Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/fa7711-37ff-4aec-9853-1edde6c9d96a/1/ZdCTIXKqLRx3xLuYNwqrPeasNFc.mft
File: ZdCTIXKqLRx3xLuYNwqrPeasNFc.mft (raw, json)
Hash identifier: HATKWsMwNNBgG5B2n3CFMfJr63dnI4KvZEWJ1aV1x8M=
Subject key identifier: D2:A8:21:DD:8A:05:B5:47:30:69:C9:95:3F:02:CF:3C:E0:33:F6:34
Authority key identifier: 65:D0:93:21:72:AA:2D:1C:77:C4:BB:98:37:0A:AB:3D:E6:AC:34:57
Certificate issuer: /CN=65d0932172aa2d1c77c4bb98370aab3de6ac3457
Certificate serial: 019FA8628DB8A518794907A4D182F877BD3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZdCTIXKqLRx3xLuYNwqrPeasNFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/fa7711-37ff-4aec-9853-1edde6c9d96a/1/ZdCTIXKqLRx3xLuYNwqrPeasNFc.mft
Manifest number: 0488
Signing time: Tue 28 Jul 2026 11:00:58 +0000
Manifest this update: Tue 28 Jul 2026 11:00:58 +0000
Manifest next update: Wed 29 Jul 2026 11:00:58 +0000
Files and hashes: 1: OpiyEA7jLNoth377L3JQZRW22EA.asa (hash: r8ONgzWitytpplKZRKdun1LH8tmOWmyteR7//LNHOZ8=)
2: TBDRW3pZmuh3LqJB0SgJxwzZcn8.asa (hash: hzhoB7Z5vY10r4VrziTI+hp0NwmrNuDhAq362RHDbhc=)
3: ZdCTIXKqLRx3xLuYNwqrPeasNFc.crl (hash: aozxpIHDYoEjXWyjj8GOR1JzFe9IXrRcVFdDZIO+d9g=)
4: m0PF4BK3O9Y2-d_izx7bC-pV_Es.asa (hash: D09pxW5zPXOvJqHki3xg8YhkV/MNoANsgzWxuDtJUNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/fa7711-37ff-4aec-9853-1edde6c9d96a/1/ZdCTIXKqLRx3xLuYNwqrPeasNFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/fa7711-37ff-4aec-9853-1edde6c9d96a/1/ZdCTIXKqLRx3xLuYNwqrPeasNFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZdCTIXKqLRx3xLuYNwqrPeasNFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:62:8d:b8:a5:18:79:49:07:a4:d1:82:f8:77:bd:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65d0932172aa2d1c77c4bb98370aab3de6ac3457
Validity
Not Before: Jul 28 11:00:58 2026 GMT
Not After : Jul 29 11:00:58 2026 GMT
Subject: CN=d2a821dd8a05b5473069c9953f02cf3ce033f634
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f2:de:fc:ba:1e:c9:c1:45:f0:07:9e:1e:ff:
e6:3d:c5:48:3a:55:ae:dd:f1:86:af:6c:6a:9a:a3:
90:0e:3c:eb:2d:f4:70:a8:cd:54:f3:bb:0c:f6:31:
78:63:d3:9d:13:4b:86:a5:bc:77:14:34:5e:06:e6:
04:3b:7e:4f:4b:24:69:f4:3e:81:03:16:5d:9a:0c:
dc:a7:ef:8a:af:d9:17:6b:3f:3b:14:f2:ae:9f:02:
7d:86:fb:bf:e4:36:5b:81:30:e0:28:d6:d3:b2:cc:
be:29:d7:0d:53:4b:b1:96:9b:c3:3f:56:4c:80:2a:
92:16:e8:61:c1:39:4c:43:6f:14:1f:45:14:9c:0d:
0b:bc:a3:2b:db:29:ae:6f:86:a8:5b:49:c0:55:8e:
6f:d5:17:ec:81:d2:db:db:3b:71:54:4a:3c:dc:20:
da:a8:f1:28:ea:8d:70:8a:10:93:cd:48:66:56:19:
a3:56:cb:7f:6e:42:73:28:17:50:cb:54:06:0a:dc:
5b:08:6e:67:f1:10:94:1f:26:b2:df:fe:e5:84:ca:
3f:fe:e6:06:a1:56:e6:99:cc:9e:d7:a4:90:90:c4:
1f:93:fd:41:e0:c5:eb:e1:20:5a:ee:07:4f:dd:8b:
06:42:aa:52:28:9f:41:36:b3:07:df:db:f4:bb:5e:
5e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:A8:21:DD:8A:05:B5:47:30:69:C9:95:3F:02:CF:3C:E0:33:F6:34
X509v3 Authority Key Identifier:
keyid:65:D0:93:21:72:AA:2D:1C:77:C4:BB:98:37:0A:AB:3D:E6:AC:34:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZdCTIXKqLRx3xLuYNwqrPeasNFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/fa7711-37ff-4aec-9853-1edde6c9d96a/1/ZdCTIXKqLRx3xLuYNwqrPeasNFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/fa7711-37ff-4aec-9853-1edde6c9d96a/1/ZdCTIXKqLRx3xLuYNwqrPeasNFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:1d:52:b1:3b:e4:4b:a9:ee:04:69:99:4c:9d:ac:00:06:26:
d8:09:47:31:eb:b8:5b:35:51:62:f1:04:52:5f:23:b6:32:1b:
85:27:0b:58:dd:38:a3:3a:bd:fe:ab:dd:08:da:3b:2a:21:ff:
4f:f0:e4:83:93:77:1d:1b:42:65:9e:98:a9:ca:4f:82:96:7d:
7b:35:1a:18:4f:e8:2c:ef:a4:37:c2:29:fd:0d:7c:88:b9:cf:
2f:23:28:59:10:01:5c:af:c4:19:97:f1:1c:a2:07:3e:d8:86:
14:6a:73:2d:51:19:25:cf:70:25:02:66:45:11:22:87:17:b7:
1e:27:0f:f5:28:a5:7b:b8:ed:d4:3c:b2:02:27:3b:63:96:12:
c9:c7:de:93:ae:51:8e:8c:f9:ae:bb:99:bd:61:15:21:63:86:
fd:2b:d3:62:72:c9:54:6e:2e:88:b8:0e:04:59:f0:df:1f:62:
02:6b:2d:e2:8a:a9:9f:4c:f9:3e:c8:6b:5f:65:44:67:ef:ab:
db:87:0c:f8:b3:a2:79:7c:a8:8c:46:a3:4c:f3:65:32:83:0d:
1e:3d:13:45:f7:a8:a4:4e:28:4f:58:51:16:25:49:3d:71:d7:
82:da:16:3c:28:6e:44:b5:04:35:1a:24:9b:12:3a:1b:99:ad:
19:db:a4:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 14:47:57 2026 by rpki-client