Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft
File: ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft (raw, json)
Hash identifier: QltZaSWCLD67C/8U+KtW0itTiilrC6T5W3bwa0RsBA8=
Subject key identifier: 3B:E9:47:89:9C:DB:7B:98:95:7A:64:71:DA:FE:9F:25:1C:E5:F0:E5
Authority key identifier: 64:65:79:56:1E:CA:58:79:A7:47:02:5E:57:98:48:7B:19:CD:2A:97
Certificate issuer: /CN=646579561eca5879a747025e5798487b19cd2a97
Certificate serial: 019FA9752E1A67568B31F913E9066474495F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft
Manifest number: 19D4
Signing time: Tue 28 Jul 2026 16:00:56 +0000
Manifest this update: Tue 28 Jul 2026 16:00:56 +0000
Manifest next update: Wed 29 Jul 2026 16:00:56 +0000
Files and hashes: 1: 1-ar0P82ef_StXuE7zueriWBD8hE.roa (hash: u9ZMHFdbfeEonEHEjHmh9TkFg76are6Y/T2IPG1BknM=)
2: HmIJXkixJ1rahF7EYYPCTla8Klc.roa (hash: gwb50AaVi0ThYCb3TRftn7wyLBQSCU21VtQTQhMGtAM=)
3: ZGV5Vh7KWHmnRwJeV5hIexnNKpc.crl (hash: ilE+U05HtnDIZ7rLaoopvnNkNGzAacK068nV9maTV7o=)
4: g95v2zig0ZqaQU7eeusrbdTK5G0.roa (hash: cLTgf25tE2pedm+NWY4o5xvbCdWa6GTqSbkhECMQQmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 16:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:2e:1a:67:56:8b:31:f9:13:e9:06:64:74:49:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=646579561eca5879a747025e5798487b19cd2a97
Validity
Not Before: Jul 28 16:00:56 2026 GMT
Not After : Jul 29 16:00:56 2026 GMT
Subject: CN=3be947899cdb7b98957a6471dafe9f251ce5f0e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:92:32:30:c1:f9:79:9c:c5:a9:bb:f0:4e:ef:
44:71:03:1f:56:f9:ee:eb:0e:60:c1:0f:53:dd:41:
90:af:33:55:f9:b8:2f:83:8e:75:af:36:7a:d1:1b:
c7:fc:db:64:84:b4:84:02:1f:30:c4:cb:bc:aa:17:
83:4b:a1:65:34:51:19:4c:78:0c:e4:c5:4f:5b:c8:
bf:d8:19:14:f2:10:93:c9:f8:ed:af:86:df:53:2a:
27:c6:9e:82:27:0e:13:ec:da:68:ea:bc:b3:74:d4:
25:02:b7:9e:75:be:72:94:8e:83:46:5f:56:e4:f6:
bf:8d:2d:dc:d5:61:21:7a:27:b2:f4:8b:6d:56:2b:
61:e5:03:da:f9:4e:5c:63:29:17:ce:5d:73:1c:7c:
36:f0:71:ac:c5:f4:c2:da:5c:e3:b6:7b:35:18:8c:
79:d2:14:30:f6:32:4d:af:75:30:13:fa:74:dd:28:
07:d7:2f:2a:85:e3:81:88:25:2a:92:50:bc:91:0a:
ca:93:21:3d:68:cd:7f:e5:1c:bd:d3:cd:25:b4:f2:
3f:07:48:34:b4:7b:74:f0:3e:53:75:04:10:a4:0d:
3e:cc:65:a9:e7:a0:bf:39:35:f5:9e:69:80:4a:4b:
8e:72:d0:32:56:b6:cc:1d:4e:22:e4:8d:b6:76:d4:
94:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:E9:47:89:9C:DB:7B:98:95:7A:64:71:DA:FE:9F:25:1C:E5:F0:E5
X509v3 Authority Key Identifier:
keyid:64:65:79:56:1E:CA:58:79:A7:47:02:5E:57:98:48:7B:19:CD:2A:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:be:5a:60:b0:99:0d:ff:16:fe:ad:0a:71:c0:6a:1a:cc:c3:
be:ee:c8:50:1d:cb:d0:ab:d0:6e:77:ac:b4:a4:58:fd:01:53:
c9:30:fc:4e:c4:32:72:35:a0:3b:ee:0a:34:b8:33:d2:62:ef:
1d:33:59:d6:ae:05:80:78:bf:ff:06:76:cd:41:4f:bb:cd:bd:
05:8c:30:12:07:92:32:55:ce:7e:b1:d0:a0:c5:06:1f:2e:14:
75:df:b9:00:76:dd:d5:5c:49:70:40:27:0c:c3:73:a0:dc:bd:
04:8e:f7:de:45:33:28:65:f2:78:4a:83:96:f5:b4:18:42:ce:
82:cb:d5:bd:d3:9f:47:50:f1:a8:e0:ea:b2:e7:32:26:0b:3c:
77:22:19:86:2b:00:e3:90:1a:9d:fc:2c:4e:e2:ef:88:f1:a3:
74:3f:7e:cc:5c:27:cd:47:fd:8a:cb:a0:53:8e:83:7b:bf:10:
41:b5:8a:cc:67:b7:37:c7:d3:19:b8:9b:38:fd:10:c8:f0:48:
dd:03:2e:9a:27:b2:8e:85:a5:d6:68:3b:76:a1:a4:fd:8f:68:
c9:f2:47:e3:ff:19:5c:f3:3c:d6:18:41:1f:37:f7:a4:78:95:
d2:cf:2c:a3:1e:59:1c:53:0e:f2:62:03:5c:c2:19:c1:4e:db:
ae:55:ea:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:49:53 2026 by rpki-client