Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft
File: Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft (raw, json)
Hash identifier: t5cBnXOgH+9qKod8kSD5myjkVfKHq/k2KUmlrT6MuYc=
Subject key identifier: 64:92:DC:D1:A0:51:DA:A5:E5:61:45:70:5F:92:BB:9F:C4:7A:17:1F
Authority key identifier: 66:5E:17:C0:8A:CD:C7:7E:94:4B:28:39:50:8F:1F:D7:11:E8:E9:7B
Certificate issuer: /CN=665e17c08acdc77e944b2839508f1fd711e8e97b
Certificate serial: 019F81F9743030A4B689B1963B70EE2F40F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zl4XwIrNx36USyg5UI8f1xHo6Xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft
Manifest number: 095B
Signing time: Tue 21 Jul 2026 00:00:36 +0000
Manifest this update: Tue 21 Jul 2026 00:00:36 +0000
Manifest next update: Wed 22 Jul 2026 00:00:36 +0000
Files and hashes: 1: C_VRFP2HIVQ92IBRqKDUpWFoIEw.roa (hash: vn7JZEI6f0C3P1aOSgIzdjUGS6glebz8hQYfRM3UhMg=)
2: IAnS6bEzch3TIofLALz1ygB0iyo.roa (hash: lyXUvYyQfJt4aH/SJqViQQv03gKvKKB5vsWtq0xG3Ro=)
3: Zl4XwIrNx36USyg5UI8f1xHo6Xs.crl (hash: V/Si5wyJ9yb7a4cACPc7ouOk8MFdJwNB/P4GfcHzCqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zl4XwIrNx36USyg5UI8f1xHo6Xs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 00:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:81:f9:74:30:30:a4:b6:89:b1:96:3b:70:ee:2f:40:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=665e17c08acdc77e944b2839508f1fd711e8e97b
Validity
Not Before: Jul 21 00:00:36 2026 GMT
Not After : Jul 22 00:00:36 2026 GMT
Subject: CN=6492dcd1a051daa5e56145705f92bb9fc47a171f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:39:54:25:dd:75:96:19:ab:1d:bf:b7:9f:d5:
3f:54:fe:4e:55:60:6a:fb:73:e1:cc:8e:8a:16:7f:
0c:c3:5c:bd:42:9a:65:f4:6d:57:ec:c4:48:b7:43:
44:da:f6:50:13:5b:a0:f9:c0:56:a2:7f:62:5b:f2:
84:ce:bb:62:40:8a:af:53:9f:b0:4c:88:b3:51:7a:
76:fc:b6:91:06:0b:fa:57:90:fa:cf:c8:c2:b5:95:
50:e1:18:39:9f:10:46:98:a5:4e:b6:f3:53:bd:d3:
e9:b4:e8:fc:40:59:7c:dc:11:0e:a5:2e:fd:68:1a:
54:31:33:81:cf:5f:af:e8:67:a1:eb:08:c7:e8:ed:
30:23:b2:59:3f:e1:59:85:7d:ee:6c:8d:b4:e7:b3:
62:39:94:35:6a:64:2e:46:bd:c4:53:80:fd:8f:50:
ca:73:86:26:4a:fb:13:df:83:3e:72:14:f1:0f:fd:
5e:c3:de:65:51:a5:40:43:76:3e:0d:75:7b:7b:66:
22:ad:8d:cb:bb:05:9e:52:c4:66:d2:ba:3f:ca:3f:
22:cc:60:86:7e:c0:53:09:86:dd:63:d2:41:b9:ad:
94:4d:01:fc:64:3e:32:dc:e1:48:5a:84:57:46:ea:
50:62:57:2e:23:8c:f1:75:1e:87:f0:c7:36:ab:2b:
e4:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:92:DC:D1:A0:51:DA:A5:E5:61:45:70:5F:92:BB:9F:C4:7A:17:1F
X509v3 Authority Key Identifier:
keyid:66:5E:17:C0:8A:CD:C7:7E:94:4B:28:39:50:8F:1F:D7:11:E8:E9:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zl4XwIrNx36USyg5UI8f1xHo6Xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:3f:bb:f5:8d:0f:87:4b:84:34:a8:78:08:40:43:43:a9:f4:
c9:ee:61:c5:70:77:5d:b9:42:84:4b:6d:8e:be:44:67:df:71:
41:f5:37:d9:a7:55:12:6d:0a:a5:92:38:be:df:7c:4f:b9:d1:
56:aa:33:84:c7:d7:12:17:c4:14:04:a8:a5:53:60:63:68:74:
65:73:d5:a2:5c:98:2f:fc:f1:5d:63:a4:d7:e7:d1:fd:14:4b:
86:4e:39:44:86:c0:bc:6b:92:b5:85:72:81:f0:79:14:52:c7:
5f:9a:70:49:9e:8c:57:d7:52:aa:98:44:0c:a7:37:6f:da:f5:
47:a0:96:3c:51:bf:9e:03:ed:f1:22:41:98:da:b4:14:1f:d4:
ec:64:7f:84:5e:0d:b0:f2:02:8f:ae:a8:67:f1:cc:1d:ce:02:
d4:1a:c8:7d:58:c4:0e:37:1c:4a:74:3e:2b:fe:d5:30:e5:30:
3c:38:47:3f:5b:9c:b7:59:d0:f4:ab:83:4d:c6:85:54:f0:4a:
e6:96:d3:8b:e6:02:eb:5b:16:e5:14:10:91:d2:de:c0:9b:06:
fc:3b:0f:1e:41:a4:67:ff:c0:30:ab:54:e3:40:32:6e:cd:17:
af:45:fe:b6:54:f3:c3:0c:16:f7:1c:dc:c6:59:0d:e3:09:d4:
fd:0e:ba:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 09:50:55 2026 by rpki-client