Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/db8d38-077f-4d77-9383-dc781cc2a258/1/zI34gFQGDfaFu6lzkSPoNC1HnoQ.mft
File: zI34gFQGDfaFu6lzkSPoNC1HnoQ.mft (raw, json)
Hash identifier: Kugbi5/+wgGofpTgpcXr0hDT/T5baP+eoJg3YJ/A7uk=
Subject key identifier: 82:D0:A0:A3:87:20:BB:DA:94:C7:E5:04:0C:4C:B7:34:9C:9A:26:7D
Authority key identifier: CC:8D:F8:80:54:06:0D:F6:85:BB:A9:73:91:23:E8:34:2D:47:9E:84
Certificate issuer: /CN=cc8df88054060df685bba9739123e8342d479e84
Certificate serial: 019F860CD465FD01B59E246DFBAA2A780BA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zI34gFQGDfaFu6lzkSPoNC1HnoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/db8d38-077f-4d77-9383-dc781cc2a258/1/zI34gFQGDfaFu6lzkSPoNC1HnoQ.mft
Manifest number: 195A
Signing time: Tue 21 Jul 2026 19:00:15 +0000
Manifest this update: Tue 21 Jul 2026 19:00:15 +0000
Manifest next update: Wed 22 Jul 2026 19:00:15 +0000
Files and hashes: 1: nWemIk_PUFibWyxsMCHuSPNqyxE.roa (hash: LfDaK0qO1xTJjSEUv9R58HxO4b8gyazqBrXpwSZbnWE=)
2: zI34gFQGDfaFu6lzkSPoNC1HnoQ.crl (hash: ETw1eDyCMlw+n1E4FWyuIbGvB3IlWi0uvRW0F647Zu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/db8d38-077f-4d77-9383-dc781cc2a258/1/zI34gFQGDfaFu6lzkSPoNC1HnoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/db8d38-077f-4d77-9383-dc781cc2a258/1/zI34gFQGDfaFu6lzkSPoNC1HnoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/zI34gFQGDfaFu6lzkSPoNC1HnoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:0c:d4:65:fd:01:b5:9e:24:6d:fb:aa:2a:78:0b:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc8df88054060df685bba9739123e8342d479e84
Validity
Not Before: Jul 21 19:00:15 2026 GMT
Not After : Jul 22 19:00:15 2026 GMT
Subject: CN=82d0a0a38720bbda94c7e5040c4cb7349c9a267d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8c:ab:de:58:76:91:7c:f0:7e:a4:93:01:19:
57:23:38:91:5f:a1:15:21:c2:11:35:3b:40:cf:43:
08:2d:b3:e0:b7:4f:3d:60:eb:aa:36:6a:46:ae:10:
f9:e5:33:fd:d1:35:d4:80:a6:5d:4e:00:ce:bc:37:
23:b3:c1:b6:f8:0a:51:04:66:99:e8:44:57:8c:01:
8c:49:46:1a:7d:4e:e1:78:36:ec:80:54:bf:e2:b0:
bc:ca:4a:29:9f:87:b3:8b:2b:c6:92:da:60:9f:90:
8f:98:90:91:89:dc:79:d4:62:2c:23:b4:d2:32:f9:
51:39:e7:f5:fe:8d:07:de:1c:01:d4:5a:6c:58:1a:
ef:53:9d:25:21:b4:2d:a3:e9:82:6f:18:7f:69:cd:
d3:94:f4:47:d8:43:ce:0f:d8:10:04:6f:43:70:fb:
0b:d8:38:10:1d:7d:3f:30:c0:ac:6a:8c:a0:fa:0d:
f7:0e:b7:58:32:6f:56:14:1e:36:0c:d4:f6:11:fc:
2d:ca:9c:2d:0f:c8:b1:a2:0a:9d:b5:b6:75:22:93:
77:01:20:78:ba:55:12:44:25:53:f0:25:cf:0f:b4:
53:04:2b:31:e8:c9:cb:ab:0b:db:27:e8:db:60:97:
8c:46:c3:97:d7:ac:90:be:0e:cd:25:0e:0a:f1:36:
80:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:D0:A0:A3:87:20:BB:DA:94:C7:E5:04:0C:4C:B7:34:9C:9A:26:7D
X509v3 Authority Key Identifier:
keyid:CC:8D:F8:80:54:06:0D:F6:85:BB:A9:73:91:23:E8:34:2D:47:9E:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zI34gFQGDfaFu6lzkSPoNC1HnoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/db8d38-077f-4d77-9383-dc781cc2a258/1/zI34gFQGDfaFu6lzkSPoNC1HnoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/db8d38-077f-4d77-9383-dc781cc2a258/1/zI34gFQGDfaFu6lzkSPoNC1HnoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:ab:a9:ba:1f:78:fc:c1:61:fb:e1:ae:33:13:a1:23:ee:6e:
7d:eb:dd:e5:19:d7:18:2c:91:64:6f:f1:cd:46:3b:c3:5f:21:
da:bd:f2:06:8a:b8:42:91:0a:ab:7d:ca:15:27:ae:92:f1:2f:
f2:a8:2d:5f:4a:1f:a4:5f:02:ad:d9:3b:d2:a6:34:3a:54:70:
fe:1e:a9:52:0a:f4:62:54:bd:cd:4d:73:6b:fe:7c:de:ad:ec:
19:3c:df:e5:e1:c0:d4:ba:4c:32:f3:0f:8c:f7:97:a8:39:16:
93:0f:20:f6:e9:a9:11:b4:c2:aa:87:3c:0d:f8:52:3b:03:37:
37:5c:5e:bd:c7:cf:25:87:63:d7:be:1a:5d:95:1b:4f:cc:c7:
75:09:dc:83:9e:35:b5:b7:64:d9:da:72:f3:87:e1:c4:89:e1:
cb:b4:2d:2d:3d:24:fc:f4:a0:19:5d:b4:fa:a3:e4:cc:46:23:
15:35:7f:9a:bf:1c:ba:85:8e:c2:bf:9b:e7:bf:cf:94:b3:1e:
b5:53:b2:f8:75:f4:6a:a6:2f:50:99:c9:13:de:be:3d:38:09:
b7:ec:bb:e2:33:82:68:5e:b0:80:d7:43:74:21:d8:4f:aa:6a:
45:73:36:fd:c3:51:e7:c0:b5:4a:05:61:a2:c5:81:4d:3a:d7:
0c:7d:96:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:10:33 2026 by rpki-client