Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft
File: ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft (raw, json)
Hash identifier: XKIlm2fVTjw6icWy+PGkEj1KEwqzKBL2HvEa0kZPM6c=
Subject key identifier: D9:90:23:C9:82:1A:D4:E0:5C:70:20:52:0E:C6:58:33:CE:3D:41:D2
Authority key identifier: 64:FF:B3:09:C2:89:AC:FF:C1:BE:34:A6:F0:B6:67:5C:00:17:13:EA
Certificate issuer: /CN=64ffb309c289acffc1be34a6f0b6675c001713ea
Certificate serial: 019F9DA7E122306D5FA80C2C5D0D73FEFCAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft
Manifest number: 0E84
Signing time: Sun 26 Jul 2026 09:00:52 +0000
Manifest this update: Sun 26 Jul 2026 09:00:52 +0000
Manifest next update: Mon 27 Jul 2026 09:00:52 +0000
Files and hashes: 1: 3wE9z3o-LZC9L1Wi744_KuJH-nA.roa (hash: vmvu4StBrIILT2zOsTXLqhGSv13Lo4k+H588mDsH8cM=)
2: ZP-zCcKJrP_BvjSm8LZnXAAXE-o.crl (hash: RQ+zIdncs6de5k9dfK8+lCSsqBk37uA0xA0aqE1FqcU=)
3: amULFHSQIT1lD63zvSrNJGtGM-I.roa (hash: UX9F+FQcAi88JV/0o8okdIg01PgokJoY/+NJIGfsY+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 09:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9d:a7:e1:22:30:6d:5f:a8:0c:2c:5d:0d:73:fe:fc:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64ffb309c289acffc1be34a6f0b6675c001713ea
Validity
Not Before: Jul 26 09:00:52 2026 GMT
Not After : Jul 27 09:00:52 2026 GMT
Subject: CN=d99023c9821ad4e05c7020520ec65833ce3d41d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a8:03:80:71:8e:e1:67:44:05:3e:cc:50:95:
ae:b6:95:57:34:ff:41:cc:d8:ef:6b:94:ce:38:02:
51:08:2b:a5:b9:0a:18:18:fe:0d:9e:2f:40:4d:1c:
56:67:56:21:94:88:01:3c:11:2c:c5:f6:70:7a:91:
50:b0:78:63:ff:bb:da:58:df:75:96:66:14:aa:d0:
fd:a6:46:f1:8a:7b:54:25:b8:6c:37:ce:8b:e0:bf:
ac:0c:23:9a:31:01:d5:72:4e:62:44:11:fd:8c:d5:
b6:c7:73:15:b1:cb:43:33:80:a5:39:21:d2:5e:07:
ec:73:a7:ef:1d:98:fc:a8:7a:aa:26:d4:50:f2:51:
8f:ce:41:5d:2c:a9:fa:4a:29:a9:99:e8:8e:f0:c3:
f7:97:fb:c9:f5:69:29:3e:24:69:ee:7a:06:aa:f3:
06:f7:37:f3:b1:ce:c9:e6:18:71:40:46:bc:66:86:
1a:d1:cb:6c:fc:de:b8:a9:5b:b2:e0:75:35:06:a7:
86:89:bc:59:06:32:0d:c2:24:ab:e4:83:13:7d:e9:
54:10:fc:4b:24:2b:a4:af:f8:94:a0:0c:d1:16:3b:
dc:aa:b3:fc:38:74:7c:cf:00:51:5a:cb:98:50:47:
35:a8:96:83:53:de:1e:fb:7e:08:0a:5c:18:a8:34:
4f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:90:23:C9:82:1A:D4:E0:5C:70:20:52:0E:C6:58:33:CE:3D:41:D2
X509v3 Authority Key Identifier:
keyid:64:FF:B3:09:C2:89:AC:FF:C1:BE:34:A6:F0:B6:67:5C:00:17:13:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:a2:5a:2d:d5:2b:4d:53:98:a4:13:28:79:86:80:60:0f:db:
f8:73:35:ac:5e:40:a6:00:bb:bf:ad:9c:4b:57:57:21:a5:10:
32:b7:15:49:f4:11:0b:11:ff:cd:35:be:aa:c0:d2:a0:5a:dd:
61:1d:b6:fd:1c:47:06:18:ab:c9:0f:bf:78:8f:2e:d6:07:4c:
08:2d:39:36:0c:b3:12:48:83:de:89:8f:8b:5b:01:8b:cb:ae:
11:54:19:ee:37:e1:ff:df:99:36:d7:55:4a:96:15:6c:99:9e:
e2:44:06:d0:30:56:af:fb:6d:a3:68:68:2f:49:b8:a4:90:c0:
20:78:d5:7a:31:fe:04:86:e6:6f:7e:1c:c4:e7:cc:8f:b8:5c:
2b:52:e4:e0:c6:5e:5a:46:38:61:82:cc:37:5c:61:79:bb:20:
16:84:2b:01:d0:c0:d9:bf:ed:b8:ad:ae:5d:1a:b1:a6:a0:08:
e4:3a:12:9e:02:c7:44:b2:7e:51:75:e1:ef:7e:1a:71:4d:02:
23:a9:6c:81:48:7b:b1:13:ab:03:c4:89:0b:2c:89:ea:61:81:
7c:09:c4:71:67:7d:4f:1d:de:6f:92:21:f0:be:12:03:a3:c1:
e9:88:e6:ae:59:4c:0a:96:0d:3f:03:0a:60:34:2b:b6:93:df:
c2:af:2d:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 15:52:58 2026 by rpki-client