Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/ZcXa1UTfSXFghevoDb6C62iiCck.mft
File: ZcXa1UTfSXFghevoDb6C62iiCck.mft (raw, json)
Hash identifier: wp/zsJogSnRKouLw8eyt/Wt0A3kJOsChHwGkiQfyIss=
Subject key identifier: 87:78:E9:C2:3C:D8:76:74:4B:A2:5D:D9:55:33:80:B2:89:B4:1B:A4
Authority key identifier: 65:C5:DA:D5:44:DF:49:71:60:85:EB:E8:0D:BE:82:EB:68:A2:09:C9
Certificate issuer: /CN=65c5dad544df49716085ebe80dbe82eb68a209c9
Certificate serial: 019FF5DA15BF77A135C89895F2E27A06228A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZcXa1UTfSXFghevoDb6C62iiCck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/ZcXa1UTfSXFghevoDb6C62iiCck.mft
Manifest number: 1217
Signing time: Wed 12 Aug 2026 12:02:17 +0000
Manifest this update: Wed 12 Aug 2026 12:02:17 +0000
Manifest next update: Thu 13 Aug 2026 12:02:17 +0000
Files and hashes: 1: SLxH_u9zeCm0sBzFGpjFyprUq1k.roa (hash: YHV8hHdigULABzb/Rh8IYMXXingzJr+tiIat3maLhrg=)
2: ZcXa1UTfSXFghevoDb6C62iiCck.crl (hash: RjaOh5Nj6U/2CzWTfPAajTfupbKIp5a7Pfap4s/g8iU=)
3: qWNtslR5VeuzsdBANHUyp5ZAUOU.roa (hash: rgvLkD6mm+PX1WOuRNNO3Ee9uRmn0UljGpNc3jlNEWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/ZcXa1UTfSXFghevoDb6C62iiCck.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/ZcXa1UTfSXFghevoDb6C62iiCck.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZcXa1UTfSXFghevoDb6C62iiCck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 07:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f5:da:15:bf:77:a1:35:c8:98:95:f2:e2:7a:06:22:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65c5dad544df49716085ebe80dbe82eb68a209c9
Validity
Not Before: Aug 12 12:02:17 2026 GMT
Not After : Aug 13 12:02:17 2026 GMT
Subject: CN=8778e9c23cd876744ba25dd9553380b289b41ba4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c9:2e:1f:53:83:99:60:96:75:42:87:bf:1d:
ca:a4:1a:8f:1f:0e:0c:a2:86:22:3c:d0:c5:16:73:
fa:cb:d9:5c:3f:dd:c9:2f:bf:da:1e:ff:46:6a:40:
fa:6b:3b:d8:29:58:8f:07:2d:07:9b:29:e2:a4:1d:
20:df:05:bc:87:4d:62:26:b8:b5:87:36:bd:5e:87:
8e:a2:f8:e7:89:96:ec:36:f2:4b:b7:78:1c:50:90:
8d:7f:2c:db:32:33:3a:80:b8:68:16:17:83:a3:a7:
1d:cf:f4:12:b5:93:d9:da:73:1a:ab:ed:e9:e6:a5:
0e:6b:a6:e8:ab:2e:db:e5:23:21:78:ac:28:1b:8a:
60:c5:60:25:70:33:e3:44:63:7b:ee:52:fa:9a:74:
d8:fd:ed:3f:cc:6e:bc:3e:12:7d:35:19:c2:c3:ff:
da:ec:d4:b8:f3:7c:1c:4b:b0:c9:9d:46:8f:3a:aa:
99:66:07:60:cb:14:ff:25:e6:24:74:00:73:f0:35:
16:3c:8f:e3:f0:c7:82:cc:0b:6f:20:5f:3e:6e:8e:
6e:37:43:a5:4a:f0:ac:72:ce:c7:68:1a:9a:27:6c:
83:06:7b:62:ba:f7:c9:7d:e5:0d:39:8c:ba:eb:b3:
7b:5e:1e:03:46:4c:20:d5:c1:e1:94:40:85:5f:53:
9d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:78:E9:C2:3C:D8:76:74:4B:A2:5D:D9:55:33:80:B2:89:B4:1B:A4
X509v3 Authority Key Identifier:
keyid:65:C5:DA:D5:44:DF:49:71:60:85:EB:E8:0D:BE:82:EB:68:A2:09:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZcXa1UTfSXFghevoDb6C62iiCck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/ZcXa1UTfSXFghevoDb6C62iiCck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/ZcXa1UTfSXFghevoDb6C62iiCck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:1d:43:3b:31:0f:38:65:a1:7d:76:45:4f:05:78:00:fc:f2:
05:a9:25:cb:bd:3a:71:5f:36:19:1a:95:a0:38:e0:f1:b6:b0:
19:ee:76:4b:ed:b0:6f:fb:45:f2:51:0e:39:9a:f4:69:8f:8a:
e9:5a:a3:63:36:db:bb:03:9c:e0:58:d1:0b:45:b7:b9:12:4e:
e2:02:e6:96:c7:ad:84:7b:2c:9e:19:d1:ae:eb:7b:8e:d5:91:
be:12:31:fa:89:8c:be:cf:47:ad:61:42:73:a4:36:fc:20:2d:
96:7b:c0:21:08:56:36:c7:a9:f6:83:de:73:20:69:a5:3a:05:
9b:5f:7f:d4:3a:47:9e:f3:dd:e6:f3:9a:03:c2:55:e6:b6:5d:
64:59:26:c3:95:52:6d:10:4e:9b:fa:35:a3:87:59:80:1e:9a:
37:01:ff:81:16:36:85:c3:71:b9:a4:03:aa:72:ee:dc:2f:a4:
82:5b:20:b6:a1:54:83:9f:e2:0b:0b:a5:7f:c7:60:16:28:79:
47:91:ba:2f:3a:63:8b:b5:57:ac:96:93:98:6c:40:0a:a7:b6:
51:74:28:07:73:a0:4e:a6:ca:4b:42:c1:e5:f2:9e:72:b5:2f:
dd:f9:0b:0b:56:22:11:5b:f1:c3:00:1f:60:93:b6:8a:ca:0f:
d7:e3:22:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 15:55:38 2026 by rpki-client