Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.mft
File: zNNXkIMM50aalMWbLizLv1420T8.mft (raw, json)
Hash identifier: 9pixR4GJ5hHkbyvlA41yGpKJBjlco9DBXUs9iiO9yec=
Subject key identifier: 83:DD:50:0C:5E:AE:AF:8F:14:A9:AE:B0:82:63:36:D4:BE:9B:55:A9
Authority key identifier: CC:D3:57:90:83:0C:E7:46:9A:94:C5:9B:2E:2C:CB:BF:5E:36:D1:3F
Certificate issuer: /CN=ccd35790830ce7469a94c59b2e2ccbbf5e36d13f
Certificate serial: 019FAABE3F4E60380C384E6CF8F94C1B6D3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNNXkIMM50aalMWbLizLv1420T8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.mft
Manifest number: 144B
Signing time: Tue 28 Jul 2026 22:00:22 +0000
Manifest this update: Tue 28 Jul 2026 22:00:22 +0000
Manifest next update: Wed 29 Jul 2026 22:00:22 +0000
Files and hashes: 1: TUvmrgBE44ev_WdD8HZ7-Tqrsvk.roa (hash: eGtgmPAMsFLuXajQP6UacgNI2KT3PlnsWKJ/DF91EtU=)
2: v87hPEGnMIsf-U-27Xa5aB7InJ0.roa (hash: vpt3+IR1X8NAWDYMxgQL6E8vBwuUgUGdnpH6ThIVLCI=)
3: zNNXkIMM50aalMWbLizLv1420T8.crl (hash: RI5QMHadtmap2YpQeEQomGJ4R782tI6Sbl6RNypGtTE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zNNXkIMM50aalMWbLizLv1420T8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:3f:4e:60:38:0c:38:4e:6c:f8:f9:4c:1b:6d:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd35790830ce7469a94c59b2e2ccbbf5e36d13f
Validity
Not Before: Jul 28 22:00:22 2026 GMT
Not After : Jul 29 22:00:22 2026 GMT
Subject: CN=83dd500c5eaeaf8f14a9aeb0826336d4be9b55a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:89:b1:fa:77:49:f0:6b:62:40:b8:f3:96:3e:
2f:0f:5a:4f:9d:9a:8c:f6:cc:74:b5:85:06:29:a4:
5a:cb:1f:e1:32:8f:5b:a9:b9:4d:8d:84:3a:02:7a:
90:9b:dd:54:d9:cd:4f:d5:70:b2:71:88:76:42:7c:
e8:71:ff:e5:a0:18:58:d9:fa:82:fa:29:b6:c4:74:
30:8a:a2:70:ca:cf:37:de:a8:a6:b6:8a:b5:77:e1:
f3:e4:bf:4e:97:cf:83:3a:f0:04:b2:1e:f5:ff:b8:
c7:69:c7:16:30:64:6d:04:10:60:5e:c1:45:5f:8d:
0a:1f:59:29:11:16:c5:a5:bd:be:68:2c:f7:8f:d5:
de:58:b0:a4:19:e7:81:0b:0f:71:bf:2b:68:9d:db:
d7:09:15:c9:dd:e4:e8:c2:e4:5c:b2:50:85:a9:e0:
14:01:38:3c:f1:0b:ab:08:0f:0a:7c:c6:df:c3:54:
ea:ec:37:6d:51:8f:61:78:f5:ed:e7:ca:be:16:10:
11:95:18:2a:25:e6:5f:d4:f1:97:88:bd:9e:bc:a7:
64:a5:0d:1a:3d:74:1c:fa:4c:82:ef:02:83:59:84:
dd:61:2c:93:a0:8f:0a:22:62:63:e0:2d:22:8d:03:
9c:d0:f5:99:c1:2d:fa:5a:cb:bc:3c:2e:88:28:98:
08:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:DD:50:0C:5E:AE:AF:8F:14:A9:AE:B0:82:63:36:D4:BE:9B:55:A9
X509v3 Authority Key Identifier:
keyid:CC:D3:57:90:83:0C:E7:46:9A:94:C5:9B:2E:2C:CB:BF:5E:36:D1:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNNXkIMM50aalMWbLizLv1420T8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:9d:d5:ee:7b:31:c1:74:4d:90:9b:d4:4d:1b:03:18:2c:e5:
65:69:e6:ae:08:a2:ae:dd:09:7a:ea:1d:f9:06:1e:c8:4b:c9:
b8:39:eb:eb:66:9e:32:9b:bd:7b:a8:10:6a:81:99:c7:24:16:
1c:a5:0b:23:52:99:c9:d0:12:4f:dc:4f:65:9d:1b:cb:2f:cb:
43:41:68:a0:de:03:e4:86:80:a3:43:d3:39:e6:81:c5:f9:21:
e8:bb:11:32:cd:f4:18:31:6e:33:ca:8a:03:56:4d:4a:ea:c8:
35:b1:bd:53:75:93:1f:e3:05:54:38:a2:e7:2a:5c:0c:8a:a2:
d9:df:34:f9:87:b1:4b:a4:83:e0:95:96:de:6b:d9:d5:9c:08:
d8:4f:ae:56:12:a6:0b:eb:66:92:ea:7b:b2:cd:92:b0:f2:09:
2f:ab:00:8d:6c:b4:b5:b7:49:42:c5:72:2f:7b:f7:31:4e:b7:
f6:e9:00:c5:7e:68:87:00:04:4f:5d:78:e3:56:02:e0:75:be:
c6:58:99:e0:34:1c:04:e4:a4:f0:d8:0f:04:45:9a:21:9b:4c:
71:df:d5:33:0d:98:d0:19:35:82:f5:f8:ac:2b:09:e4:e3:d4:
7e:9b:cd:44:9f:2f:6c:96:da:ff:5c:33:88:06:d2:6e:63:fb:
08:74:79:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:09:15 2026 by rpki-client