Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/e9169a-ee06-4e4a-b21e-849417ae634d/1/zfYsvWz36AgiT2z4cl424qllNSw.mft
File: zfYsvWz36AgiT2z4cl424qllNSw.mft (raw, json)
Hash identifier: 8Dr8mdD6xTw5sjr8k/uS7a9zfxMYk0rtyjgZpSi3ks4=
Subject key identifier: 28:ED:CA:4F:BE:8F:D9:B2:0C:8D:05:E1:7D:38:CA:E1:0E:3D:98:26
Authority key identifier: CD:F6:2C:BD:6C:F7:E8:08:22:4F:6C:F8:72:5E:36:E2:A9:65:35:2C
Certificate issuer: /CN=cdf62cbd6cf7e808224f6cf8725e36e2a965352c
Certificate serial: 01A039DDFA2EF12FC33380F5686DD83416A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zfYsvWz36AgiT2z4cl424qllNSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/e9169a-ee06-4e4a-b21e-849417ae634d/1/zfYsvWz36AgiT2z4cl424qllNSw.mft
Manifest number: 0CA7
Signing time: Tue 25 Aug 2026 17:00:43 +0000
Manifest this update: Tue 25 Aug 2026 17:00:43 +0000
Manifest next update: Wed 26 Aug 2026 17:00:43 +0000
Files and hashes: 1: 1HJ0WMLf_ZwpvB2twqCOzVmtV0g.asa (hash: iR78X0mgCniZZCm4mwii2CU/1JD8ljNS0OWlnK+UZQE=)
2: Xp1_bdYXI9U3hQygHMzTkT43K1Q.roa (hash: lsd6lPp/ulgto4+3u4nnsXd9a7lg4D4o9xZaATfNY4Y=)
3: ZPVObgSQAeaiEJWCunUwUTPvT5o.asa (hash: XJQ5ytTnF2RAOuhg27UFX6k5++USz3ZVVC5spCrv3+g=)
4: zfYsvWz36AgiT2z4cl424qllNSw.crl (hash: fmo3Tf+qZ1ObSYvqCtvI02Czcqn1ViCveBRIosYSHfg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/e9169a-ee06-4e4a-b21e-849417ae634d/1/zfYsvWz36AgiT2z4cl424qllNSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/e9169a-ee06-4e4a-b21e-849417ae634d/1/zfYsvWz36AgiT2z4cl424qllNSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/zfYsvWz36AgiT2z4cl424qllNSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 14:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:dd:fa:2e:f1:2f:c3:33:80:f5:68:6d:d8:34:16:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdf62cbd6cf7e808224f6cf8725e36e2a965352c
Validity
Not Before: Aug 25 17:00:43 2026 GMT
Not After : Aug 26 17:00:43 2026 GMT
Subject: CN=28edca4fbe8fd9b20c8d05e17d38cae10e3d9826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:94:58:cb:ed:98:66:48:48:2f:36:06:f8:7b:
c6:68:e8:28:29:fe:8d:fa:38:39:19:cd:50:6b:87:
04:f7:ed:7d:62:48:20:79:89:8f:78:64:9a:5d:ea:
55:6c:3e:90:31:18:60:03:c8:9f:06:93:8a:39:3c:
5d:df:91:ba:aa:1e:09:d9:39:d7:1d:90:a4:57:2f:
d5:0f:7f:9b:db:60:29:5c:91:5a:8e:fd:90:af:c6:
b1:82:fe:eb:8f:f3:b1:52:5c:88:a6:18:f5:2f:90:
fa:0e:0a:4a:22:b5:e5:37:1d:0b:f2:a4:2f:af:eb:
b5:d1:48:e3:f0:68:aa:b0:73:f4:66:e8:43:a4:5f:
7b:16:03:42:2c:a4:3e:67:f1:82:b5:cc:33:c0:f4:
7c:4b:ec:ab:1c:18:b2:f3:45:44:60:82:f1:e5:24:
a9:e5:8e:f6:0d:60:ff:31:ee:e1:f8:60:1f:db:90:
73:ac:6c:4e:e6:ff:03:0e:4e:3a:de:59:ba:64:5b:
54:27:e6:ab:ab:7b:11:49:85:40:4d:eb:10:2a:64:
28:4a:93:77:79:49:19:13:df:c3:8f:7d:3a:19:5e:
7c:bc:8e:3c:a3:bd:fe:f9:44:05:f6:67:44:f3:29:
7a:9e:6c:49:49:0b:a1:86:92:df:f6:92:b0:c9:dc:
56:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:ED:CA:4F:BE:8F:D9:B2:0C:8D:05:E1:7D:38:CA:E1:0E:3D:98:26
X509v3 Authority Key Identifier:
keyid:CD:F6:2C:BD:6C:F7:E8:08:22:4F:6C:F8:72:5E:36:E2:A9:65:35:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfYsvWz36AgiT2z4cl424qllNSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e9169a-ee06-4e4a-b21e-849417ae634d/1/zfYsvWz36AgiT2z4cl424qllNSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e9169a-ee06-4e4a-b21e-849417ae634d/1/zfYsvWz36AgiT2z4cl424qllNSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:1f:8a:ac:1b:6a:55:bd:01:8a:14:29:5c:7f:73:0d:5d:c0:
37:f1:b4:7e:da:d1:7e:f7:43:cf:66:29:ca:cd:6d:fa:43:f9:
94:92:10:e5:33:e9:a8:e6:19:b2:5f:48:8a:9e:33:8e:09:b0:
af:03:3e:e0:e6:8f:1e:19:d9:60:6b:2f:3e:7d:26:0d:7c:0a:
57:01:d2:fc:47:58:24:66:65:2a:f5:3b:d1:e2:e3:53:60:86:
86:7c:aa:da:3a:9a:a8:6d:93:71:89:d8:0d:f1:07:1a:2d:d6:
53:3e:e7:f9:4e:7f:4e:8c:c4:d5:07:da:33:cd:ee:d5:35:f6:
c4:a4:1c:53:2d:a6:e9:dd:00:ee:f5:0f:4d:10:dd:8c:e4:35:
27:14:01:3a:cd:fa:b7:72:8c:8e:eb:c6:ab:a7:75:d4:3e:8c:
60:5d:c2:eb:9f:32:ac:aa:8e:44:95:23:a3:0a:08:d2:3e:28:
ae:ea:33:49:d9:df:bf:66:bc:2e:67:66:cd:0e:0f:9f:82:11:
e1:d3:61:0a:17:b0:7b:8a:34:2e:c4:f6:e0:19:a6:e9:ad:65:
7e:7b:9c:0d:2c:dc:6b:87:e2:00:28:1f:e1:b8:b5:14:ca:65:
6a:f9:5d:b5:02:73:95:b1:4e:e2:77:3a:a7:9b:be:e8:2d:81:
d2:9a:7b:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 23:41:30 2026 by rpki-client