Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/a725e2-e715-4fd2-81ec-ea42d6c159f3/1/ZRUuTmwkXAP-zfpIv5E5bL7-168.mft
File: ZRUuTmwkXAP-zfpIv5E5bL7-168.mft (raw, json)
Hash identifier: eGvbufXFgTXzsrR20O6+IotVFYbdMBS3LrAr53N79fc=
Subject key identifier: 74:9C:5D:AC:4D:DC:FC:D1:EF:73:8B:72:7E:6F:C8:D8:74:88:90:3E
Authority key identifier: 65:15:2E:4E:6C:24:5C:03:FE:CD:FA:48:BF:91:39:6C:BE:FE:D7:AF
Certificate issuer: /CN=65152e4e6c245c03fecdfa48bf91396cbefed7af
Certificate serial: 019FA93DB841A84D93F4FD75D41471353E49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZRUuTmwkXAP-zfpIv5E5bL7-168.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/a725e2-e715-4fd2-81ec-ea42d6c159f3/1/ZRUuTmwkXAP-zfpIv5E5bL7-168.mft
Manifest number: 019D
Signing time: Tue 28 Jul 2026 15:00:22 +0000
Manifest this update: Tue 28 Jul 2026 15:00:22 +0000
Manifest next update: Wed 29 Jul 2026 15:00:22 +0000
Files and hashes: 1: ZRUuTmwkXAP-zfpIv5E5bL7-168.crl (hash: 18e8uPFDVHzphFqUMkp1JlSf7A0CqNBFpfBtJPEUC3U=)
2: zNqty2MMMtiYifN34tRpIOVX9sQ.roa (hash: yLB5f8Ek8IZkDyn4YFbsPyCUS3Yue+tSUM0kBMSr3B8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/a725e2-e715-4fd2-81ec-ea42d6c159f3/1/ZRUuTmwkXAP-zfpIv5E5bL7-168.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/a725e2-e715-4fd2-81ec-ea42d6c159f3/1/ZRUuTmwkXAP-zfpIv5E5bL7-168.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZRUuTmwkXAP-zfpIv5E5bL7-168.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3d:b8:41:a8:4d:93:f4:fd:75:d4:14:71:35:3e:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65152e4e6c245c03fecdfa48bf91396cbefed7af
Validity
Not Before: Jul 28 15:00:22 2026 GMT
Not After : Jul 29 15:00:22 2026 GMT
Subject: CN=749c5dac4ddcfcd1ef738b727e6fc8d87488903e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:95:d1:68:d0:14:84:69:6a:9f:f6:e1:6c:bd:
d9:9a:f5:f5:dd:82:ec:9b:fe:c3:10:b8:54:70:bc:
f3:60:b2:de:b7:01:bc:31:70:3f:f6:bd:d1:8b:80:
ff:86:a5:22:be:a3:d5:d8:57:1a:ca:95:bb:55:04:
d5:ce:28:1f:cc:bf:08:b4:1c:35:68:7f:a3:42:ce:
1d:a3:90:8e:b7:6a:05:9a:d5:bf:8b:80:ed:8c:df:
b0:3d:a8:8b:4e:31:bb:ba:d4:c6:00:2c:b5:96:a4:
df:c6:6a:b5:26:89:35:e2:aa:e7:23:43:97:3b:59:
68:ce:e2:36:cf:fd:c4:99:1b:0f:cb:74:3e:e8:e7:
17:e4:56:72:90:e4:ab:99:90:be:22:e2:8d:5e:cd:
a3:f0:74:5f:1d:20:66:a3:56:9d:50:f0:4e:04:56:
5b:86:eb:8b:d1:ec:8b:8b:01:12:3e:c9:ed:7b:82:
69:05:77:99:dc:10:1d:8d:35:bb:d5:ba:51:0b:73:
16:32:37:a9:e1:fa:4a:5c:0e:7b:95:c1:74:fb:aa:
bb:05:fd:65:97:f1:81:76:5e:bf:cd:87:56:82:a5:
4b:29:7c:af:3a:b4:c8:d0:49:26:ff:f8:c8:e1:10:
3f:71:3a:de:6e:5a:43:66:32:64:42:b0:7c:e4:a2:
8d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:9C:5D:AC:4D:DC:FC:D1:EF:73:8B:72:7E:6F:C8:D8:74:88:90:3E
X509v3 Authority Key Identifier:
keyid:65:15:2E:4E:6C:24:5C:03:FE:CD:FA:48:BF:91:39:6C:BE:FE:D7:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRUuTmwkXAP-zfpIv5E5bL7-168.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a725e2-e715-4fd2-81ec-ea42d6c159f3/1/ZRUuTmwkXAP-zfpIv5E5bL7-168.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a725e2-e715-4fd2-81ec-ea42d6c159f3/1/ZRUuTmwkXAP-zfpIv5E5bL7-168.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:78:db:9c:11:39:8c:72:a3:5c:31:f9:33:40:6e:10:bd:69:
d1:05:70:af:3d:e6:03:46:4c:d7:05:6f:94:3b:51:22:0d:76:
43:5e:a1:f9:5a:a7:5d:2a:31:6e:ee:f4:74:5d:8e:9b:11:29:
7b:be:3d:b7:e6:17:99:d2:8e:69:92:41:a0:c7:7a:41:17:ca:
9d:f9:5e:cb:34:3a:58:24:89:d3:4d:f8:fc:12:4d:76:09:52:
e2:bd:8b:a1:be:2e:fa:52:37:a8:36:8f:2c:7b:09:26:d1:c9:
97:11:a9:fa:6e:33:29:fb:ea:4d:54:2a:24:08:11:1b:b9:6e:
5a:5e:94:34:b1:ac:fe:74:fd:4f:2a:29:47:bd:7b:1f:31:21:
ac:57:4c:be:99:de:97:03:f2:f8:3e:24:7c:c8:19:68:9b:d6:
be:d4:e0:73:46:db:0b:32:23:b6:f0:f8:35:9b:eb:a5:47:8e:
7d:7a:ae:f1:aa:dd:fc:47:12:13:fd:f3:a4:d6:a3:ad:09:91:
ce:4f:a2:58:95:bd:5e:99:87:c7:83:97:76:97:8c:e1:84:a4:
1b:4a:7f:2d:0c:f7:fe:37:a0:d9:a8:8b:93:bc:ed:75:de:0e:
44:99:dd:32:33:47:0e:4b:86:2a:63:68:db:bf:f5:0e:69:c3:
cb:12:9f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:51:07 2026 by rpki-client