Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/_zLWRjYhsT945TDRRP6sAj4eRYI.mft
File: _zLWRjYhsT945TDRRP6sAj4eRYI.mft (raw, json)
Hash identifier: iJaVVpAOgvwOOSxL6h9VqCQBcf2YinRbPnzpMhzBTSg=
Subject key identifier: 7A:1E:80:C9:D7:93:48:64:39:E7:E5:7A:0F:51:45:EF:0E:85:9C:7C
Authority key identifier: FF:32:D6:46:36:21:B1:3F:78:E5:30:D1:44:FE:AC:02:3E:1E:45:82
Certificate issuer: /CN=ff32d6463621b13f78e530d144feac023e1e4582
Certificate serial: 019EE1E6D811FC8FCFA82C23A4CE61597A3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zLWRjYhsT945TDRRP6sAj4eRYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/_zLWRjYhsT945TDRRP6sAj4eRYI.mft
Manifest number: 0762
Signing time: Fri 19 Jun 2026 22:01:02 +0000
Manifest this update: Fri 19 Jun 2026 22:01:02 +0000
Manifest next update: Sat 20 Jun 2026 22:01:02 +0000
Files and hashes: 1: KMzQyZn0sL4K5ZP9K9I0Og-xt_U.roa (hash: Gf/LGVEeT1adLQAQqGIqK3h3EJC7/QXPQ3sFnCSBko8=)
2: Ukx2pX6eNsn9qNUR2nCL2LPZvjA.roa (hash: au3fqQ6RcZ2zMdL3gn35FM2inTn32yGF3JxGQGNFq+U=)
3: _zLWRjYhsT945TDRRP6sAj4eRYI.crl (hash: VS7yMhjCrHLkhPgFR1trCb0b0T2NAIN0NGHUVj/hwAA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/_zLWRjYhsT945TDRRP6sAj4eRYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/_zLWRjYhsT945TDRRP6sAj4eRYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_zLWRjYhsT945TDRRP6sAj4eRYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Jun 2026 19:57:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e1:e6:d8:11:fc:8f:cf:a8:2c:23:a4:ce:61:59:7a:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff32d6463621b13f78e530d144feac023e1e4582
Validity
Not Before: Jun 19 22:01:02 2026 GMT
Not After : Jun 20 22:01:02 2026 GMT
Subject: CN=7a1e80c9d793486439e7e57a0f5145ef0e859c7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8e:7b:a2:6c:41:9d:34:5e:92:74:54:33:7d:
f8:2d:ff:ba:76:f2:a0:94:b4:42:54:9a:47:57:6c:
b9:b7:de:4c:42:39:f7:63:31:0b:69:08:da:ee:10:
4a:3e:2d:36:f9:0c:ee:26:c6:34:c5:18:65:2c:dd:
6e:95:14:96:95:26:32:8e:bf:46:6e:f8:c3:3f:be:
b1:33:5d:10:e2:16:17:1b:3c:d8:2a:41:cb:7b:40:
be:ca:47:22:3f:5e:2c:af:82:0e:dc:09:be:da:7a:
4a:11:88:09:e9:2d:f3:b6:7f:42:57:1e:ff:99:db:
ec:82:db:89:41:28:4e:61:37:d9:42:54:9b:80:65:
76:5b:7c:86:eb:94:54:9f:87:ee:75:06:85:5a:62:
67:79:69:10:73:cf:51:b6:15:e6:35:46:75:9a:84:
e2:b3:9c:33:b7:b4:e9:c5:ce:20:a3:90:34:72:81:
d2:e0:f5:3c:5f:bc:52:73:28:4c:36:7d:36:25:8b:
d0:08:58:52:86:0e:1c:5a:d0:78:c9:51:45:f9:49:
e6:08:18:f1:2b:8b:67:cc:18:7d:bc:a9:c8:46:14:
e1:29:49:85:b2:18:b3:fb:74:99:27:c7:dc:7e:11:
66:82:00:49:57:60:ca:4f:b9:e2:df:82:46:2f:19:
6d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:1E:80:C9:D7:93:48:64:39:E7:E5:7A:0F:51:45:EF:0E:85:9C:7C
X509v3 Authority Key Identifier:
keyid:FF:32:D6:46:36:21:B1:3F:78:E5:30:D1:44:FE:AC:02:3E:1E:45:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zLWRjYhsT945TDRRP6sAj4eRYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/_zLWRjYhsT945TDRRP6sAj4eRYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/_zLWRjYhsT945TDRRP6sAj4eRYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:cf:ed:9d:f2:8d:4d:5f:e7:26:05:33:a3:0a:eb:6b:5a:c0:
1b:4b:d0:7d:73:02:22:2b:95:65:ba:29:cf:fa:87:9b:ce:71:
2e:27:34:7f:78:5c:d6:79:0e:b0:1b:c4:41:51:da:5c:c6:e9:
3e:b5:b8:54:ce:87:66:07:64:23:cf:5f:48:68:b9:97:7c:00:
f9:70:32:f0:bd:ae:c1:00:4f:e8:e1:d5:46:7c:3e:a7:61:1b:
18:4c:e8:19:64:be:9e:25:34:b9:73:7b:1c:81:42:b3:ff:3f:
8a:e9:a3:0b:9d:57:c9:cf:47:8b:b2:b5:cb:c6:fb:dc:f6:81:
e2:e1:5d:7b:53:b2:d8:3d:c8:0c:be:df:7a:ae:ad:1e:52:63:
4b:7a:ad:98:67:ca:a5:32:4b:74:89:b7:d0:e3:22:02:9a:bb:
9d:8a:bb:a3:f1:20:b2:94:94:89:fe:ac:cd:9d:e3:23:e5:25:
d3:a0:f5:17:87:33:5a:2d:ef:b5:67:dd:83:f6:24:33:c7:98:
99:a6:54:70:cd:53:35:eb:2f:56:18:6e:98:18:3b:c8:0b:e3:
c4:82:9a:57:2f:d5:a9:5e:da:14:4a:9b:fd:cf:92:5d:4c:3c:
5e:b2:6d:43:22:32:9f:ab:19:4b:f1:67:28:1d:71:72:2d:35:
e4:d6:46:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 05:11:13 2026 by rpki-client