Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/zZGetcIQg2AVXef7TyFqBVrjHwk.mft
File: zZGetcIQg2AVXef7TyFqBVrjHwk.mft (raw, json)
Hash identifier: 7iqFbbWk/6t9V8Mwcff/2PGf87D9uc4jKoSmBqEzmKU=
Subject key identifier: FB:3A:D2:06:F5:35:6F:B8:07:7B:44:E5:F1:FF:15:FA:6A:BA:62:9D
Authority key identifier: CD:91:9E:B5:C2:10:83:60:15:5D:E7:FB:4F:21:6A:05:5A:E3:1F:09
Certificate issuer: /CN=cd919eb5c2108360155de7fb4f216a055ae31f09
Certificate serial: 019FA2604FD7DD507473277ADBA61A9C1C9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZGetcIQg2AVXef7TyFqBVrjHwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/zZGetcIQg2AVXef7TyFqBVrjHwk.mft
Manifest number: 19D8
Signing time: Mon 27 Jul 2026 07:00:48 +0000
Manifest this update: Mon 27 Jul 2026 07:00:48 +0000
Manifest next update: Tue 28 Jul 2026 07:00:48 +0000
Files and hashes: 1: GOSw37CdgLKeIKbJScsqY_9Dr2w.roa (hash: ZvDfQJkz45jdazcjaKmxmDgrWuHDPZ2kpxNBxgEv1Uw=)
2: y8_LNgwxUbTo2kYfyXrTJhM5aoA.roa (hash: 5zjlPGmjTWA8lGnzMm1Kk7Dl2qi8X7Yn0O8wDBpdII4=)
3: zZGetcIQg2AVXef7TyFqBVrjHwk.crl (hash: LoqMUruCfgXkrktJWEnXUkoLKcYNfPwGgVgsAy5zNXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/zZGetcIQg2AVXef7TyFqBVrjHwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/zZGetcIQg2AVXef7TyFqBVrjHwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/zZGetcIQg2AVXef7TyFqBVrjHwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:60:4f:d7:dd:50:74:73:27:7a:db:a6:1a:9c:1c:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd919eb5c2108360155de7fb4f216a055ae31f09
Validity
Not Before: Jul 27 07:00:48 2026 GMT
Not After : Jul 28 07:00:48 2026 GMT
Subject: CN=fb3ad206f5356fb8077b44e5f1ff15fa6aba629d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:97:0e:e2:b4:98:4d:a4:23:c4:cd:13:99:01:
79:6f:5b:e8:9d:7d:7a:9b:c7:9c:c1:02:c8:7a:81:
77:b8:b1:05:53:ab:a6:a6:5c:da:9a:e9:1b:4d:75:
8d:6b:dc:4e:97:35:5a:d0:42:0a:42:67:46:54:ff:
78:ba:ae:08:08:6f:f5:8c:39:38:33:b8:99:24:42:
70:6e:b2:79:ad:bb:68:b0:dd:a1:d5:e5:8a:96:e3:
fb:d9:d1:ed:f4:4e:18:a6:3d:50:37:d2:21:c9:8d:
d1:1d:74:e3:4b:fb:a4:a0:56:3c:af:ab:32:d1:a1:
5e:de:45:be:f1:ee:bf:38:00:59:de:1d:29:48:25:
9c:79:b3:62:32:05:e5:92:10:67:a5:36:53:ba:94:
01:40:90:e2:e8:d5:64:59:e1:04:18:4a:4d:bb:7e:
e2:9e:15:c2:27:41:3b:1c:50:ee:5c:ab:50:17:62:
96:71:c4:93:26:8f:f4:43:94:0b:ef:41:bc:02:44:
d0:9b:5e:74:cd:11:b1:ff:c6:d5:03:d1:06:ad:4d:
15:6c:13:01:67:27:99:ae:ea:5c:96:75:4d:8f:e2:
eb:80:7d:64:31:7c:30:48:25:89:16:56:65:2a:71:
62:92:a7:3a:f1:84:91:fd:e7:00:72:e2:de:e3:4c:
d2:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:3A:D2:06:F5:35:6F:B8:07:7B:44:E5:F1:FF:15:FA:6A:BA:62:9D
X509v3 Authority Key Identifier:
keyid:CD:91:9E:B5:C2:10:83:60:15:5D:E7:FB:4F:21:6A:05:5A:E3:1F:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZGetcIQg2AVXef7TyFqBVrjHwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/zZGetcIQg2AVXef7TyFqBVrjHwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/zZGetcIQg2AVXef7TyFqBVrjHwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:1b:c8:bb:eb:64:be:33:3b:b5:9d:f5:d9:14:c9:f7:9a:00:
4f:d7:20:84:29:c3:71:bb:b2:0b:4c:43:f5:03:53:e2:8d:44:
92:89:aa:68:c9:1d:6c:9b:e1:39:c4:d1:64:4e:7f:8a:f5:18:
e4:99:c2:b7:59:f5:04:f8:2b:e5:92:2e:dd:19:1e:cc:ee:cd:
70:24:13:85:17:f6:8c:4e:00:72:bf:0e:03:14:50:a8:09:54:
ec:9a:b2:9f:ad:6c:15:64:d4:1f:7b:82:c1:b1:bb:5b:f7:0d:
7a:a3:ca:28:3c:5e:ae:40:37:db:ec:e0:0a:7e:1b:39:4f:a8:
b3:c1:65:7c:a8:d2:e5:df:81:e7:7d:73:0a:f5:6c:04:38:99:
7c:03:e7:fc:ec:23:e8:65:c6:31:ae:00:c6:92:d3:e8:fd:78:
fb:3a:2e:56:bb:83:07:34:21:99:80:b0:27:1b:41:ab:0c:c5:
3c:8b:6d:cb:f0:51:00:60:f9:81:bb:db:5e:23:3c:f2:d3:8e:
eb:6a:82:3b:80:24:af:be:9c:fe:20:9a:52:cf:40:fa:fc:27:
16:36:cf:69:2d:3a:10:92:39:19:93:9e:a8:9a:f1:5d:b0:fb:
90:de:6e:34:33:c0:42:a0:93:d4:c6:3c:62:aa:88:d1:37:9c:
ce:42:aa:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 12:45:10 2026 by rpki-client