Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.mft
File: zRJC5sfr2Coj-hoI85br5as0z2s.mft (raw, json)
Hash identifier: 58E8vFUho7poNf+9526VDvGBtLAp0d5jK8w0KiGSsTY=
Subject key identifier: 5A:30:0F:65:5C:DC:75:36:C0:DB:1B:2A:64:12:D8:E2:92:2D:95:0A
Authority key identifier: CD:12:42:E6:C7:EB:D8:2A:23:FA:1A:08:F3:96:EB:E5:AB:34:CF:6B
Certificate issuer: /CN=cd1242e6c7ebd82a23fa1a08f396ebe5ab34cf6b
Certificate serial: 019FA0E06BA7722239DEB3174E4A3E0F8982
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRJC5sfr2Coj-hoI85br5as0z2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.mft
Manifest number: 19CE
Signing time: Mon 27 Jul 2026 00:01:29 +0000
Manifest this update: Mon 27 Jul 2026 00:01:29 +0000
Manifest next update: Tue 28 Jul 2026 00:01:29 +0000
Files and hashes: 1: nOWsqCuFuUl88d8fe68oh7ATL8Y.roa (hash: 3ZcPCRJToIBazA6ZM2eZ5k1Cl21KURsg9GhtHBDZCsw=)
2: vyrrFLAQmM4kpL-C4kzXL9B0pEk.roa (hash: uDR2ErZozryJ4og8nKltQlCSGLY9GDhP6CrAdfmEEk8=)
3: zRJC5sfr2Coj-hoI85br5as0z2s.crl (hash: rF+zYGq7dJ9HolUgx2d4s+LEIyf20OqsQv4tlu968x0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/zRJC5sfr2Coj-hoI85br5as0z2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:e0:6b:a7:72:22:39:de:b3:17:4e:4a:3e:0f:89:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd1242e6c7ebd82a23fa1a08f396ebe5ab34cf6b
Validity
Not Before: Jul 27 00:01:29 2026 GMT
Not After : Jul 28 00:01:29 2026 GMT
Subject: CN=5a300f655cdc7536c0db1b2a6412d8e2922d950a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b9:76:b5:07:b6:86:00:a7:92:e4:b9:a6:78:
ed:74:d1:8b:2e:73:e9:0e:c2:28:24:52:a2:1f:77:
16:4a:85:72:8a:9b:3a:ba:09:24:e4:8c:db:94:e1:
5b:c0:39:62:a4:05:07:f2:ac:35:77:9f:60:65:52:
09:f9:87:ec:54:71:15:cf:44:e6:39:77:0e:61:9a:
21:4f:1c:01:f5:0d:54:45:da:0c:b5:e2:7e:21:ac:
4e:15:b8:51:d7:f7:84:ba:5c:84:ff:ce:ba:b5:11:
4d:e9:23:6a:1f:30:7a:54:43:f8:ac:4e:b6:02:bf:
ce:ae:74:05:08:21:f2:1a:98:79:05:4c:9d:b5:42:
fa:96:23:50:77:e8:cd:7c:1f:d0:be:c8:d1:dd:78:
04:3c:a4:84:8e:38:87:63:90:00:70:08:e7:2d:a8:
c5:0c:a1:aa:de:0d:8c:13:1f:a6:bf:24:ec:61:c4:
35:85:99:1c:8d:7f:26:68:75:28:76:b2:1b:7a:f3:
43:b6:6b:65:2a:0d:63:47:4e:01:79:77:7b:0d:81:
6f:4e:aa:a8:aa:1b:e4:f5:6d:29:f8:f0:4e:09:51:
da:9c:9d:7b:87:be:32:b6:55:bc:2b:83:7f:bc:c3:
26:2d:18:10:f6:02:44:dc:8f:63:76:cc:d4:d9:e4:
4e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:30:0F:65:5C:DC:75:36:C0:DB:1B:2A:64:12:D8:E2:92:2D:95:0A
X509v3 Authority Key Identifier:
keyid:CD:12:42:E6:C7:EB:D8:2A:23:FA:1A:08:F3:96:EB:E5:AB:34:CF:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRJC5sfr2Coj-hoI85br5as0z2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:ab:69:45:89:b5:b8:3c:3e:cf:01:03:4d:23:5e:46:3d:de:
e5:26:20:54:87:07:08:54:5b:88:56:88:ec:60:45:7a:01:ac:
92:ec:eb:4a:0d:52:d3:f1:0d:45:9a:2e:74:0f:d3:6c:2d:54:
4d:ec:74:83:8e:87:a3:f0:d1:04:8d:db:00:9d:e6:7d:7e:83:
1f:d1:3d:f0:26:40:9d:d4:aa:ce:b1:73:6d:b6:3f:55:dd:21:
bc:51:7e:8a:78:92:16:2f:b6:d4:74:7f:1e:00:4e:c9:1c:11:
18:e6:31:b2:7d:e6:3f:b6:87:70:1c:3b:21:bf:0b:04:f4:7a:
cc:5a:60:2f:a4:fb:2a:2e:19:5b:ae:9a:9c:c3:1b:a6:13:62:
45:4f:55:dc:2a:3e:16:01:ed:db:05:50:f9:6c:ee:e3:f6:67:
e0:9c:50:51:01:3b:0d:34:96:4f:f0:20:5d:b2:57:a0:13:14:
df:1c:e9:a6:0f:af:a1:84:b3:35:40:c3:c2:78:f9:77:23:c9:
74:45:23:69:cf:12:c4:8b:68:32:91:e6:7e:17:9b:38:8f:d7:
bb:e0:fb:7a:ca:a3:ce:6d:e4:ba:d7:b5:60:9e:f6:81:2d:69:
56:48:c0:be:6d:34:a7:9d:22:e7:fa:18:52:fd:a1:3a:b5:b3:
d4:49:da:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 06:16:50 2026 by rpki-client