE:1C:93:29:88:52:FF:EB:8A:EA:3D:B1:AA
X509v3 Authority Key Identifier:
keyid:CD:3E:64:92:D4:73:15:20:C1:EE:DB:CD:A2:96:79:50:0A:C0:83:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zT5kktRzFSDB7tvNopZ5UArAg6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7a1274-03ac-494d-ba8e-cfcffa3c0665/1/zT5kktRzFSDB7tvNopZ5UArAg6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7a1274-03ac-494d-ba8e-cfcffa3c0665/1/zT5kktRzFSDB7tvNopZ5UArAg6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:a1:4f:40:06:cf:a6:a0:db:bc:2f:7b:2c:82:f6:f1:3c:82:
0c:e9:a2:c6:13:96:14:98:a2:1f:2a:10:1b:bc:ff:9a:d9:a3:
4f:9d:83:4c:72:12:ec:41:38:01:5d:73:ea:7b:37:89:31:82:
1d:c0:ec:90:86:1a:3a:48:fb:78:c9:28:64:8b:c1:aa:78:c0:
98:fa:de:18:c8:8d:dc:f2:ec:56:1f:46:2d:bf:ab:ee:c6:94:
f9:30:29:80:93:5f:42:c3:bc:8e:fb:22:e0:4f:e0:19:a7:9b:
4d:8f:32:01:38:2d:83:d4:a3:c4:95:4f:df:14:6c:47:4e:40:
ef:f7:57:9a:17:ac:d1:ae:12:ac:28:85:af:d7:7b:b3:09:5b:
1b:9e:09:e1:56:76:4a:23:cb:13:28:e4:2c:a5:9e:4d:e5:66:
60:55:e1:c6:25:f7:24:c0:d4:40:24:13:f8:38:25:a2:d8:c2:
6e:56:52:4b:df:11:3f:9d:41:78:1b:06:23:63:7b:0c:69:c4:
71:9d:1b:99:ee:09:46:bf:87:a9:5d:6b:f7:30:84:04:a1:57:
81:4c:90:70:11:b0:d4:0b:e9:99:9e:9e:9a:c1:af:35:7c:81:
38:db:0d:00:82:fa:8f:82:35:d8:72:b0:f5:7b:6e:42:98:bc:
13:95:c1:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 21:47:44 2026 by rpki-client