Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.mft
File: ZCeUwtLPoFRji6lQpfZo6HYBQS0.mft (raw, json)
Hash identifier: s7X1jykGQ+aVKbgkigAZs5G7OTisyOS+ai5DejqMTCQ=
Subject key identifier: 49:74:FE:1C:89:C0:27:9D:89:45:44:06:36:38:97:FB:84:0C:00:17
Authority key identifier: 64:27:94:C2:D2:CF:A0:54:63:8B:A9:50:A5:F6:68:E8:76:01:41:2D
Certificate issuer: /CN=642794c2d2cfa054638ba950a5f668e87601412d
Certificate serial: 01A005151828B33FC18D92723C1EBED0BF4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZCeUwtLPoFRji6lQpfZo6HYBQS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.mft
Manifest number: 1A04
Signing time: Sat 15 Aug 2026 11:01:03 +0000
Manifest this update: Sat 15 Aug 2026 11:01:03 +0000
Manifest next update: Sun 16 Aug 2026 11:01:03 +0000
Files and hashes: 1: 8r944bJqG_LM17rTDE1uGAYMcO4.roa (hash: US/6Z/+ktv9Mac1FJpsH2XS8YNAZ76aWDA9Ebr1o3lU=)
2: BcVatgINhehxpYUrBXABJ41nAt0.roa (hash: GcuNKsGTXhiIzKjZT1cDQ3vbaLRIxIZoGDWXVty3fns=)
3: YPjYJdppvJ-xVHyJ3v-XHJpuM2M.roa (hash: zURKZ3NvzQl2kZFa7NPOhYYc5nLxhkqpMkhOysGx3l0=)
4: ZCeUwtLPoFRji6lQpfZo6HYBQS0.crl (hash: f6ecGNBFOfgvMJKGTQ5jD1exec8MdsD0Y+T4yphCQDY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZCeUwtLPoFRji6lQpfZo6HYBQS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 03:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:05:15:18:28:b3:3f:c1:8d:92:72:3c:1e:be:d0:bf:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=642794c2d2cfa054638ba950a5f668e87601412d
Validity
Not Before: Aug 15 11:01:03 2026 GMT
Not After : Aug 16 11:01:03 2026 GMT
Subject: CN=4974fe1c89c0279d89454406363897fb840c0017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c0:98:c8:66:4e:49:68:db:9f:a3:ff:b3:34:
c1:4c:20:74:43:05:20:7f:a9:a7:46:fa:f5:60:ee:
64:70:64:8d:91:8e:a8:a0:de:aa:0d:25:28:8d:b9:
f0:92:ad:2d:03:9f:f1:67:ce:16:5d:95:1e:84:a3:
b4:35:e9:35:9f:cb:3a:df:b2:1b:7d:f7:15:01:5c:
08:2d:4b:68:34:5d:cf:fc:d8:7e:71:0d:f9:fb:30:
7d:6f:d7:51:28:e3:b8:30:6d:44:d0:ea:38:49:66:
ac:00:3a:34:44:8d:b1:e2:85:19:9c:e2:7f:37:6b:
1d:5e:0f:d7:5d:b1:64:f1:dd:b7:9c:6f:33:8e:4c:
97:58:3c:e7:2f:3a:1a:2f:b2:2a:25:fa:e5:3c:98:
33:7b:bb:6d:a1:8c:77:13:69:03:a8:74:53:ff:8a:
ec:80:13:b4:0f:82:8f:30:94:c9:7a:d1:fb:66:75:
26:e8:64:73:8a:7a:cb:be:16:e7:f4:12:28:04:b8:
72:92:cf:b6:74:fd:20:07:17:38:f2:32:e3:af:08:
14:79:13:cd:84:78:23:69:37:e0:c4:a9:13:95:f2:
a7:7f:28:de:f9:47:cf:4d:28:ce:b7:d0:48:c6:60:
ec:57:5c:9e:2a:91:88:0f:92:6b:ae:8c:50:d7:06:
e1:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:74:FE:1C:89:C0:27:9D:89:45:44:06:36:38:97:FB:84:0C:00:17
X509v3 Authority Key Identifier:
keyid:64:27:94:C2:D2:CF:A0:54:63:8B:A9:50:A5:F6:68:E8:76:01:41:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCeUwtLPoFRji6lQpfZo6HYBQS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:c9:6e:7a:d2:98:94:d3:29:22:32:40:f0:da:3a:f5:84:6f:
5e:b9:62:bc:07:4c:a5:40:43:94:90:8e:be:b7:9b:e0:ab:78:
d4:20:17:52:43:1c:bd:67:8f:65:97:ee:c1:3b:51:60:81:9c:
29:f6:8a:c0:bd:54:47:08:33:fc:d3:6e:c8:b5:54:79:4e:2e:
da:23:56:2c:f1:35:3b:81:72:cc:10:0d:17:30:6f:a9:5d:0d:
5c:dc:57:a9:e1:97:a7:8e:d2:c7:58:0c:25:d7:47:67:b5:8d:
71:6a:56:71:c2:58:a5:1f:18:be:ad:0b:6f:90:23:b5:7a:52:
71:0f:36:c6:d8:f5:6a:3d:6c:85:cf:6a:b9:b1:b9:63:2a:99:
99:5c:01:11:59:a8:9e:10:21:9e:ef:06:98:e9:06:31:1b:17:
23:b4:58:a4:6b:e1:54:67:7e:5f:92:9c:e0:ed:af:92:48:85:
17:60:20:0c:8d:1a:f9:0e:7b:e7:b5:31:34:da:40:d2:23:68:
78:b0:b0:87:21:4d:ed:ba:f7:c8:e6:16:5f:31:49:65:2b:0c:
e0:66:01:f3:92:58:21:45:b9:f9:49:39:96:d9:1b:de:0f:44:
96:14:45:8a:4b:e9:42:8f:20:ac:dc:1b:f9:9f:02:c5:0d:f7:
d9:b3:e6:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 12:53:19 2026 by rpki-client