Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.mft
File: Zu8xraxmOFWz3dGTHETPgGTWpus.mft (raw, json)
Hash identifier: RhD1VG5KseSER8hfTEEGWq5zbCKf6FM0s5dbo1UlhG0=
Subject key identifier: 11:88:75:A8:9A:EF:36:B3:DA:BF:F0:B2:7B:31:70:1B:30:58:09:DD
Authority key identifier: 66:EF:31:AD:AC:66:38:55:B3:DD:D1:93:1C:44:CF:80:64:D6:A6:EB
Certificate issuer: /CN=66ef31adac663855b3ddd1931c44cf8064d6a6eb
Certificate serial: 019F37F29FB7B15CD042D1870212E9D32C12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zu8xraxmOFWz3dGTHETPgGTWpus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.mft
Manifest number: 1998
Signing time: Mon 06 Jul 2026 15:01:15 +0000
Manifest this update: Mon 06 Jul 2026 15:01:15 +0000
Manifest next update: Tue 07 Jul 2026 15:01:15 +0000
Files and hashes: 1: Y9ARVG_hAm4nIrCTT5R9mNE2Ai8.roa (hash: MI2P4v9i+kU4F9eDStIUnkN/VYUaWV71u0evfwMIhOU=)
2: Zu8xraxmOFWz3dGTHETPgGTWpus.crl (hash: CNb/YHrIuiYxM73ixpcVv92fIripnhHDDyM5eEg9pWs=)
3: fzcY56XdnFZoFNt0HXida4aSHGU.roa (hash: MqoKni1V8waFiRzOClIF15P78qFKBD2MS62bZfGpfEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zu8xraxmOFWz3dGTHETPgGTWpus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:37:f2:9f:b7:b1:5c:d0:42:d1:87:02:12:e9:d3:2c:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66ef31adac663855b3ddd1931c44cf8064d6a6eb
Validity
Not Before: Jul 6 15:01:15 2026 GMT
Not After : Jul 7 15:01:15 2026 GMT
Subject: CN=118875a89aef36b3dabff0b27b31701b305809dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9f:ef:bd:15:83:05:21:02:3b:36:27:fb:8c:
af:b6:77:fb:0a:bc:e5:f7:fe:c7:8a:80:43:5c:fc:
69:f0:b3:b5:17:fc:30:01:1b:36:23:0b:88:a9:45:
2f:e3:99:04:4c:68:7c:79:b9:31:77:cc:75:c2:ea:
af:26:57:59:92:29:70:44:43:c7:72:7d:ec:be:6d:
f8:5e:db:f0:de:22:f3:f4:6d:1e:61:1d:fa:89:20:
98:e2:35:d7:ec:7e:3d:0b:36:32:22:55:76:3f:1e:
c9:05:da:09:09:47:2f:0e:00:73:39:86:c3:4f:af:
c5:2a:49:25:93:63:71:b8:90:6f:36:4b:70:14:50:
a7:59:8d:2b:65:47:08:7a:10:dd:e8:4d:6d:9e:60:
ed:0a:60:89:34:f3:9d:16:79:3c:e1:8a:6f:5f:a8:
1e:53:07:e4:93:85:6c:70:3e:c9:8a:40:90:c9:de:
60:46:01:49:dd:7c:35:e0:ec:da:ae:68:ab:d5:f5:
86:d4:92:5a:31:9c:c6:3d:f6:8d:a8:1a:8f:56:f8:
50:c8:bb:66:b0:ae:03:60:58:cf:01:43:d4:1b:a7:
8c:3a:8c:46:bf:8c:0e:31:07:d0:d1:10:bb:11:18:
53:4c:a1:1e:a9:db:08:3f:d3:2a:64:7d:b2:f3:76:
22:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:88:75:A8:9A:EF:36:B3:DA:BF:F0:B2:7B:31:70:1B:30:58:09:DD
X509v3 Authority Key Identifier:
keyid:66:EF:31:AD:AC:66:38:55:B3:DD:D1:93:1C:44:CF:80:64:D6:A6:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zu8xraxmOFWz3dGTHETPgGTWpus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:49:36:80:9f:cc:be:e8:5b:f8:8a:21:89:5c:c1:64:cd:f7:
8b:c4:a4:85:8a:69:5b:a5:6a:42:14:86:06:4d:55:dd:81:ec:
43:b9:2a:16:64:76:4a:33:03:2e:e1:ba:f9:01:22:d7:50:5f:
94:72:36:26:f2:97:46:12:c9:05:57:68:1a:d5:2f:31:cb:9b:
bb:53:dc:5f:37:67:ba:33:a4:22:dc:33:79:5b:93:2a:83:7e:
c2:d7:f7:6e:06:10:6c:c3:54:e3:e8:40:d7:79:8a:b3:44:fa:
43:8d:bb:6a:51:c2:a5:df:52:df:bb:79:e8:30:3c:98:11:70:
55:e8:59:91:e0:63:13:7d:83:4f:e2:b4:b7:a5:be:df:91:13:
38:27:ea:27:ef:bd:20:5b:4e:34:d0:e9:15:c5:de:d8:85:92:
c2:f7:8a:cd:b6:9b:8c:27:2a:74:2e:7f:2d:5b:50:3d:c0:f1:
3b:11:40:be:ad:77:a7:6c:10:fc:ce:fa:0d:21:29:34:d4:20:
33:d3:06:40:27:f6:0c:00:19:ac:32:9d:f4:a6:bc:1b:2e:56:
82:50:a4:47:3a:10:8e:d9:89:5e:8c:ab:1f:e6:b3:50:eb:7c:
82:a6:38:b7:64:dd:d5:a7:76:13:55:bd:3c:07:f6:62:0c:ad:
b4:ad:84:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:14:18 2026 by rpki-client