Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/1baff1-dda3-4304-b1b3-5182eede2a29/1/ZDZqc5FfkJDUsQg4l6pAJXfhY94.mft
File: ZDZqc5FfkJDUsQg4l6pAJXfhY94.mft (raw, json)
Hash identifier: fAZJ2lMIoMaAy0zmTrVnfefbsPVXxL/Sjo1iEr3h7oI=
Subject key identifier: FF:9C:E1:8A:22:5C:AE:5F:2A:78:0C:73:EF:EA:49:B7:87:36:3D:57
Authority key identifier: 64:36:6A:73:91:5F:90:90:D4:B1:08:38:97:AA:40:25:77:E1:63:DE
Certificate issuer: /CN=64366a73915f9090d4b1083897aa402577e163de
Certificate serial: 019FA7F4D70790E8AD43FE4244746075D83E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZDZqc5FfkJDUsQg4l6pAJXfhY94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/1baff1-dda3-4304-b1b3-5182eede2a29/1/ZDZqc5FfkJDUsQg4l6pAJXfhY94.mft
Manifest number: 09B5
Signing time: Tue 28 Jul 2026 09:01:08 +0000
Manifest this update: Tue 28 Jul 2026 09:01:08 +0000
Manifest next update: Wed 29 Jul 2026 09:01:08 +0000
Files and hashes: 1: WPsZu0t0gwCtDu9DluM2JpNAigM.roa (hash: 1nZv6ryPRTSI42lJffh2EsY2m6JCVkOOWCXauYoQ2vk=)
2: ZDZqc5FfkJDUsQg4l6pAJXfhY94.crl (hash: oIaGg1yHh6TNZq/jQp5wJkh1OpgF8nxORI9OoAbEXFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/1baff1-dda3-4304-b1b3-5182eede2a29/1/ZDZqc5FfkJDUsQg4l6pAJXfhY94.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/1baff1-dda3-4304-b1b3-5182eede2a29/1/ZDZqc5FfkJDUsQg4l6pAJXfhY94.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZDZqc5FfkJDUsQg4l6pAJXfhY94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:f4:d7:07:90:e8:ad:43:fe:42:44:74:60:75:d8:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64366a73915f9090d4b1083897aa402577e163de
Validity
Not Before: Jul 28 09:01:08 2026 GMT
Not After : Jul 29 09:01:08 2026 GMT
Subject: CN=ff9ce18a225cae5f2a780c73efea49b787363d57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:10:b3:6f:39:3c:2b:3a:00:c3:d0:d6:ce:a2:
35:36:bc:3e:d5:89:0c:df:95:45:47:e5:ec:53:a8:
be:79:6f:39:49:2a:37:b0:c3:30:6a:ce:c9:5b:ae:
ab:bd:ef:3d:2f:17:2a:37:cc:86:3d:c9:a3:3c:1a:
09:e5:5b:30:41:d7:50:af:07:9b:fb:16:e2:07:38:
3b:57:20:d2:25:db:45:ff:13:8f:70:27:4d:ed:2a:
79:ac:4f:a0:23:5a:f5:8b:34:5a:45:ff:d7:0a:d7:
1b:07:56:4c:e6:55:3a:0f:44:bd:05:6c:9e:da:2c:
3b:6b:20:25:5b:c4:9b:41:4d:52:58:c4:9f:30:03:
53:2f:08:20:c9:e0:9a:95:f8:64:4d:a0:c5:d6:f6:
3f:e3:40:ed:6c:53:81:b7:e7:a3:5c:32:1b:cf:36:
39:36:e9:00:a3:a7:56:f9:bb:13:f6:b3:8a:18:59:
35:5f:5c:49:e4:ee:79:f3:26:a1:72:12:16:22:75:
02:63:3b:e3:c7:01:a1:fe:fc:fe:c3:80:1b:b8:20:
0a:aa:ae:7b:6a:2e:e8:e6:77:58:0d:06:dc:e1:46:
e7:3c:c6:2c:b8:e9:49:41:69:b2:24:a2:7f:93:20:
93:86:4c:ad:dc:49:9c:7f:2c:8b:f2:60:52:d0:03:
3c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:9C:E1:8A:22:5C:AE:5F:2A:78:0C:73:EF:EA:49:B7:87:36:3D:57
X509v3 Authority Key Identifier:
keyid:64:36:6A:73:91:5F:90:90:D4:B1:08:38:97:AA:40:25:77:E1:63:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZDZqc5FfkJDUsQg4l6pAJXfhY94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/1baff1-dda3-4304-b1b3-5182eede2a29/1/ZDZqc5FfkJDUsQg4l6pAJXfhY94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/1baff1-dda3-4304-b1b3-5182eede2a29/1/ZDZqc5FfkJDUsQg4l6pAJXfhY94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:ef:53:44:9e:b8:94:ab:ad:24:62:71:6c:1b:15:e4:79:1c:
30:d5:32:b2:ef:78:18:eb:db:1d:bb:62:f9:38:96:6b:33:99:
fd:d5:59:6d:b3:95:6d:2c:d0:70:b3:f1:80:33:72:69:b5:f4:
dc:78:2f:ab:b6:de:55:c8:49:32:1f:4e:80:78:53:91:5f:c7:
5d:8a:24:3c:a2:00:e3:a2:24:3c:5e:3a:77:09:5e:4a:8e:b2:
bf:4d:fd:7a:86:d0:ba:9e:61:30:c4:56:47:e5:a0:cc:7a:42:
dd:58:93:0a:fc:15:9e:b5:fd:42:54:76:74:62:4b:db:32:3f:
41:90:8f:23:60:b5:b7:4b:57:cf:3a:df:c3:d4:1e:07:fc:1d:
c8:ea:f6:37:bc:4e:aa:b7:42:ab:8e:2d:1f:d2:d1:69:03:b3:
42:07:57:66:0c:e9:2d:7c:1c:f9:2f:09:11:34:70:ed:84:b6:
3f:12:51:f2:0c:26:e8:c2:f1:b2:6a:4e:da:b6:f9:4f:3f:bd:
05:1f:aa:76:17:cb:7d:17:39:17:21:03:7c:ce:9b:13:a7:d0:
f2:5b:92:67:40:ab:f5:04:58:bc:ae:3f:83:c0:c4:db:90:ab:
b6:fa:ca:8b:62:54:9d:43:1d:8a:ae:85:ac:60:70:58:70:f2:
61:6d:c6:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 13:37:52 2026 by rpki-client