Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/cfd41e-398d-4f1b-9995-1a3ff532bc20/1/zQPRPdJvAESig_xqEedWoqK1aRs.mft
File: zQPRPdJvAESig_xqEedWoqK1aRs.mft (raw, json)
Hash identifier: FigjXDR3++dTm7JLnAqX1WQXia1ISCjM8IUbMbl7Lzk=
Subject key identifier: 04:2D:C5:23:08:83:7A:31:53:03:5C:0B:5C:31:B2:EF:61:16:54:2A
Authority key identifier: CD:03:D1:3D:D2:6F:00:44:A2:83:FC:6A:11:E7:56:A2:A2:B5:69:1B
Certificate issuer: /CN=cd03d13dd26f0044a283fc6a11e756a2a2b5691b
Certificate serial: 019FAB9A9EA4B38A3430321D8E7E71593BDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQPRPdJvAESig_xqEedWoqK1aRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/cfd41e-398d-4f1b-9995-1a3ff532bc20/1/zQPRPdJvAESig_xqEedWoqK1aRs.mft
Manifest number: 04DA
Signing time: Wed 29 Jul 2026 02:01:04 +0000
Manifest this update: Wed 29 Jul 2026 02:01:04 +0000
Manifest next update: Thu 30 Jul 2026 02:01:04 +0000
Files and hashes: 1: DV_1PU5sghttOAyD5Fk0auja6M4.roa (hash: vyYX2XFHKs4PfXvL2MDa+XaKNUQzIY/+9Y9TmVp9CiU=)
2: zQPRPdJvAESig_xqEedWoqK1aRs.crl (hash: I6+2Wf0eP5YwFU8snaLc+lAJd5K++aZlREoP3H+z+TM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/cfd41e-398d-4f1b-9995-1a3ff532bc20/1/zQPRPdJvAESig_xqEedWoqK1aRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/cfd41e-398d-4f1b-9995-1a3ff532bc20/1/zQPRPdJvAESig_xqEedWoqK1aRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/zQPRPdJvAESig_xqEedWoqK1aRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:9a:9e:a4:b3:8a:34:30:32:1d:8e:7e:71:59:3b:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd03d13dd26f0044a283fc6a11e756a2a2b5691b
Validity
Not Before: Jul 29 02:01:04 2026 GMT
Not After : Jul 30 02:01:04 2026 GMT
Subject: CN=042dc52308837a3153035c0b5c31b2ef6116542a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4f:db:6b:46:24:d6:52:ea:03:74:2b:33:db:
1e:b1:cc:fd:69:ff:70:8d:1e:07:78:08:ac:40:e5:
da:73:c8:14:35:1f:8c:e8:7a:e3:93:29:65:23:2c:
42:68:67:a3:78:db:49:05:c3:9c:49:b7:65:42:e4:
05:a7:c7:5d:b9:ce:eb:76:51:52:73:15:89:4b:53:
8c:32:df:82:c2:bf:f8:52:79:e8:8f:ee:24:05:58:
ce:42:93:ce:ac:93:08:cb:c3:88:ef:1b:e5:f0:ed:
0d:67:54:ca:2d:7c:9f:f7:7e:25:93:5b:48:95:58:
6a:cf:51:59:54:0a:74:10:50:88:9f:69:45:ac:3e:
f4:d2:a0:43:3c:e7:93:5c:49:ff:aa:a9:17:07:96:
fe:3d:a6:dd:38:0b:f7:08:35:30:8f:75:22:83:da:
63:46:aa:18:ac:27:9d:96:41:6c:87:66:3d:41:85:
35:f3:18:b3:ea:0e:e8:04:6c:70:5a:6c:1d:e5:be:
93:43:26:10:fa:49:22:c3:c4:08:25:50:c9:c1:69:
1b:10:f6:f9:8f:57:13:0e:dc:16:e4:5c:7d:d0:46:
8c:03:0f:ed:da:d4:df:4b:b2:c7:f4:ee:94:e7:58:
24:68:fb:03:36:1a:e9:38:cb:8a:d9:27:6a:8f:df:
0e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:2D:C5:23:08:83:7A:31:53:03:5C:0B:5C:31:B2:EF:61:16:54:2A
X509v3 Authority Key Identifier:
keyid:CD:03:D1:3D:D2:6F:00:44:A2:83:FC:6A:11:E7:56:A2:A2:B5:69:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQPRPdJvAESig_xqEedWoqK1aRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/cfd41e-398d-4f1b-9995-1a3ff532bc20/1/zQPRPdJvAESig_xqEedWoqK1aRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/cfd41e-398d-4f1b-9995-1a3ff532bc20/1/zQPRPdJvAESig_xqEedWoqK1aRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:8a:5f:7f:29:53:a9:a6:88:35:a7:32:c8:ba:6d:b2:58:92:
2d:b5:f3:5e:3c:e5:71:ef:ac:34:31:3e:9b:f6:22:69:a3:f6:
ac:5f:7c:d6:87:dc:9d:c8:9c:7f:21:bb:d1:41:d2:7e:5d:b8:
cb:bb:54:64:fb:a0:06:56:8a:ed:d1:b1:4c:8a:4b:f9:35:20:
bc:cf:43:7f:b4:06:b6:9c:ab:9b:95:62:d2:48:d8:79:17:e3:
3d:a8:19:9a:24:3b:8c:fc:ad:91:e2:54:34:2a:0b:ec:91:9d:
24:f7:ed:16:46:e4:71:f7:ec:ef:6a:8a:97:ba:1d:4e:bc:4a:
13:13:41:44:75:8e:42:c1:da:04:ee:a5:34:d3:b0:15:89:5c:
61:52:2d:cf:4d:b0:af:7f:fd:bb:17:e8:d7:e9:58:96:70:0f:
84:17:33:9c:41:e9:27:1b:97:cb:b9:2e:ce:94:4d:e7:b2:6e:
0e:83:dd:94:3f:38:28:d7:7e:87:5f:88:ba:bf:d3:ad:7d:bd:
4b:15:f2:e3:9f:be:b8:2e:77:26:ba:48:54:e8:1a:0f:b6:9b:
fd:3e:36:41:00:8e:4a:0f:d3:90:2a:0c:51:b0:ee:b6:3b:c0:
21:78:40:be:99:da:1b:4e:28:f6:e7:42:d8:30:ad:1e:87:41:
3b:13:c8:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:47:05 2026 by rpki-client