Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/14d71e-e0d8-4fff-b3fa-428324a9244e/1/zdCuQc2rVZhilkF4v-rjaElrB9c.mft
File: zdCuQc2rVZhilkF4v-rjaElrB9c.mft (raw, json)
Hash identifier: 5rNIUiopBBHltZSgVk17s+G2hbIeKXU+qAGQNTLb4VE=
Subject key identifier: 24:D8:0B:2D:09:41:14:63:C7:B9:70:93:D9:11:2B:14:D1:AE:19:3A
Authority key identifier: CD:D0:AE:41:CD:AB:55:98:62:96:41:78:BF:EA:E3:68:49:6B:07:D7
Certificate issuer: /CN=cdd0ae41cdab559862964178bfeae368496b07d7
Certificate serial: 019FA1BBA8FED179B86AEDC52D7D8D2B2FCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zdCuQc2rVZhilkF4v-rjaElrB9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/14d71e-e0d8-4fff-b3fa-428324a9244e/1/zdCuQc2rVZhilkF4v-rjaElrB9c.mft
Manifest number: 10AE
Signing time: Mon 27 Jul 2026 04:00:57 +0000
Manifest this update: Mon 27 Jul 2026 04:00:57 +0000
Manifest next update: Tue 28 Jul 2026 04:00:57 +0000
Files and hashes: 1: zdCuQc2rVZhilkF4v-rjaElrB9c.crl (hash: BN+vJIxTT3ybTAWk7qPLX3Cu9Qfr1tffOVVXtEXvhEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/14d71e-e0d8-4fff-b3fa-428324a9244e/1/zdCuQc2rVZhilkF4v-rjaElrB9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/14d71e-e0d8-4fff-b3fa-428324a9244e/1/zdCuQc2rVZhilkF4v-rjaElrB9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/zdCuQc2rVZhilkF4v-rjaElrB9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:bb:a8:fe:d1:79:b8:6a:ed:c5:2d:7d:8d:2b:2f:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdd0ae41cdab559862964178bfeae368496b07d7
Validity
Not Before: Jul 27 04:00:57 2026 GMT
Not After : Jul 28 04:00:57 2026 GMT
Subject: CN=24d80b2d09411463c7b97093d9112b14d1ae193a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:80:66:5e:d2:f0:fa:d5:75:2d:5c:14:6b:17:
f2:c8:4c:af:a0:2f:8d:1d:24:e0:40:41:8d:39:38:
2f:cc:b7:2a:dd:9b:ed:d6:d4:19:c6:26:cc:ed:29:
d2:1a:67:28:14:36:70:51:fc:ae:09:0b:28:fd:e6:
39:c8:c6:93:78:30:10:67:01:71:d7:42:39:fd:91:
68:39:3d:e3:37:8e:c4:b7:85:d3:07:d8:c6:80:0e:
0d:92:e3:68:bf:58:bf:f0:18:b4:ac:14:9b:c7:c8:
be:c2:73:85:46:ab:1f:40:48:41:c1:5a:6b:24:d8:
40:a2:f5:41:b6:5e:dd:f8:24:06:c9:79:94:d1:89:
97:cb:d7:6c:8d:a7:8d:3d:b4:7d:bc:63:23:2d:69:
d4:82:96:b1:88:e4:c9:29:8a:ce:04:57:d7:7b:56:
b5:5d:00:ad:93:58:df:a9:e6:20:5d:41:e4:fa:b2:
e1:c9:2b:d6:e7:fc:9c:3f:21:c3:db:b5:06:eb:27:
3e:e7:03:52:d0:7f:96:ed:6c:c9:ec:60:72:ce:ac:
a4:97:09:9b:f9:19:64:82:4f:2b:1c:f5:2d:d5:5c:
2f:6b:13:02:15:1c:34:86:fe:16:09:ab:8c:d6:2f:
12:1a:c7:7e:1e:a0:fe:18:19:34:19:b4:77:15:3b:
f0:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:D8:0B:2D:09:41:14:63:C7:B9:70:93:D9:11:2B:14:D1:AE:19:3A
X509v3 Authority Key Identifier:
keyid:CD:D0:AE:41:CD:AB:55:98:62:96:41:78:BF:EA:E3:68:49:6B:07:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zdCuQc2rVZhilkF4v-rjaElrB9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/14d71e-e0d8-4fff-b3fa-428324a9244e/1/zdCuQc2rVZhilkF4v-rjaElrB9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/14d71e-e0d8-4fff-b3fa-428324a9244e/1/zdCuQc2rVZhilkF4v-rjaElrB9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:07:98:b5:8b:4a:61:65:c8:e8:4c:3d:48:bd:8c:70:35:18:
64:ee:0c:7a:9b:c8:07:43:a1:50:30:68:74:44:d6:93:30:cf:
84:a7:39:95:40:cd:91:58:e8:24:1f:c1:3d:46:93:91:54:30:
86:5a:79:ac:06:51:98:02:00:62:5e:a5:bb:e9:0d:fa:40:a8:
13:34:06:cf:90:7c:fc:87:2d:22:30:64:5c:11:1f:cc:1d:2c:
d5:22:7b:f0:60:91:73:cc:79:d2:55:b9:b7:61:75:ae:e2:af:
28:51:ec:7f:43:9f:36:de:8a:33:20:64:c8:b2:05:2e:31:63:
54:37:ab:7c:3b:fa:2a:17:de:09:54:34:f0:7c:fb:aa:2c:06:
20:75:54:6c:58:f8:98:32:eb:ee:22:7b:03:90:1a:99:2b:39:
9f:3a:da:90:a5:b9:5f:6e:5c:13:35:88:4a:11:a0:e2:28:e5:
da:54:3a:b0:e7:f6:ac:28:85:62:6c:00:42:a8:0c:5c:6b:31:
6e:1a:27:de:6a:af:2d:91:df:59:51:2e:f7:64:06:26:d9:6a:
50:c3:3f:f2:bf:10:e3:d1:fb:16:ee:4a:75:1b:39:08:46:14:
97:f7:80:db:a5:5c:ca:ee:d0:70:35:d9:60:6a:e8:74:ea:93:
bf:6b:de:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 05:28:43 2026 by rpki-client