Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/b7cd7c-5795-4146-8477-0da87b51ffac/1/ZpSrKKgJqi4Kd46pJbHtnSp3VxY.mft
File: ZpSrKKgJqi4Kd46pJbHtnSp3VxY.mft (raw, json)
Hash identifier: E0A8800zpWHeNtQOC41xo5jzsxcbayBWVxOwFObgy2w=
Subject key identifier: 0A:3F:A8:AC:F3:55:64:4C:61:96:83:55:07:10:8C:04:86:16:B4:16
Authority key identifier: 66:94:AB:28:A8:09:AA:2E:0A:77:8E:A9:25:B1:ED:9D:2A:77:57:16
Certificate issuer: /CN=6694ab28a809aa2e0a778ea925b1ed9d2a775716
Certificate serial: 019F3A8582F0A73346CE50939BF228E78129
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZpSrKKgJqi4Kd46pJbHtnSp3VxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/b7cd7c-5795-4146-8477-0da87b51ffac/1/ZpSrKKgJqi4Kd46pJbHtnSp3VxY.mft
Manifest number: 13
Signing time: Tue 07 Jul 2026 03:00:55 +0000
Manifest this update: Tue 07 Jul 2026 03:00:55 +0000
Manifest next update: Wed 08 Jul 2026 03:00:55 +0000
Files and hashes: 1: 65lyhfcnUeev5X-4CcMUdWujCvQ.asa (hash: Q5VU2hVKSklyugtCkKPk1YQjPGPSs0Bldy1d061Ftg4=)
2: PQUU7wS6Dnj9yIlgV8Xc2NVBH64.roa (hash: KhnDFB03h86ec4eUqmqIrwmEs0JGq+ImfCvKHB/LolY=)
3: ZpSrKKgJqi4Kd46pJbHtnSp3VxY.crl (hash: MqfzbzqnMZ5edby1w0711qJNxEzOi3BPRPnAG5V9r10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/b7cd7c-5795-4146-8477-0da87b51ffac/1/ZpSrKKgJqi4Kd46pJbHtnSp3VxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/b7cd7c-5795-4146-8477-0da87b51ffac/1/ZpSrKKgJqi4Kd46pJbHtnSp3VxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZpSrKKgJqi4Kd46pJbHtnSp3VxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 03:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3a:85:82:f0:a7:33:46:ce:50:93:9b:f2:28:e7:81:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6694ab28a809aa2e0a778ea925b1ed9d2a775716
Validity
Not Before: Jul 7 03:00:55 2026 GMT
Not After : Jul 8 03:00:55 2026 GMT
Subject: CN=0a3fa8acf355644c6196835507108c048616b416
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ca:82:d7:6d:d7:33:d2:7d:65:62:b4:22:b6:
3d:89:08:0f:e6:d4:3b:e3:45:cf:cf:7b:f3:8f:9d:
aa:e7:88:b6:e8:37:c9:e2:8c:b2:4d:b8:b3:d4:74:
b6:e2:8c:08:73:63:3c:ee:05:c0:60:fa:78:4a:41:
4c:d7:e8:4b:4c:f1:61:7b:cf:c6:0d:a0:cd:ba:d1:
23:b0:63:47:f6:0d:0b:a9:c1:69:3a:6a:06:ed:18:
20:c6:3c:71:da:b5:53:b0:1c:29:61:bf:d3:33:bc:
80:72:31:3d:ee:23:4c:93:20:f0:4b:f9:d9:53:c1:
e2:c8:85:10:f9:92:27:b7:eb:c2:59:da:09:57:d9:
16:7c:7c:ff:db:fa:42:7b:94:bf:10:bf:ef:91:85:
e6:ee:af:fa:7c:aa:9d:34:d9:e9:db:43:ca:2a:00:
e4:c4:b5:be:83:6d:7b:be:89:5b:0f:17:5d:48:87:
e3:6d:05:9b:46:b7:6d:d5:08:82:18:88:64:8d:10:
3c:fb:4a:55:a5:95:95:04:e5:cc:f5:fe:fd:1f:2c:
b5:9f:f0:ce:c5:3b:06:cf:9b:25:16:16:20:f8:5d:
e7:b2:ba:06:38:5c:bc:c4:e5:cc:a1:ee:02:e6:92:
8a:7c:78:88:63:78:80:54:12:8a:16:91:65:28:db:
63:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:3F:A8:AC:F3:55:64:4C:61:96:83:55:07:10:8C:04:86:16:B4:16
X509v3 Authority Key Identifier:
keyid:66:94:AB:28:A8:09:AA:2E:0A:77:8E:A9:25:B1:ED:9D:2A:77:57:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZpSrKKgJqi4Kd46pJbHtnSp3VxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b7cd7c-5795-4146-8477-0da87b51ffac/1/ZpSrKKgJqi4Kd46pJbHtnSp3VxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b7cd7c-5795-4146-8477-0da87b51ffac/1/ZpSrKKgJqi4Kd46pJbHtnSp3VxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:e9:87:16:1d:3d:54:f1:ae:02:89:8e:f0:be:05:a6:b4:ea:
10:f5:ac:e5:28:0a:0b:50:4a:3e:8b:26:8a:1d:ca:e1:96:63:
b2:f8:bc:ee:df:6f:2e:f6:a4:6a:f2:de:54:5e:6d:72:52:f2:
73:6f:7f:e3:6a:9f:f1:07:56:2e:35:03:86:94:98:8f:30:5c:
54:11:e8:52:c6:d2:a8:2c:a1:88:aa:31:48:2e:f5:d4:0f:c2:
3b:bf:98:d9:da:18:ef:6c:b2:b6:4e:9c:99:ef:4c:f7:5f:be:
a2:c0:1d:b1:f0:61:8c:36:8a:aa:5a:6f:97:80:6b:7e:f7:a2:
b2:cc:25:c5:a8:40:15:6c:de:2f:9f:54:4d:1d:5b:ca:b6:a1:
78:43:23:24:a8:19:b8:1f:f5:f7:40:4f:c9:e1:ae:8a:de:8a:
93:d8:42:4d:42:a3:8b:1b:23:77:4a:ab:38:6f:3f:b4:be:db:
86:f7:ec:47:0e:1d:ce:61:7f:ef:e5:1c:fc:1b:38:af:8a:1a:
6b:6f:cc:0b:51:ea:26:c4:03:28:2f:8c:b2:d2:fd:80:70:75:
85:e5:c6:58:f9:95:56:5e:a2:dd:d6:5c:6f:ee:1b:b9:26:c1:
39:d7:74:8b:78:a5:73:2e:af:8e:b3:39:88:17:7f:54:b5:4d:
6c:55:bf:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 10:41:14 2026 by rpki-client