Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.mft
File: ZJn3HhXA84zrolfTAwTtRL6ofFA.mft (raw, json)
Hash identifier: vCscT80fMd2o9EVe5ez0sg8tmPwzeATJUQxtfXQ4NVg=
Subject key identifier: DC:55:2C:CE:CA:94:88:6C:2A:81:17:49:68:8E:2E:D2:2E:6E:6C:6D
Authority key identifier: 64:99:F7:1E:15:C0:F3:8C:EB:A2:57:D3:03:04:ED:44:BE:A8:7C:50
Certificate issuer: /CN=6499f71e15c0f38ceba257d30304ed44bea87c50
Certificate serial: 019FAD1AE5A852FCDAFB8239A0D37B0249AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZJn3HhXA84zrolfTAwTtRL6ofFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.mft
Manifest number: 19D3
Signing time: Wed 29 Jul 2026 09:00:48 +0000
Manifest this update: Wed 29 Jul 2026 09:00:48 +0000
Manifest next update: Thu 30 Jul 2026 09:00:48 +0000
Files and hashes: 1: ZJn3HhXA84zrolfTAwTtRL6ofFA.crl (hash: CxswfnJs+vjXaWrrlOAYWZdMauPsxrs85Ty0T28Bk2g=)
2: jq3mq-50R-JOu-sxSGPaEm55e08.roa (hash: taGtXrf0l3O9eeA97Wyzm9CoWyPxNXpqgCP99+lV8Hk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZJn3HhXA84zrolfTAwTtRL6ofFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:1a:e5:a8:52:fc:da:fb:82:39:a0:d3:7b:02:49:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6499f71e15c0f38ceba257d30304ed44bea87c50
Validity
Not Before: Jul 29 09:00:48 2026 GMT
Not After : Jul 30 09:00:48 2026 GMT
Subject: CN=dc552cceca94886c2a811749688e2ed22e6e6c6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f2:2e:89:ad:fa:b9:b4:a9:4e:59:f2:47:13:
0a:e1:96:f7:9f:48:c1:06:3e:a9:1b:1c:b0:66:a3:
69:78:d0:5a:5a:81:98:94:49:43:0a:d7:8f:80:37:
cf:97:c8:32:c7:d7:76:10:99:7a:83:00:8a:ac:d7:
e9:fc:42:69:97:c3:64:50:d5:76:c9:b2:e4:4e:83:
d4:d1:f7:3a:ff:67:a5:d7:29:8c:72:9a:a9:d1:e2:
e4:4c:ec:ca:e1:8f:53:d2:63:eb:28:0a:3e:09:24:
c7:ed:b0:9e:b0:91:fe:38:86:60:3f:d4:09:26:96:
9e:37:fa:be:90:b9:d8:db:06:6f:d4:a1:06:6e:0a:
4a:83:8d:15:44:54:74:fb:41:63:93:1e:56:92:59:
7e:24:59:36:95:7a:de:2b:4d:80:26:11:92:56:b9:
e4:ce:09:8f:4d:f4:ab:b0:0f:3a:08:f9:91:90:4f:
f5:a0:b7:dd:ae:2f:a8:0c:0e:8d:ee:f3:d5:a8:d2:
1b:2a:4f:9b:56:15:79:1d:1b:4e:6d:a4:e0:c1:dc:
03:7d:8e:da:c8:04:5c:99:ef:25:e0:a3:76:25:13:
c5:09:64:bb:e8:af:a5:b1:9c:3b:af:6e:b9:77:3a:
b1:18:30:1b:2b:57:ca:0d:e7:5c:f3:72:2b:a9:cc:
04:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:55:2C:CE:CA:94:88:6C:2A:81:17:49:68:8E:2E:D2:2E:6E:6C:6D
X509v3 Authority Key Identifier:
keyid:64:99:F7:1E:15:C0:F3:8C:EB:A2:57:D3:03:04:ED:44:BE:A8:7C:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZJn3HhXA84zrolfTAwTtRL6ofFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:c3:ee:59:a2:7a:0b:26:7f:4d:68:72:bf:86:f2:97:9e:62:
72:2c:43:91:0b:8a:6e:7f:bd:93:73:ff:45:ce:95:ee:90:99:
24:38:62:e9:22:88:1b:73:39:ba:bd:05:2e:a8:21:e6:46:a6:
ab:fe:c9:95:0a:e7:07:cd:c8:63:68:52:74:6b:12:db:38:44:
28:64:b9:c5:99:e0:bf:06:1e:7b:42:00:30:f4:98:7b:9d:ff:
c8:3a:70:49:0b:9b:85:12:80:38:7f:88:6b:c8:09:65:cc:c4:
0c:fc:97:cb:b5:c5:58:81:a9:79:61:85:46:08:19:29:57:fc:
a9:26:94:27:f5:3c:00:ff:eb:8a:2f:83:fe:43:ab:ad:6c:25:
63:67:af:54:e5:09:04:72:03:e7:2d:bc:06:29:2a:f5:f9:02:
ec:0a:47:b1:ff:47:90:ff:15:24:74:d6:af:25:e7:e9:ce:19:
31:15:44:57:13:55:55:20:d6:41:35:1c:5b:e5:98:4b:2f:10:
6f:c3:7d:f8:13:b0:cd:e9:7b:ce:76:ce:1a:5a:a2:26:85:77:
8d:75:96:a7:da:35:36:c7:ef:c1:a4:6b:ea:3d:80:d6:af:87:
35:65:87:4c:38:13:d0:a0:a6:96:d1:ea:bc:ee:55:42:e5:fe:
8a:65:ea:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:54:19 2026 by rpki-client