Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft
File: ZPpm-4SngaBYT9DRwt85vaR2BRk.mft (raw, json)
Hash identifier: HQGTy6EvNoc+zTyLblbdd0cNRSxsaVgGWw32zkA9eSs=
Subject key identifier: 95:A0:64:77:D6:7E:FA:14:65:59:04:E3:0F:32:0E:92:C4:8C:AE:D4
Authority key identifier: 64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19
Certificate issuer: /CN=64fa66fb84a781a0584fd0d1c2df39bda4760519
Certificate serial: 019FAABEA7BE84AA826CC1A8D563AD183FDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft
Manifest number: 1A48
Signing time: Tue 28 Jul 2026 22:00:48 +0000
Manifest this update: Tue 28 Jul 2026 22:00:48 +0000
Manifest next update: Wed 29 Jul 2026 22:00:48 +0000
Files and hashes: 1: 5fUbTKl8FSPc1kSYGwQAsVfb2vQ.roa (hash: PLRtthNs8hk5vDeIh9r/ACQzulJpBpXJunHHwis/BW4=)
2: KHKZ9oAR4pOjsmM70Mx2jjXuCSc.roa (hash: KQJvV0lMLENSykGh1gJfx02ynaMwFLdd0OilipOgatU=)
3: KhGccG-9kSJW0nKCk6yANGIBUFg.roa (hash: zywPAJ1T+FuIU1G9CdS4XD+lquEKkevubyLrKuYUwfk=)
4: WfYZ1TfImT3yRIrYlNuuVCM96nE.roa (hash: 4hQnLNa6AvcfooEXSYRpCYSRQGf1HFK3GJPOn5OeTYg=)
5: ZPpm-4SngaBYT9DRwt85vaR2BRk.crl (hash: 5x29fqr7Qt6wIQ351KXomAMOmb/nGv2dw9LVA+7wh+k=)
6: bWULgqZwLFtgMnHWpi5ob6mG51g.roa (hash: lfo7CD8cFvuweAa0KOVUGNQ19lLzJ7antvDI5XPAMSI=)
7: dukbn33Ogir7i7r4vD8U_2-uD0k.roa (hash: Qnah27HWaQWC9U8nihXoX9JQsARGjKgGqZfWIx2YcYg=)
8: oTNGV0Y7SaXlCklNzwFHJ1qEeUI.roa (hash: 1MTRBJjbkgRiCWVR5beZsUo8EaPKlW5X/iPni1dYgA8=)
9: tOjC-880lUvIDXcMv4Td0baNxyA.roa (hash: 9ecFS71NaP3AlhNnMbdDSrsMVob6HFpLwU4ec3vZFPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:a7:be:84:aa:82:6c:c1:a8:d5:63:ad:18:3f:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64fa66fb84a781a0584fd0d1c2df39bda4760519
Validity
Not Before: Jul 28 22:00:48 2026 GMT
Not After : Jul 29 22:00:48 2026 GMT
Subject: CN=95a06477d67efa14655904e30f320e92c48caed4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:e2:cd:29:cc:f4:7c:fa:99:c6:da:5e:85:3e:
4a:46:f3:c5:76:fe:fb:04:48:1a:9e:a2:26:11:eb:
88:54:1c:1e:3e:43:70:84:ea:8b:c6:97:c7:27:5e:
07:35:06:1a:3e:93:8a:ab:8a:66:ee:40:f5:b5:1a:
34:2d:9c:5a:59:0c:c4:01:a3:fc:13:af:eb:5f:f3:
86:9c:8a:0f:8b:fe:2e:e5:e9:26:0b:58:89:9f:8d:
6a:79:e0:54:2b:a2:98:63:78:b7:12:27:bc:97:b2:
11:ff:c1:43:a8:6d:66:be:4d:57:c2:3b:d4:cb:a5:
26:06:90:8a:e5:9e:db:1a:d2:77:bc:b5:a5:b9:75:
db:94:03:26:1a:e9:25:57:0e:22:72:64:4b:cf:b7:
b8:76:75:28:a9:8c:98:21:be:96:ad:4b:0a:9b:58:
ea:28:3b:d2:73:0f:65:ff:7a:d1:80:68:e8:39:4b:
cd:1c:7e:58:25:f9:45:ca:a3:e5:9a:a7:e6:d7:47:
63:22:6c:5b:d7:34:b5:80:d7:d9:e2:fb:63:45:df:
8b:01:9f:a9:11:a4:75:62:e0:65:c4:83:0c:5a:7e:
60:66:03:83:c7:20:51:a5:01:ab:5c:f6:70:78:54:
e6:9b:df:97:5d:23:c3:9a:25:37:03:d6:ca:75:55:
6d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:A0:64:77:D6:7E:FA:14:65:59:04:E3:0F:32:0E:92:C4:8C:AE:D4
X509v3 Authority Key Identifier:
keyid:64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:a2:22:6a:c3:8f:1a:9b:67:ad:1c:c2:d6:33:7f:0f:b4:19:
21:29:f1:0c:01:f4:93:f7:6b:d2:fc:de:c5:91:b9:d5:f9:74:
2c:89:1c:9b:bf:bb:61:df:44:ac:93:7a:8d:40:1f:6d:cf:96:
56:9a:45:6d:c6:24:a8:20:12:bf:18:5c:03:1d:d3:d1:22:0a:
da:c5:74:63:1c:c0:10:ef:aa:8d:a9:2a:68:95:62:f5:b6:ec:
24:e3:bb:ec:1c:ad:f7:a1:15:55:44:ab:c2:c5:0d:59:e2:66:
be:b8:09:ce:62:5a:9a:02:00:21:ab:f8:36:95:e9:21:fd:33:
5f:3e:f4:5a:e5:dc:16:8a:91:53:96:dc:c4:6f:ed:2c:d4:df:
c2:2c:c1:33:69:7b:19:48:05:f1:f3:6a:35:0e:dc:30:91:96:
68:97:e6:5d:03:6d:a7:1d:c1:dc:7c:e1:f0:8d:eb:99:3d:26:
7c:73:94:9f:5d:73:d9:df:65:31:c1:be:1e:d7:7e:d8:bd:f8:
18:41:ed:dd:08:42:e6:c6:f6:1c:b5:91:1b:66:13:2a:9e:0a:
9d:e8:1d:e4:9c:ee:b4:db:8b:63:63:0b:b0:bf:18:97:9b:2f:
31:8b:8d:82:53:94:55:aa:aa:7d:6f:28:0e:51:8b:ce:8a:b2:
0f:eb:c2:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:36:44 2026 by rpki-client