Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/4bc864-718c-4217-ab5f-98fcb3a8bc9e/1/zpeYqNqZmd31OjyNOPNvF-zUVDI.mft
File: zpeYqNqZmd31OjyNOPNvF-zUVDI.mft (raw, json)
Hash identifier: pmXZrPLnc+voJ+s3X8m8ULAe4XHCkUI1d7YVkAUbks0=
Subject key identifier: CE:D4:A1:72:3F:88:F7:E5:77:FE:B0:FF:DE:1C:0C:E1:0F:75:F2:A5
Authority key identifier: CE:97:98:A8:DA:99:99:DD:F5:3A:3C:8D:38:F3:6F:17:EC:D4:54:32
Certificate issuer: /CN=ce9798a8da9999ddf53a3c8d38f36f17ecd45432
Certificate serial: 019FA1BBC071F1B20786F34E60601AC1FAB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zpeYqNqZmd31OjyNOPNvF-zUVDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/4bc864-718c-4217-ab5f-98fcb3a8bc9e/1/zpeYqNqZmd31OjyNOPNvF-zUVDI.mft
Manifest number: 1038
Signing time: Mon 27 Jul 2026 04:01:03 +0000
Manifest this update: Mon 27 Jul 2026 04:01:03 +0000
Manifest next update: Tue 28 Jul 2026 04:01:03 +0000
Files and hashes: 1: XFrg3fq27QCVqHQz_3WZ4-RTRVc.roa (hash: 8n6vVNKWwTijSBhZMmEVHz4L7ynm8ZDo8eSSws5BDgg=)
2: zpeYqNqZmd31OjyNOPNvF-zUVDI.crl (hash: zHj3ZfPg7uxvm9GHel8bVzpvdm8GjM0dStUl+SVVFwI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/4bc864-718c-4217-ab5f-98fcb3a8bc9e/1/zpeYqNqZmd31OjyNOPNvF-zUVDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/4bc864-718c-4217-ab5f-98fcb3a8bc9e/1/zpeYqNqZmd31OjyNOPNvF-zUVDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zpeYqNqZmd31OjyNOPNvF-zUVDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:bb:c0:71:f1:b2:07:86:f3:4e:60:60:1a:c1:fa:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce9798a8da9999ddf53a3c8d38f36f17ecd45432
Validity
Not Before: Jul 27 04:01:03 2026 GMT
Not After : Jul 28 04:01:03 2026 GMT
Subject: CN=ced4a1723f88f7e577feb0ffde1c0ce10f75f2a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a3:ac:32:ea:cf:7d:f6:73:61:94:a5:62:f7:
4c:ec:7b:a2:e6:ff:c9:1c:eb:5b:3f:7c:e4:76:fc:
07:e4:e6:d5:18:23:6b:3b:0b:72:c9:5c:52:ad:4b:
8b:e4:77:49:42:b5:68:5a:ba:80:ac:d9:70:72:7b:
22:1a:70:c8:4a:6a:45:78:f0:f7:01:c3:60:4b:ab:
9e:cc:a2:d3:bb:3a:f6:c3:a2:d1:a0:a7:01:97:15:
5d:3c:13:89:33:a8:9a:f1:d9:bb:18:0c:88:70:5d:
47:39:22:06:28:1b:9f:5c:27:55:95:40:95:68:14:
c1:4e:d3:14:12:7b:51:96:ad:83:4d:2d:e2:71:05:
39:24:da:52:fb:3f:67:f7:07:10:86:00:64:e4:04:
38:ab:28:a5:8d:24:3b:cf:70:b8:5c:89:49:a1:a8:
8e:67:a4:e1:62:14:16:8d:2d:d5:8a:70:d6:bc:18:
8a:cc:68:ad:58:f2:e0:ef:41:a1:0b:39:8d:7f:53:
64:4b:88:5e:11:68:1d:45:2f:81:b3:97:af:5c:ab:
99:48:f2:cd:0c:a3:34:2a:0a:ef:55:ce:95:26:cf:
4d:9e:43:5e:a2:ec:fa:88:78:fa:9c:ce:bc:32:ef:
9e:07:23:1e:9f:f2:4e:13:40:06:3f:90:8a:fd:80:
32:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:D4:A1:72:3F:88:F7:E5:77:FE:B0:FF:DE:1C:0C:E1:0F:75:F2:A5
X509v3 Authority Key Identifier:
keyid:CE:97:98:A8:DA:99:99:DD:F5:3A:3C:8D:38:F3:6F:17:EC:D4:54:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zpeYqNqZmd31OjyNOPNvF-zUVDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4bc864-718c-4217-ab5f-98fcb3a8bc9e/1/zpeYqNqZmd31OjyNOPNvF-zUVDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4bc864-718c-4217-ab5f-98fcb3a8bc9e/1/zpeYqNqZmd31OjyNOPNvF-zUVDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:52:27:83:99:94:36:cb:12:9d:f2:d1:cc:d7:07:7a:a5:87:
47:22:8b:91:35:69:d2:df:96:ae:a4:15:79:06:b6:d4:84:04:
d5:fe:b0:fc:98:64:1a:30:84:e9:8d:63:5c:55:75:12:72:08:
da:7e:64:1e:52:44:27:26:28:69:37:ab:d4:cd:1c:63:f7:bf:
17:1b:79:ae:48:02:cb:e5:10:f7:78:be:de:ad:4a:8e:ec:23:
eb:2d:05:81:98:79:ac:80:ee:33:43:1b:25:58:da:42:2d:1b:
60:a0:d1:47:b9:f8:2d:9b:f3:e9:8f:9d:6b:69:1c:36:b0:39:
80:c8:2f:77:92:66:fe:4d:6c:59:ae:78:bc:b4:9a:8b:06:30:
7a:bb:e9:ef:92:7c:27:ca:c0:25:89:f2:ab:9b:5c:e4:5d:52:
42:a1:06:c8:5b:ea:00:68:1c:9a:c5:75:ba:6c:25:ea:7e:9d:
21:74:c2:56:be:78:d1:0d:af:39:a0:7b:4b:f4:79:c6:8e:1f:
bf:42:c9:39:a6:7b:89:96:14:8a:cb:c4:c7:50:1e:d5:d0:f1:
ae:2c:fd:89:17:cf:f2:c7:4d:ba:43:ab:ea:9e:c7:f1:da:cb:
33:a0:c4:7d:02:3d:22:7a:34:61:ea:e4:d0:ec:f5:87:e5:18:
db:a3:a3:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 06:53:56 2026 by rpki-client