Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/550bb2-5a50-4784-8dab-3d0e9fe01bd8/1/_zVCuU4Ii793ruGzOUIxUtrvXg0.mft
File: _zVCuU4Ii793ruGzOUIxUtrvXg0.mft (raw, json)
Hash identifier: 3611LZwap3aziCpDSpCR3pB2EwUfmt9p+X2Tv8ry/iM=
Subject key identifier: 0B:E5:52:46:64:49:4D:D3:FE:28:2F:11:8C:E1:57:FB:AF:23:C7:F5
Authority key identifier: FF:35:42:B9:4E:08:8B:BF:77:AE:E1:B3:39:42:31:52:DA:EF:5E:0D
Certificate issuer: /CN=ff3542b94e088bbf77aee1b339423152daef5e0d
Certificate serial: 019FA86203C8631AF7172AF5C8953EB14B8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zVCuU4Ii793ruGzOUIxUtrvXg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/550bb2-5a50-4784-8dab-3d0e9fe01bd8/1/_zVCuU4Ii793ruGzOUIxUtrvXg0.mft
Manifest number: DF
Signing time: Tue 28 Jul 2026 11:00:23 +0000
Manifest this update: Tue 28 Jul 2026 11:00:23 +0000
Manifest next update: Wed 29 Jul 2026 11:00:23 +0000
Files and hashes: 1: LXC_nzvi4Cb7lHD4Py9XKzLtC38.roa (hash: M58JQtuK6LdfZlu8eoP3dvPBwwWOzHNzghjNI4pN5m4=)
2: _zVCuU4Ii793ruGzOUIxUtrvXg0.crl (hash: 2s0n6ugenjV66yuOKXUc/+jt/FHDoYlaQys43X1aBac=)
3: mGBvIwQwu2rqSEgMM78Outc8oKI.asa (hash: OAcgoQTH6aR8Gafn8lP+RELlUaY4N3e0LLrENbEm6VE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/550bb2-5a50-4784-8dab-3d0e9fe01bd8/1/_zVCuU4Ii793ruGzOUIxUtrvXg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/550bb2-5a50-4784-8dab-3d0e9fe01bd8/1/_zVCuU4Ii793ruGzOUIxUtrvXg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_zVCuU4Ii793ruGzOUIxUtrvXg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 11:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:62:03:c8:63:1a:f7:17:2a:f5:c8:95:3e:b1:4b:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff3542b94e088bbf77aee1b339423152daef5e0d
Validity
Not Before: Jul 28 11:00:23 2026 GMT
Not After : Jul 29 11:00:23 2026 GMT
Subject: CN=0be5524664494dd3fe282f118ce157fbaf23c7f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e4:32:11:8d:2f:d4:f4:8b:a1:c4:b6:17:18:
26:63:a1:38:33:09:86:ed:7b:e9:df:9b:66:a8:14:
da:c6:3e:26:ca:e3:7c:e9:59:d0:6d:49:77:c1:25:
49:28:02:3c:87:7f:98:11:f1:b9:9f:77:58:8c:6b:
f6:c6:59:52:d8:7d:78:33:22:5a:b8:b4:97:4f:39:
63:91:88:33:d8:04:25:33:b6:fd:b2:4a:9d:94:58:
79:94:68:55:b8:54:96:93:e1:6b:18:92:34:37:05:
b6:0b:8d:16:cd:53:74:5a:3e:56:33:e4:56:46:06:
e7:eb:e3:b3:95:72:ac:58:77:6a:d6:e0:01:c5:1b:
65:15:53:d4:9f:4e:14:15:25:e6:b1:68:13:39:62:
84:74:c0:6a:28:82:56:11:4f:c2:66:25:fb:0c:5c:
4f:ab:fa:21:9f:07:42:55:06:c2:e1:47:01:c8:a9:
6e:39:81:98:45:cb:55:3a:e3:70:b9:c9:08:da:5c:
54:1a:ca:1f:d5:b2:14:e4:42:a2:6a:90:f6:98:03:
e2:69:0a:74:0b:58:a9:19:ba:64:32:67:ed:19:ac:
78:46:0d:8e:da:04:9f:f0:fe:f8:a2:9d:25:af:88:
49:75:15:ef:a1:48:6f:13:b0:70:c4:0d:d1:1d:c0:
bf:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:E5:52:46:64:49:4D:D3:FE:28:2F:11:8C:E1:57:FB:AF:23:C7:F5
X509v3 Authority Key Identifier:
keyid:FF:35:42:B9:4E:08:8B:BF:77:AE:E1:B3:39:42:31:52:DA:EF:5E:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zVCuU4Ii793ruGzOUIxUtrvXg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/550bb2-5a50-4784-8dab-3d0e9fe01bd8/1/_zVCuU4Ii793ruGzOUIxUtrvXg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/550bb2-5a50-4784-8dab-3d0e9fe01bd8/1/_zVCuU4Ii793ruGzOUIxUtrvXg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:5e:a4:2e:68:a9:e5:b1:95:54:8f:b2:ef:1c:47:c5:f9:2f:
f8:47:16:03:33:d0:04:a1:8b:d6:2b:d3:ee:db:e5:e2:33:1f:
eb:75:d3:0d:52:3a:67:14:2e:01:e2:2d:3b:33:c4:84:a6:29:
8b:93:1d:78:78:2b:fa:05:44:a3:1d:72:73:8b:e2:d3:7f:52:
4e:f3:02:69:dd:8c:e2:0d:69:4a:77:98:01:4e:79:7a:97:13:
13:0f:50:e7:e0:64:74:8f:36:08:50:dd:e9:d2:56:17:1b:60:
02:e0:da:1f:9e:28:41:c4:7d:57:f3:c9:8d:14:23:4d:3f:df:
9d:b6:86:16:22:04:7e:11:c1:a9:c8:0b:1e:24:5b:9a:9c:22:
2b:32:58:d4:2c:70:da:6a:81:cd:7a:68:28:0d:62:b2:8a:54:
c2:ed:ba:8f:f8:1d:1a:f9:f9:c3:54:75:81:4e:81:2d:a6:85:
6f:87:24:57:f1:c5:6d:77:01:55:0e:e0:8f:53:84:6b:d7:d9:
5d:e8:9b:dc:af:36:5c:39:33:f4:d3:ab:1f:72:f3:45:00:5e:
f2:9d:cf:3d:7e:f0:cf:d5:21:f3:62:15:45:83:eb:e7:9d:88:
21:bd:fc:ee:87:f3:e1:39:70:b8:25:ee:5b:1f:4f:ba:a9:a3:
75:95:97:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:56:00 2026 by rpki-client