Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft
File: ZPpm-4SngaBYT9DRwt85vaR2BRk.mft (raw, json)
Hash identifier: 7zp8PstQTKox91K1AY6S5Bd1PHF9EJxI0/LbobVMnwQ=
Subject key identifier: 07:B9:95:B0:32:89:7B:5D:C4:1A:E9:A5:A3:21:B6:16:B1:B4:C8:60
Authority key identifier: 64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19
Certificate issuer: /CN=64fa66fb84a781a0584fd0d1c2df39bda4760519
Certificate serial: 019FA8D042689FF7C02D0C07FA2610846240
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft
Manifest number: 1A47
Signing time: Tue 28 Jul 2026 13:00:48 +0000
Manifest this update: Tue 28 Jul 2026 13:00:48 +0000
Manifest next update: Wed 29 Jul 2026 13:00:48 +0000
Files and hashes: 1: 5fUbTKl8FSPc1kSYGwQAsVfb2vQ.roa (hash: PLRtthNs8hk5vDeIh9r/ACQzulJpBpXJunHHwis/BW4=)
2: KHKZ9oAR4pOjsmM70Mx2jjXuCSc.roa (hash: KQJvV0lMLENSykGh1gJfx02ynaMwFLdd0OilipOgatU=)
3: KhGccG-9kSJW0nKCk6yANGIBUFg.roa (hash: zywPAJ1T+FuIU1G9CdS4XD+lquEKkevubyLrKuYUwfk=)
4: WfYZ1TfImT3yRIrYlNuuVCM96nE.roa (hash: 4hQnLNa6AvcfooEXSYRpCYSRQGf1HFK3GJPOn5OeTYg=)
5: ZPpm-4SngaBYT9DRwt85vaR2BRk.crl (hash: nxjHfnaLIRr2p3DKT2Y/NkL7v5W3okm+FPNQx+S5yHs=)
6: bWULgqZwLFtgMnHWpi5ob6mG51g.roa (hash: lfo7CD8cFvuweAa0KOVUGNQ19lLzJ7antvDI5XPAMSI=)
7: dukbn33Ogir7i7r4vD8U_2-uD0k.roa (hash: Qnah27HWaQWC9U8nihXoX9JQsARGjKgGqZfWIx2YcYg=)
8: oTNGV0Y7SaXlCklNzwFHJ1qEeUI.roa (hash: 1MTRBJjbkgRiCWVR5beZsUo8EaPKlW5X/iPni1dYgA8=)
9: tOjC-880lUvIDXcMv4Td0baNxyA.roa (hash: 9ecFS71NaP3AlhNnMbdDSrsMVob6HFpLwU4ec3vZFPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:d0:42:68:9f:f7:c0:2d:0c:07:fa:26:10:84:62:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64fa66fb84a781a0584fd0d1c2df39bda4760519
Validity
Not Before: Jul 28 13:00:48 2026 GMT
Not After : Jul 29 13:00:48 2026 GMT
Subject: CN=07b995b032897b5dc41ae9a5a321b616b1b4c860
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e6:91:40:09:d6:42:24:c7:dd:69:2d:bc:3f:
d5:b7:6b:ec:95:2b:a7:e7:1f:f6:e8:67:d1:99:cd:
6f:ef:b5:83:1e:a7:87:ac:ab:c2:ad:4b:9c:d8:cb:
c8:1d:8d:b7:f7:b7:79:56:83:91:ad:ce:e2:2a:6d:
e2:58:86:f9:6c:56:10:e5:b4:e4:3b:75:6d:83:5b:
d3:55:cc:ff:72:47:cf:f6:4b:79:05:9c:14:03:35:
60:a2:16:2d:ea:56:fa:4c:e8:85:41:dc:3d:ee:46:
cc:f6:84:78:cd:52:c1:c2:a8:6d:7e:f4:ee:f3:1d:
67:72:95:c3:0b:0e:96:c5:53:7d:57:f0:f8:a6:25:
a1:37:f4:a8:82:5f:0e:c8:a9:fb:5b:fe:8a:e3:6b:
e8:c7:0d:4e:cf:cb:87:53:9c:a4:97:6f:cc:2a:86:
93:19:45:32:c5:ac:46:b5:05:66:b9:61:28:86:08:
54:79:05:a3:51:47:fc:fa:bb:f1:06:b7:3c:43:87:
b7:56:2d:73:ca:09:f6:ed:6c:bc:c8:72:2e:9d:a0:
0c:cf:ac:1e:24:f8:f0:41:56:65:a5:6b:f4:6f:eb:
f6:a2:59:93:03:8d:d2:7e:da:ba:39:86:00:7d:9d:
88:c9:ca:29:57:1f:ae:85:56:8c:04:8b:66:79:e2:
d9:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:B9:95:B0:32:89:7B:5D:C4:1A:E9:A5:A3:21:B6:16:B1:B4:C8:60
X509v3 Authority Key Identifier:
keyid:64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:89:f1:9b:ee:f0:07:bb:59:92:2c:f9:2e:0a:b3:78:38:83:
19:4c:3e:bd:15:37:0f:b3:dc:49:ac:12:0b:74:90:ca:2c:66:
35:c2:dd:93:3b:f1:13:ca:c9:72:52:72:f4:6a:58:0b:e7:f4:
8a:7d:e5:7f:32:37:67:c7:de:91:5f:03:f4:1c:0f:4b:b5:b4:
53:d3:a3:f6:1a:07:1b:c6:19:6d:08:0b:35:aa:76:5f:7c:a9:
63:b7:22:61:e0:1b:f4:9c:eb:4b:00:a5:ee:52:e4:eb:8e:1e:
0c:2c:39:03:1d:42:32:98:02:a0:cb:9d:23:d2:3c:f5:2d:12:
5e:6d:40:f3:67:60:b5:e6:77:50:a9:8b:d8:54:05:1b:07:1b:
fa:31:26:a1:9b:68:1e:e7:89:26:c9:ec:61:b6:5c:41:18:f5:
7e:8f:f6:8f:9e:b9:a1:e3:12:87:d2:29:48:ab:78:2e:0a:38:
9d:91:2c:3f:0d:1e:82:02:3a:92:15:6f:c4:e6:d8:09:70:b8:
04:d2:f3:c4:b7:51:ae:d5:21:b2:12:f3:0e:11:44:c0:8e:5d:
e8:a6:bf:da:77:69:af:0f:fb:cb:8d:6f:d1:d2:63:f4:b3:87:
8a:e5:e5:5e:d3:5e:20:0e:b0:55:de:7b:5a:fc:8e:9e:c4:ac:
17:41:94:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:55:33 2026 by rpki-client