Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/5b8b9c-8f19-4c6b-afd7-c694260017b0/1/zZFzvIKKtx2i68r6f4mOxqoe6nY.mft
File: zZFzvIKKtx2i68r6f4mOxqoe6nY.mft (raw, json)
Hash identifier: 7/CjTQOVyggcuSwpcRI2f0s5LVqV4UjZBk9N4vCvdHM=
Subject key identifier: BA:F7:A5:60:60:DF:96:EC:43:8E:84:CB:93:97:0B:E9:1C:B5:95:E4
Authority key identifier: CD:91:73:BC:82:8A:B7:1D:A2:EB:CA:FA:7F:89:8E:C6:AA:1E:EA:76
Certificate issuer: /CN=cd9173bc828ab71da2ebcafa7f898ec6aa1eea76
Certificate serial: 019FA33C2BDF325632BABFB3BF4264CA9421
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZFzvIKKtx2i68r6f4mOxqoe6nY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/5b8b9c-8f19-4c6b-afd7-c694260017b0/1/zZFzvIKKtx2i68r6f4mOxqoe6nY.mft
Manifest number: 0860
Signing time: Mon 27 Jul 2026 11:00:57 +0000
Manifest this update: Mon 27 Jul 2026 11:00:57 +0000
Manifest next update: Tue 28 Jul 2026 11:00:57 +0000
Files and hashes: 1: nAJxhXG44wyPTc0EFqzl-RykeMo.roa (hash: ZE3/dC2ID9u+b4jjbTZ42QFLg8NiUmB80hYNY0tMDq0=)
2: zZFzvIKKtx2i68r6f4mOxqoe6nY.crl (hash: G2t6nTAPbp9nvwWYLqkMY4rlH4crYRyLkkqNxYC1AIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/5b8b9c-8f19-4c6b-afd7-c694260017b0/1/zZFzvIKKtx2i68r6f4mOxqoe6nY.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/5b8b9c-8f19-4c6b-afd7-c694260017b0/1/zZFzvIKKtx2i68r6f4mOxqoe6nY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zZFzvIKKtx2i68r6f4mOxqoe6nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:3c:2b:df:32:56:32:ba:bf:b3:bf:42:64:ca:94:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd9173bc828ab71da2ebcafa7f898ec6aa1eea76
Validity
Not Before: Jul 27 11:00:57 2026 GMT
Not After : Jul 28 11:00:57 2026 GMT
Subject: CN=baf7a56060df96ec438e84cb93970be91cb595e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:42:6b:20:f3:a1:c7:db:f1:90:98:0b:ca:46:
02:60:df:66:52:c7:10:3c:17:13:78:35:1d:c1:cd:
ea:b0:ee:41:f5:c2:e5:2b:fc:9d:48:63:90:68:3e:
2c:9a:c5:7e:5e:8c:02:fd:0e:a6:fd:69:92:ef:a3:
d7:9b:be:15:07:d8:94:07:3c:ae:27:8e:db:84:3f:
a8:5f:6e:22:32:48:7b:85:47:89:a1:e2:22:70:00:
fe:b1:e2:50:63:f5:71:9d:e3:29:5e:99:82:1d:c3:
50:c4:08:e9:3c:cb:f0:b2:a5:3f:91:e8:ed:08:b0:
13:d2:78:d3:36:db:a2:4e:9e:29:76:bf:da:c6:23:
2e:c1:c6:25:4b:23:fd:22:18:36:a6:f6:4a:27:23:
ff:9c:ca:85:04:4c:0b:22:70:ec:eb:1a:2f:69:fe:
dd:86:a3:da:5e:c5:c5:05:a4:da:21:67:72:a0:e8:
db:d3:5a:7f:01:80:a5:41:ca:9f:0b:dc:50:fe:61:
db:1f:46:97:ab:a3:83:25:97:b1:a9:0b:4d:3f:4a:
70:60:36:8f:46:ce:be:a5:4f:42:c3:75:10:ec:3f:
50:60:48:3d:e8:44:f6:14:5e:d0:2a:c5:0c:f3:28:
6f:69:bf:fd:af:6d:5a:0a:cd:ae:6e:08:0a:c1:0a:
9a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:F7:A5:60:60:DF:96:EC:43:8E:84:CB:93:97:0B:E9:1C:B5:95:E4
X509v3 Authority Key Identifier:
keyid:CD:91:73:BC:82:8A:B7:1D:A2:EB:CA:FA:7F:89:8E:C6:AA:1E:EA:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZFzvIKKtx2i68r6f4mOxqoe6nY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/5b8b9c-8f19-4c6b-afd7-c694260017b0/1/zZFzvIKKtx2i68r6f4mOxqoe6nY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/5b8b9c-8f19-4c6b-afd7-c694260017b0/1/zZFzvIKKtx2i68r6f4mOxqoe6nY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:6a:e7:7a:c1:90:30:5e:53:69:8c:9c:7a:8c:70:c7:af:c0:
12:9c:f2:4d:82:f6:89:1c:7a:9f:cc:4b:21:72:69:2a:92:13:
eb:4d:79:cc:76:bc:6b:58:9a:c3:ea:ca:e0:d0:26:2a:2d:8b:
d5:27:87:7a:1b:0e:91:28:78:dd:4b:b2:09:98:59:66:0b:40:
61:6d:a7:90:df:cf:b1:1b:f4:c1:50:f4:63:d8:f7:5f:36:4f:
42:62:47:f0:a5:c8:9b:96:b0:b0:ea:c2:c3:d2:09:15:62:84:
04:98:6e:17:97:29:43:18:ac:f6:19:59:fc:2c:8b:37:66:6a:
e5:c5:37:8e:55:a3:0d:06:7a:6d:ac:20:90:52:d7:55:02:74:
e8:b7:13:97:8b:18:cc:bf:0e:55:75:d9:bd:65:f3:db:40:b1:
9e:1e:85:44:4b:42:16:66:99:76:c4:dd:d1:62:c1:f9:65:4f:
ba:40:b6:3b:95:41:3a:f9:ad:8e:ff:4d:bc:09:c9:c0:af:85:
35:f7:96:b5:96:86:4a:a8:ba:49:88:81:d7:83:a6:44:b9:38:
eb:36:9d:fb:4b:33:a0:a6:2e:0d:76:11:4d:b4:55:a1:d7:2a:
92:81:e9:c9:67:2e:13:ef:0b:0c:2b:ed:36:f0:60:e3:d9:1e:
fd:25:92:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 14:24:12 2026 by rpki-client