Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/ZK4vfE0s7wtpdCnWE69QhvyZiow.mft
File: ZK4vfE0s7wtpdCnWE69QhvyZiow.mft (raw, json)
Hash identifier: NRsTapJs1nIgqBwvNeEkawgSkzOcCXMIvqdzvjK0wVw=
Subject key identifier: C9:47:3E:5C:79:3E:4F:EF:8E:52:3A:27:31:F9:C5:CB:32:52:BA:E8
Authority key identifier: 64:AE:2F:7C:4D:2C:EF:0B:69:74:29:D6:13:AF:50:86:FC:99:8A:8C
Certificate issuer: /CN=64ae2f7c4d2cef0b697429d613af5086fc998a8c
Certificate serial: 01A0016EC8EBA37157E605D753B7BA17DFF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZK4vfE0s7wtpdCnWE69QhvyZiow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/ZK4vfE0s7wtpdCnWE69QhvyZiow.mft
Manifest number: 7B
Signing time: Fri 14 Aug 2026 18:00:32 +0000
Manifest this update: Fri 14 Aug 2026 18:00:32 +0000
Manifest next update: Sat 15 Aug 2026 18:00:32 +0000
Files and hashes: 1: ZK4vfE0s7wtpdCnWE69QhvyZiow.crl (hash: AEJSLHneXiXv3aiRecs0WfESxU7p1CUF1a/keYoIXwM=)
2: smNDWO9JONiEw5ekOfJ8bQL-dDw.roa (hash: kjuqNVRF/nsDMFG+UvPVvMjPtqlHmLKiEpVo8tq84jY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/ZK4vfE0s7wtpdCnWE69QhvyZiow.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/ZK4vfE0s7wtpdCnWE69QhvyZiow.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZK4vfE0s7wtpdCnWE69QhvyZiow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:6e:c8:eb:a3:71:57:e6:05:d7:53:b7:ba:17:df:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64ae2f7c4d2cef0b697429d613af5086fc998a8c
Validity
Not Before: Aug 14 18:00:32 2026 GMT
Not After : Aug 15 18:00:32 2026 GMT
Subject: CN=c9473e5c793e4fef8e523a2731f9c5cb3252bae8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c5:76:69:b8:e0:c0:f6:87:f5:13:68:c7:8e:
92:f6:1b:18:08:3b:49:ea:81:72:03:36:a4:f4:c9:
bd:20:8f:35:f9:98:c1:4c:f1:c8:92:19:3c:38:4f:
28:70:af:7a:98:d5:9f:18:b3:b2:2d:8a:3d:63:1b:
46:a3:b4:98:1d:b6:c4:fb:f8:5f:90:78:c8:0d:bc:
e1:ad:de:94:b6:7e:00:9a:79:06:cb:28:45:cf:ff:
a5:2f:ba:c7:99:8d:65:2c:20:8f:7b:e2:3f:21:35:
09:f5:3a:e3:9b:ec:a0:6d:97:87:74:0f:e5:08:03:
54:76:0c:87:ef:9c:22:67:ce:09:57:ff:3d:b1:01:
1d:5f:2d:cf:5a:af:e5:66:82:16:af:8d:c6:93:0a:
eb:4f:23:3e:5f:99:51:3e:e9:b4:70:62:3a:e4:fe:
39:5c:64:a8:21:11:f7:2f:b8:f4:96:49:68:3b:cc:
d6:0d:7f:be:18:ce:4a:80:74:3a:fd:fc:3f:67:ed:
b3:1a:57:7d:3f:6e:c2:a5:33:06:12:f0:39:95:08:
10:19:f6:90:df:43:74:72:e9:89:80:3b:d1:89:69:
72:50:16:ec:1c:6b:14:34:2d:eb:0e:ac:fd:db:20:
14:08:08:05:86:e4:b8:50:a5:25:bc:26:71:13:18:
fc:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:47:3E:5C:79:3E:4F:EF:8E:52:3A:27:31:F9:C5:CB:32:52:BA:E8
X509v3 Authority Key Identifier:
keyid:64:AE:2F:7C:4D:2C:EF:0B:69:74:29:D6:13:AF:50:86:FC:99:8A:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZK4vfE0s7wtpdCnWE69QhvyZiow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/ZK4vfE0s7wtpdCnWE69QhvyZiow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/ZK4vfE0s7wtpdCnWE69QhvyZiow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:c9:05:c5:34:06:20:ce:cc:e7:17:a6:4a:0a:7b:5a:81:77:
72:8e:08:8d:04:a7:ab:8a:d0:30:c4:8c:e3:13:dd:64:63:66:
04:03:48:ff:7c:21:d7:e0:00:17:8d:8c:59:7b:e1:b0:40:13:
50:8e:15:c0:d2:83:c7:68:89:26:e3:3e:6e:99:ed:97:ee:8d:
bb:fa:d6:64:95:89:a3:3a:34:73:47:87:6f:49:6b:70:c3:51:
7d:90:4e:e0:df:4b:e2:fc:99:89:c1:a7:c6:a3:a9:1e:13:62:
bd:80:ff:5a:e5:28:38:cf:98:fd:a7:52:70:d4:eb:69:6f:0a:
3e:0a:f8:7e:2e:cc:c5:6c:64:44:43:10:37:b8:09:5d:5c:81:
93:8d:2a:2b:2b:f9:fc:cc:64:7c:00:52:4a:a1:0e:29:e0:b5:
03:46:f4:b4:fe:ea:6d:c8:5f:22:c2:9b:b7:67:dd:04:8d:49:
6f:cf:fc:bc:36:57:79:e2:54:db:97:8a:6d:82:41:3e:96:17:
f5:ce:a6:b4:10:0d:23:ae:e6:33:f0:ac:bf:e4:09:90:9d:b2:
a3:28:dc:13:7e:c9:89:89:dd:f9:9e:d3:78:2d:71:01:cd:73:
d6:65:c1:6b:81:4b:fb:0b:56:f6:3c:3d:2b:9a:fe:be:da:07:
fd:c7:06:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:26:12 2026 by rpki-client