Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/2f36d4-72e1-4046-b73f-ab9eadb1d797/1/rzkvKN7GuMzrfNcOevcdjNyqmgY.mft
File: rzkvKN7GuMzrfNcOevcdjNyqmgY.mft (raw, json)
Hash identifier: KQHF4y15x2M4rUd72b3GHRlDeAAUKUU0+1ii36iRlGU=
Subject key identifier: FF:B2:AB:30:83:3E:95:0E:20:F3:7F:DD:24:FC:C5:D4:A7:F1:93:D7
Authority key identifier: AF:39:2F:28:DE:C6:B8:CC:EB:7C:D7:0E:7A:F7:1D:8C:DC:AA:9A:06
Certificate issuer: /CN=af392f28dec6b8cceb7cd70e7af71d8cdcaa9a06
Certificate serial: 01A003264F62C0F7F409B51B6B2EC6FF5141
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rzkvKN7GuMzrfNcOevcdjNyqmgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/2f36d4-72e1-4046-b73f-ab9eadb1d797/1/rzkvKN7GuMzrfNcOevcdjNyqmgY.mft
Manifest number: 19FF
Signing time: Sat 15 Aug 2026 02:00:37 +0000
Manifest this update: Sat 15 Aug 2026 02:00:37 +0000
Manifest next update: Sun 16 Aug 2026 02:00:37 +0000
Files and hashes: 1: 7qTF0jqmrE5sqWppz2XaId92Nsg.roa (hash: BXslQtBYGdpBVanESXoQgNGnECD/ohyq+njOEg7cP8o=)
2: rzkvKN7GuMzrfNcOevcdjNyqmgY.crl (hash: 4dXqJ0BbiHItOlQfSdruMcFSdoWf89ujekQBNmBxZy0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/2f36d4-72e1-4046-b73f-ab9eadb1d797/1/rzkvKN7GuMzrfNcOevcdjNyqmgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/2f36d4-72e1-4046-b73f-ab9eadb1d797/1/rzkvKN7GuMzrfNcOevcdjNyqmgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rzkvKN7GuMzrfNcOevcdjNyqmgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:03:26:4f:62:c0:f7:f4:09:b5:1b:6b:2e:c6:ff:51:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af392f28dec6b8cceb7cd70e7af71d8cdcaa9a06
Validity
Not Before: Aug 15 02:00:37 2026 GMT
Not After : Aug 16 02:00:37 2026 GMT
Subject: CN=ffb2ab30833e950e20f37fdd24fcc5d4a7f193d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:39:48:f2:61:63:ed:59:fa:4a:7d:49:16:a9:
12:3a:59:1a:cc:b6:3b:ca:50:79:c5:c2:65:f9:02:
73:6e:e4:a4:6a:94:19:88:18:f0:42:9c:d0:45:d7:
29:b0:68:f1:e5:16:51:52:ba:f0:b7:58:d1:24:11:
20:5c:59:b9:14:ec:45:97:38:2b:7e:be:27:26:6f:
7f:88:1e:dd:cc:18:d5:5d:e4:21:b7:00:04:96:03:
87:d0:d9:b2:37:b1:07:7e:f9:42:f4:f1:24:ff:32:
d4:ef:f9:e0:60:81:7a:2a:8c:c0:8c:93:3e:01:84:
95:ff:33:7c:60:2a:04:3e:6a:b3:3f:44:23:9b:c9:
5b:13:22:05:bc:1a:73:08:e3:50:e7:ea:d2:9c:14:
cd:84:f1:82:ee:25:51:1c:ad:26:eb:4b:0b:b7:24:
1f:2f:2d:ef:cc:16:f9:c7:e6:89:59:e6:b2:61:52:
83:ef:1e:b9:21:07:f1:38:e7:31:91:03:07:02:89:
b2:40:05:c9:e4:7e:9c:9e:88:c0:2b:8d:39:31:c7:
99:f8:a8:6b:64:0d:3d:47:59:66:a1:94:27:75:cd:
78:5b:90:09:e7:ca:38:42:64:b3:01:ff:5d:b1:9a:
68:43:6e:bd:62:6b:d7:fd:31:f9:fa:4c:24:7a:ff:
58:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:B2:AB:30:83:3E:95:0E:20:F3:7F:DD:24:FC:C5:D4:A7:F1:93:D7
X509v3 Authority Key Identifier:
keyid:AF:39:2F:28:DE:C6:B8:CC:EB:7C:D7:0E:7A:F7:1D:8C:DC:AA:9A:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rzkvKN7GuMzrfNcOevcdjNyqmgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2f36d4-72e1-4046-b73f-ab9eadb1d797/1/rzkvKN7GuMzrfNcOevcdjNyqmgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2f36d4-72e1-4046-b73f-ab9eadb1d797/1/rzkvKN7GuMzrfNcOevcdjNyqmgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:6e:0b:10:74:dd:e0:95:20:ff:cb:17:55:62:a7:42:25:63:
73:42:a5:53:b4:38:d6:ab:75:2d:9b:31:ca:96:2b:0c:9e:22:
9e:3d:05:9e:35:86:ef:d2:a6:2f:23:5c:fc:63:70:8b:aa:e3:
58:c4:5b:24:a7:f0:31:f4:65:0b:50:06:6a:8b:70:3d:ff:de:
90:d3:37:84:0b:2c:0a:f4:b7:87:99:ab:68:9d:4c:0a:f1:df:
f1:bd:2f:04:31:9a:f3:f3:2b:cb:00:4f:92:a6:75:2a:2f:1e:
e3:c2:5d:76:7f:41:44:d4:ce:14:d5:07:ed:0f:dc:47:40:85:
ee:30:61:ad:dd:32:fe:71:1e:fc:ca:74:37:64:9c:a0:49:86:
0c:0b:cd:5d:90:13:d4:66:34:54:e8:24:04:08:cb:0d:07:a8:
34:e5:2e:84:3d:ee:0b:31:43:a4:24:55:86:1d:3f:d6:f3:14:
ca:f9:54:72:58:d1:a4:5e:c3:43:bd:c8:b7:a3:aa:d9:20:eb:
63:3c:77:e8:16:85:fa:d2:27:f7:ff:c7:16:a6:0e:9f:f2:97:
27:52:52:75:08:bc:32:34:64:ff:fd:cb:5d:82:e8:fd:ad:b8:
d4:cf:0e:53:a7:0f:07:80:58:eb:78:c1:08:ea:18:13:c1:d9:
63:b8:44:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 06:43:20 2026 by rpki-client