Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.mft
File: zs05HGYMPlfFO4fAtS7A0vL0J3U.mft (raw, json)
Hash identifier: 5X/Xy7nkVCGU3pqU+JkxjsxempKk/Yfcwnkl+XXJOjM=
Subject key identifier: CD:0E:03:34:A0:9E:47:CD:58:A1:69:A3:68:26:6E:43:42:D3:6C:51
Authority key identifier: CE:CD:39:1C:66:0C:3E:57:C5:3B:87:C0:B5:2E:C0:D2:F2:F4:27:75
Certificate issuer: /CN=cecd391c660c3e57c53b87c0b52ec0d2f2f42775
Certificate serial: 019FAA881E6554720CF79B0DC104A0F86510
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zs05HGYMPlfFO4fAtS7A0vL0J3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.mft
Manifest number: 098C
Signing time: Tue 28 Jul 2026 21:01:15 +0000
Manifest this update: Tue 28 Jul 2026 21:01:15 +0000
Manifest next update: Wed 29 Jul 2026 21:01:15 +0000
Files and hashes: 1: K1WYHWxT9hUhyCzFRd3qp6J1SRo.roa (hash: ofCgYNoPNZP6vNBlI2XsxCW6wFsFBZey/s584doB1q4=)
2: nNBG6JVVM3hu0P20Vu06-SMt-9I.roa (hash: M+TeIwkxE9H/4NhfymMWaPcB1L3//0ChdU6G+C5A8KM=)
3: zs05HGYMPlfFO4fAtS7A0vL0J3U.crl (hash: ZjqewDAdC9UZIfWGf0kaclX7FHPsT52h+GZfUSj95eQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/zs05HGYMPlfFO4fAtS7A0vL0J3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:1e:65:54:72:0c:f7:9b:0d:c1:04:a0:f8:65:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cecd391c660c3e57c53b87c0b52ec0d2f2f42775
Validity
Not Before: Jul 28 21:01:15 2026 GMT
Not After : Jul 29 21:01:15 2026 GMT
Subject: CN=cd0e0334a09e47cd58a169a368266e4342d36c51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b9:ad:e3:ff:67:09:06:3e:ef:9b:66:71:e0:
bd:fd:a3:ab:7b:fb:5f:d7:b4:6e:61:35:b4:ce:c3:
97:dd:c1:df:2f:08:87:22:d4:e8:67:b3:4f:73:40:
ee:e4:28:c4:b7:4f:dc:08:22:ef:39:07:ac:6f:bd:
e1:1e:46:0d:f5:fa:e9:98:96:58:7b:c2:75:da:83:
db:68:ea:e6:1d:03:22:c8:13:28:73:d9:c2:31:bc:
c1:12:9f:34:4d:53:59:13:2e:cb:e9:48:8b:ac:e5:
05:a5:9a:9c:dc:6b:43:66:f9:0b:32:b9:3a:5a:dd:
85:91:75:89:d1:ef:2d:01:69:11:71:62:df:3b:70:
78:57:cb:37:ed:3f:6e:83:e5:c8:c7:2f:f9:eb:e3:
ad:51:55:88:00:0f:b8:0e:be:8b:d8:98:a1:85:2a:
24:74:5e:f0:2b:8b:5f:38:e2:1f:d6:e6:65:b4:b9:
b7:24:82:27:2a:ee:b9:e4:aa:da:9e:2a:88:02:f4:
2b:39:0a:e7:a9:4b:c7:81:ca:af:d3:13:5b:e6:38:
b9:dc:39:7e:a0:71:55:c9:c8:94:98:bf:3d:08:c5:
d1:78:6d:a8:cc:37:c0:31:f6:33:15:ae:9a:b9:47:
d5:7a:a9:af:9b:bf:a3:0a:db:4f:da:21:b5:59:36:
a7:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:0E:03:34:A0:9E:47:CD:58:A1:69:A3:68:26:6E:43:42:D3:6C:51
X509v3 Authority Key Identifier:
keyid:CE:CD:39:1C:66:0C:3E:57:C5:3B:87:C0:B5:2E:C0:D2:F2:F4:27:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zs05HGYMPlfFO4fAtS7A0vL0J3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:cb:54:55:74:80:33:af:f9:d2:31:bb:1d:a4:a3:69:5d:70:
ea:eb:a6:5e:aa:09:97:7d:4c:f4:6b:7f:56:97:a6:68:97:80:
41:9f:b7:ae:f6:ce:a6:58:dd:4c:6e:d4:97:01:c7:c9:dc:22:
59:3c:78:00:9a:9f:66:21:c0:36:f3:e2:64:e9:7c:fb:ad:e2:
9a:7b:82:d9:a2:b2:46:8b:b9:3e:8c:94:f8:87:f7:45:65:0b:
8a:1c:37:91:5c:14:7d:c0:da:a5:10:8e:3e:00:01:a6:a6:c6:
1c:23:62:97:03:96:1f:b9:0f:a6:f6:0b:e5:25:c2:ff:8e:89:
fe:86:ba:6e:27:d1:b2:6e:f8:23:84:80:45:f4:3b:01:2c:c8:
33:03:00:3b:97:62:9d:af:4c:e9:5a:81:e8:a8:a2:8c:0c:72:
af:b0:c6:62:fc:d9:6f:2b:7b:41:ff:7d:c4:ca:f8:7f:73:f8:
1e:28:b5:c5:c9:e8:ff:44:28:0b:95:9e:77:72:e8:f8:e4:5e:
ce:13:be:16:eb:a8:b0:48:22:a1:f8:7d:7e:5d:a1:e7:94:e6:
36:bf:8f:32:04:44:a1:59:4a:1f:88:3b:eb:92:73:28:bb:9d:
a7:d6:61:b0:00:1a:33:85:0e:fc:03:1f:3c:e3:73:78:9c:ac:
35:9e:4a:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:48:13 2026 by rpki-client