Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.mft
File: ZqgyJE0OI_Xyizpt73r8AbIlIcc.mft (raw, json)
Hash identifier: O4ziUTF/IStt5H5wZd5g2Vc7cHfvKqauRAM4kCYSI0c=
Subject key identifier: 3A:C7:B2:57:75:0A:D6:9D:2F:41:2B:03:BD:DE:55:6A:D7:FA:4F:0D
Authority key identifier: 66:A8:32:24:4D:0E:23:F5:F2:8B:3A:6D:EF:7A:FC:01:B2:25:21:C7
Certificate issuer: /CN=66a832244d0e23f5f28b3a6def7afc01b22521c7
Certificate serial: 019FA86229675A06DC394B68356B4CF5426F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZqgyJE0OI_Xyizpt73r8AbIlIcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.mft
Manifest number: 0DBC
Signing time: Tue 28 Jul 2026 11:00:33 +0000
Manifest this update: Tue 28 Jul 2026 11:00:33 +0000
Manifest next update: Wed 29 Jul 2026 11:00:33 +0000
Files and hashes: 1: LebVW7P05wxSQg1aNkxf4K6jaA4.roa (hash: oIBElQY2pkJQLbuxxdHqzf3ND0BBOWd73Tj7RbmTBBE=)
2: ZqgyJE0OI_Xyizpt73r8AbIlIcc.crl (hash: Ql4n1himiHceHFer0WfiFuu6FyzepwptW2BB0UJt3JE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZqgyJE0OI_Xyizpt73r8AbIlIcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:62:29:67:5a:06:dc:39:4b:68:35:6b:4c:f5:42:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66a832244d0e23f5f28b3a6def7afc01b22521c7
Validity
Not Before: Jul 28 11:00:33 2026 GMT
Not After : Jul 29 11:00:33 2026 GMT
Subject: CN=3ac7b257750ad69d2f412b03bdde556ad7fa4f0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f2:38:0f:4b:cc:4c:c4:0a:57:9d:23:2c:81:
0c:70:7f:51:cf:06:3c:bf:77:10:4e:68:c2:09:cf:
70:37:bf:76:cd:ce:0d:b3:c3:3a:e0:66:2d:ca:47:
56:c1:d0:dc:27:4d:aa:f7:a2:c6:ab:e3:b4:4c:35:
6b:9e:ac:0d:52:bc:50:5d:6e:b9:07:6d:64:08:32:
37:ce:b4:59:03:45:31:4e:f0:05:5d:60:77:37:99:
03:7c:50:3b:ca:a2:16:2f:fd:f1:79:54:25:f2:40:
a3:4a:a0:44:f0:6e:53:96:5d:59:f2:df:fd:26:92:
c5:5b:63:22:60:6a:4d:35:52:49:34:51:37:5a:be:
60:1b:52:73:4e:2b:ac:a9:e2:c6:41:17:ad:d7:b3:
b6:64:b6:a6:c1:30:13:b7:1e:1e:50:27:21:d8:eb:
58:45:6b:b5:59:af:2a:52:11:5b:5e:b0:b5:c5:da:
d7:60:51:16:10:54:54:27:23:f4:d9:2c:8e:a7:46:
84:35:de:04:ee:7c:51:61:80:46:85:5a:a3:c4:41:
34:22:7f:04:9b:0c:18:36:a0:0f:35:5a:4f:a5:db:
c1:73:18:95:16:06:11:18:7f:11:89:46:51:be:20:
fb:9c:21:bc:a4:35:cb:68:b4:86:14:d5:c7:fc:57:
39:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:C7:B2:57:75:0A:D6:9D:2F:41:2B:03:BD:DE:55:6A:D7:FA:4F:0D
X509v3 Authority Key Identifier:
keyid:66:A8:32:24:4D:0E:23:F5:F2:8B:3A:6D:EF:7A:FC:01:B2:25:21:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZqgyJE0OI_Xyizpt73r8AbIlIcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:31:48:3b:d2:08:b7:45:4c:ec:9c:ed:a3:b6:c3:26:84:6d:
d0:03:83:2f:8c:ca:22:db:a9:50:1b:31:6c:12:cf:2d:9e:6f:
c4:8e:48:61:55:d7:07:53:16:9e:f6:c0:c2:a8:91:f0:c2:f5:
3a:9a:91:8a:b8:6d:2d:b0:9e:f1:55:8f:76:29:7d:69:67:f8:
bb:2f:d2:79:10:ae:c5:ac:10:49:8a:b6:de:91:ba:cc:36:d3:
aa:43:96:df:22:b4:59:b5:ff:43:d2:44:2f:fa:2b:1c:82:fa:
41:ff:9f:e7:2e:be:a4:09:76:09:1a:63:92:f3:1b:2d:20:10:
dc:4c:95:1c:9a:29:d2:84:ef:5a:0b:2d:95:d9:00:e7:ed:b2:
b5:e4:17:c9:3c:67:bf:df:23:12:d0:9e:9e:92:05:73:55:e0:
bb:18:4f:12:03:de:14:8f:31:f3:09:4c:27:17:cb:cc:b8:fc:
b6:12:5f:97:87:a5:5e:cc:0c:79:80:f1:f5:cf:eb:12:59:34:
d7:81:cc:ba:d5:bf:1a:cc:0b:bd:fc:91:e2:ba:3e:b6:0f:a8:
b2:42:ba:29:76:b6:9b:d0:51:4b:c1:68:9a:32:f3:9f:55:83:
de:c3:b3:1c:3f:ed:2b:19:77:87:a3:d0:45:7f:87:50:ae:76:
2b:14:a2:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:18:25 2026 by rpki-client