Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.mft
File: ZK7IAkyqEDqEEmlsfnL3eAPNhpU.mft (raw, json)
Hash identifier: juJn0dWo9BwtPPaTI6jK7mCphfV9AkVoQpRO6PKVhDE=
Subject key identifier: 2B:8B:5C:25:CA:6C:CF:B8:21:45:E9:BB:E3:0F:E0:31:61:85:ED:B7
Authority key identifier: 64:AE:C8:02:4C:AA:10:3A:84:12:69:6C:7E:72:F7:78:03:CD:86:95
Certificate issuer: /CN=64aec8024caa103a8412696c7e72f77803cd8695
Certificate serial: 019FAB630ECA3F12F66F6ACC0E3D900DA11F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.mft
Manifest number: 1414
Signing time: Wed 29 Jul 2026 01:00:23 +0000
Manifest this update: Wed 29 Jul 2026 01:00:23 +0000
Manifest next update: Thu 30 Jul 2026 01:00:23 +0000
Files and hashes: 1: SWC8q5CH8zumHrflzVp4e7i8dGY.roa (hash: z98d01QAmvPs9qVeEUxQJcsgJEzGZb8FADftU7i+UZw=)
2: ZK7IAkyqEDqEEmlsfnL3eAPNhpU.crl (hash: +73MrutHvJQRs3qt3fKdFrRFGFtUogCpgffhJCTFnng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:63:0e:ca:3f:12:f6:6f:6a:cc:0e:3d:90:0d:a1:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64aec8024caa103a8412696c7e72f77803cd8695
Validity
Not Before: Jul 29 01:00:23 2026 GMT
Not After : Jul 30 01:00:23 2026 GMT
Subject: CN=2b8b5c25ca6ccfb82145e9bbe30fe0316185edb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6d:ec:2d:b8:02:04:eb:77:9b:db:24:93:4b:
4e:81:da:ab:7c:9e:41:fb:a8:71:8e:34:6b:d9:30:
98:81:ea:b2:95:d8:8c:24:5f:50:e6:99:9f:76:e2:
b2:0b:50:aa:53:3c:d4:51:9f:83:af:a6:3e:c8:f2:
df:0a:d2:fc:1e:5d:d7:a5:e2:f9:fe:fb:b0:5e:6e:
82:92:ef:ec:97:ac:c2:87:4a:a8:25:3a:a6:91:79:
7b:46:f7:1e:dc:95:7b:2e:c3:07:b3:04:cf:65:2a:
d3:c3:2f:96:8b:2b:4a:1e:0b:3d:95:72:04:86:05:
e1:15:8d:65:e0:94:1b:ac:9f:16:67:38:8d:a1:c7:
d2:cf:85:0d:41:7c:9e:0f:7b:4a:4d:af:48:ff:00:
90:99:99:3e:ea:c8:0b:3e:35:1c:57:2d:65:22:2b:
03:ef:df:62:6d:4b:26:59:b4:02:c6:d4:d9:bf:4f:
b9:8b:8e:1f:e6:0e:f9:98:52:3b:05:ca:a7:97:fd:
1c:97:cf:e2:39:4f:19:a3:c6:b3:b0:78:5d:e0:b1:
a7:ce:4e:1e:8d:df:66:7c:db:95:d8:af:01:14:5c:
4f:b5:68:07:a6:13:a2:bd:f8:c0:55:32:1e:34:1a:
7c:a0:50:cc:94:b2:ee:2f:df:f5:86:2c:18:92:6a:
28:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:8B:5C:25:CA:6C:CF:B8:21:45:E9:BB:E3:0F:E0:31:61:85:ED:B7
X509v3 Authority Key Identifier:
keyid:64:AE:C8:02:4C:AA:10:3A:84:12:69:6C:7E:72:F7:78:03:CD:86:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:53:bd:b7:1c:f7:2d:3d:bf:f3:96:4a:86:ff:24:4f:d9:de:
d4:f6:35:5c:60:55:d6:ac:e1:3f:82:e5:91:6c:ad:92:e0:48:
30:6d:ff:38:d7:f1:19:2e:c1:19:6f:c7:8c:3f:7e:1b:0d:25:
97:15:59:d6:3e:04:0e:98:bc:99:17:86:2f:dc:c0:de:cb:b4:
b1:07:ab:ed:71:f3:19:21:50:f3:dc:db:0a:56:a2:e2:32:e9:
a2:0a:0a:87:1e:aa:9f:9f:6a:b7:a4:d8:89:53:ba:1a:ea:0b:
a9:d2:10:a6:89:dd:b0:14:39:28:a0:3b:54:68:c5:d6:0d:29:
25:bc:68:d8:80:6b:94:34:00:b7:78:b3:1b:23:51:cb:18:63:
38:55:13:35:43:35:a1:38:ca:49:a1:d2:3c:1f:56:00:b7:12:
da:ea:2f:89:10:a4:00:f1:9e:3d:c4:79:c4:fe:9a:9d:75:50:
cd:b4:5e:72:94:b6:f7:71:3f:c0:fd:b3:05:50:c0:3f:9f:a5:
c2:e6:5a:7a:7f:82:a8:4d:6b:6d:e2:a3:9f:0c:81:9d:40:98:
df:12:30:af:2d:4f:7e:83:ee:f4:13:01:ae:7d:04:36:8d:3d:
0e:d8:51:92:8f:98:37:03:01:b5:f2:01:91:4c:7d:37:97:5a:
cf:ff:f7:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:48:23 2026 by rpki-client