Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/9fb5e0-5508-49f4-9f9e-34362415182a/1/zoCPTPJWR31wopTRMBbCToQn1cI.mft
File: zoCPTPJWR31wopTRMBbCToQn1cI.mft (raw, json)
Hash identifier: yMQZwj+bDZIxCVoZj3kTpMBYnxUz9U/+tvwTwI39Exc=
Subject key identifier: 70:F5:8F:08:99:9C:F3:B3:36:B7:88:BD:D3:6A:E3:7F:F4:B4:47:B0
Authority key identifier: CE:80:8F:4C:F2:56:47:7D:70:A2:94:D1:30:16:C2:4E:84:27:D5:C2
Certificate issuer: /CN=ce808f4cf256477d70a294d13016c24e8427d5c2
Certificate serial: 01A0035E4C0BBF6859F624BBD198747B56C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zoCPTPJWR31wopTRMBbCToQn1cI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/9fb5e0-5508-49f4-9f9e-34362415182a/1/zoCPTPJWR31wopTRMBbCToQn1cI.mft
Manifest number: 7B
Signing time: Sat 15 Aug 2026 03:01:46 +0000
Manifest this update: Sat 15 Aug 2026 03:01:46 +0000
Manifest next update: Sun 16 Aug 2026 03:01:46 +0000
Files and hashes: 1: _JmG_0xrHcMFjUFl8DJsIFUaYD8.roa (hash: 7k5k2uPEyUiwrs4Pq2qVmxoQcxV+zQ2r/avbqedzahU=)
2: zDXzBZeXum8l30Cf-mJ2T8gbfQg.roa (hash: sIKKghlLT4flRrCI8RlvLEJlP+eAnZaJEqf8oP1H+nw=)
3: zoCPTPJWR31wopTRMBbCToQn1cI.crl (hash: 3gDIcP9AGCfl7kZK0/ALlyJAIv1RG9KVQ1cFXEM6rR4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/9fb5e0-5508-49f4-9f9e-34362415182a/1/zoCPTPJWR31wopTRMBbCToQn1cI.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/9fb5e0-5508-49f4-9f9e-34362415182a/1/zoCPTPJWR31wopTRMBbCToQn1cI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zoCPTPJWR31wopTRMBbCToQn1cI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:03:5e:4c:0b:bf:68:59:f6:24:bb:d1:98:74:7b:56:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce808f4cf256477d70a294d13016c24e8427d5c2
Validity
Not Before: Aug 15 03:01:46 2026 GMT
Not After : Aug 16 03:01:46 2026 GMT
Subject: CN=70f58f08999cf3b336b788bdd36ae37ff4b447b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8b:72:1c:59:bd:8e:31:c8:f3:3e:d4:fc:6b:
d1:69:b2:fd:98:2d:fe:a3:4d:98:f2:92:c6:5a:b2:
bc:bb:91:0a:e4:05:a3:a7:fe:77:69:69:cb:10:2f:
8b:7b:c2:4b:78:53:28:c7:c9:7a:53:31:ff:fc:8e:
35:ae:58:09:b5:39:f7:bc:56:74:97:e9:26:05:a6:
2a:45:b8:b7:12:61:70:39:c0:92:2f:e6:cc:8c:bd:
91:1c:99:4c:77:ae:7f:bd:9b:8a:d1:08:ea:21:18:
a2:59:59:cf:9d:fe:68:c1:94:4e:80:33:78:b3:f9:
4f:19:39:d1:a4:17:91:d3:bc:e0:bc:3a:8c:2b:10:
b4:9a:1f:62:0c:d7:93:bb:30:c7:8b:c7:7c:87:a0:
2d:6a:3b:f0:35:72:d5:c6:11:db:d1:ce:c7:64:4e:
ed:74:d8:cd:55:e5:ec:f2:71:53:73:1f:70:bb:21:
9a:f7:f9:06:d9:91:9b:b7:d6:a6:f6:ec:dc:b0:b3:
c0:5d:8b:59:42:16:02:aa:75:bd:9b:f2:7c:c4:b4:
3c:9f:4a:98:6d:dd:81:0d:68:0c:6c:71:13:f4:cc:
36:1a:e1:d6:71:69:2b:87:be:6a:db:41:ce:53:01:
6f:33:79:cb:b4:93:c6:42:c0:80:44:c5:53:d6:d8:
59:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:F5:8F:08:99:9C:F3:B3:36:B7:88:BD:D3:6A:E3:7F:F4:B4:47:B0
X509v3 Authority Key Identifier:
keyid:CE:80:8F:4C:F2:56:47:7D:70:A2:94:D1:30:16:C2:4E:84:27:D5:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zoCPTPJWR31wopTRMBbCToQn1cI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/9fb5e0-5508-49f4-9f9e-34362415182a/1/zoCPTPJWR31wopTRMBbCToQn1cI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/9fb5e0-5508-49f4-9f9e-34362415182a/1/zoCPTPJWR31wopTRMBbCToQn1cI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:5e:ae:cb:c5:b0:3a:b2:5d:71:ae:34:b7:d6:e0:ee:b7:db:
eb:b1:f2:31:77:2c:a2:4c:b6:d1:e9:36:1f:15:20:bb:ff:1e:
48:d8:4c:5b:f6:59:05:62:0f:e0:eb:5d:37:f1:79:6a:4b:b0:
a0:3c:5e:58:50:ee:f7:38:c6:02:ea:79:45:32:91:3e:a4:c2:
1c:52:46:a8:6e:cc:12:83:36:ca:a1:08:79:fb:7f:41:fb:f1:
13:ec:07:1a:d5:aa:16:0d:4e:86:1c:04:4d:b3:c1:05:dd:95:
c4:9d:bc:ed:62:19:c9:c3:ef:f9:8d:76:3a:ec:98:03:9f:b3:
86:c5:2c:61:c7:83:b5:8c:26:86:70:d0:99:d6:2b:f9:ae:11:
86:7c:4d:8a:ad:8a:91:f9:62:15:13:05:97:5f:fe:52:d7:6e:
f9:b0:4a:60:85:be:d6:56:a3:d6:ec:69:e0:ca:6e:d3:30:74:
ff:6f:20:ec:ae:25:4c:f2:c2:bc:36:93:17:39:eb:7c:15:58:
93:57:50:23:6f:e1:58:be:e1:ed:9f:8d:a0:a0:a3:c6:ec:71:
0f:ef:0d:f7:e1:7d:fb:eb:48:be:76:75:0b:d0:b3:d2:83:50:
98:19:f6:7c:ec:fc:8e:10:a5:4e:79:9f:cb:46:d4:60:d7:a2:
5b:89:a1:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 06:12:11 2026 by rpki-client