Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/a5e8d5-3264-46b2-8026-a39a9c775a50/1/dZx6SnoOrkiBN3Ob7HGisyRw-O0.mft
File: dZx6SnoOrkiBN3Ob7HGisyRw-O0.mft (raw, json)
Hash identifier: ts6+OXKdJ7xUajLnJd2eM1hv3UKl86yqpGsIXsZ8new=
Subject key identifier: A9:B0:8D:0A:A7:8F:8A:24:31:80:1E:2D:CF:F9:CB:41:E6:FA:83:F1
Authority key identifier: 75:9C:7A:4A:7A:0E:AE:48:81:37:73:9B:EC:71:A2:B3:24:70:F8:ED
Certificate issuer: /CN=759c7a4a7a0eae488137739bec71a2b32470f8ed
Certificate serial: 019FAAF5E6CD90B20F420EACA84FDEE59021
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dZx6SnoOrkiBN3Ob7HGisyRw-O0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/a5e8d5-3264-46b2-8026-a39a9c775a50/1/dZx6SnoOrkiBN3Ob7HGisyRw-O0.mft
Manifest number: 0227
Signing time: Tue 28 Jul 2026 23:01:09 +0000
Manifest this update: Tue 28 Jul 2026 23:01:09 +0000
Manifest next update: Wed 29 Jul 2026 23:01:09 +0000
Files and hashes: 1: 5vgf_9aZThkj_7VAzPV1SdycQ9s.roa (hash: WWuwQNMz2jPS1Lz9ZyTa8kKgvLVWvH3DolJRQpBYZVw=)
2: ZUFdt76XEIRqjB1ZsCU8KDPIIeE.roa (hash: +22Qmq4Y9pNmDRsynGIXRX9EtOmlc0lMrcEc8jeBxvw=)
3: dZx6SnoOrkiBN3Ob7HGisyRw-O0.crl (hash: i8c1WmprM1P2CImTvKfVnn83SiPIZnj2nXTY37Zv3+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/a5e8d5-3264-46b2-8026-a39a9c775a50/1/dZx6SnoOrkiBN3Ob7HGisyRw-O0.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/a5e8d5-3264-46b2-8026-a39a9c775a50/1/dZx6SnoOrkiBN3Ob7HGisyRw-O0.mft
rsync://rpki.ripe.net/repository/DEFAULT/dZx6SnoOrkiBN3Ob7HGisyRw-O0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:e6:cd:90:b2:0f:42:0e:ac:a8:4f:de:e5:90:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=759c7a4a7a0eae488137739bec71a2b32470f8ed
Validity
Not Before: Jul 28 23:01:09 2026 GMT
Not After : Jul 29 23:01:09 2026 GMT
Subject: CN=a9b08d0aa78f8a2431801e2dcff9cb41e6fa83f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:84:1a:9b:38:3c:9f:36:0b:95:9f:86:44:1c:
f4:b4:50:70:c5:7f:2f:ac:2b:9f:b4:70:d8:8b:65:
94:a1:58:f6:c8:4d:3c:0d:af:de:aa:9b:b2:3c:50:
55:c0:5f:4c:4c:56:cd:32:1d:35:b7:c5:48:85:0d:
b4:54:c5:cd:cc:9c:29:59:ce:8c:11:ac:3a:2b:7e:
3a:0d:f1:3d:4b:7d:05:fe:7c:77:0b:ce:80:d6:c1:
da:19:35:71:68:12:cc:2f:28:48:9a:c5:67:50:49:
b0:39:41:d3:38:9b:20:1d:4e:50:d2:96:85:f2:a4:
14:6d:6d:2e:12:d3:34:53:22:0d:08:f5:7b:c1:9e:
bd:65:04:79:ee:df:9f:66:19:25:dd:03:88:9f:b5:
85:50:20:1a:4c:45:73:73:2d:b0:46:34:7b:6e:37:
6e:aa:6f:90:d6:cd:4f:cb:a9:8c:b5:2e:63:4b:c3:
54:98:b0:5e:50:18:91:e8:ea:8b:ee:a8:b4:75:75:
ca:b5:0c:3a:e3:55:b0:c3:c2:d3:41:91:38:9f:6e:
7f:64:2e:3e:da:90:9f:0c:e9:89:0e:3b:dc:44:96:
48:f5:f7:d7:e2:8f:e1:e7:fb:96:df:ec:85:64:3b:
34:80:dd:5f:17:3b:cf:71:2e:b5:95:37:ae:15:8e:
fd:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:B0:8D:0A:A7:8F:8A:24:31:80:1E:2D:CF:F9:CB:41:E6:FA:83:F1
X509v3 Authority Key Identifier:
keyid:75:9C:7A:4A:7A:0E:AE:48:81:37:73:9B:EC:71:A2:B3:24:70:F8:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZx6SnoOrkiBN3Ob7HGisyRw-O0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a5e8d5-3264-46b2-8026-a39a9c775a50/1/dZx6SnoOrkiBN3Ob7HGisyRw-O0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a5e8d5-3264-46b2-8026-a39a9c775a50/1/dZx6SnoOrkiBN3Ob7HGisyRw-O0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:eb:1d:87:71:44:f2:d9:85:5d:ce:cb:7d:55:78:5a:f1:74:
c5:6f:b2:98:41:7f:1f:e8:3a:8d:1b:31:d1:c7:5f:3a:e4:69:
85:ce:e0:07:58:7b:da:af:60:16:c1:20:22:e8:f6:f9:47:cf:
4e:ab:42:8f:76:d2:2c:5d:c3:9e:02:74:3c:84:53:1d:06:82:
6b:ba:1f:b7:d1:6f:56:0b:63:6b:d1:1f:c4:99:47:d4:39:95:
10:b8:d4:d3:2a:95:6b:75:57:59:89:0c:00:83:2b:a0:44:84:
68:1a:63:35:c1:9f:5a:99:11:83:02:da:9f:2b:0a:36:4a:26:
c2:d9:1d:00:db:47:54:ba:90:60:90:eb:ea:45:f7:d4:27:44:
bc:e7:5a:84:b9:36:36:e9:3d:a6:a3:ef:58:4d:a3:1e:12:28:
98:cd:7e:04:7f:40:59:27:e2:23:fb:83:09:65:ea:06:ae:19:
32:51:a4:d5:6d:ca:52:96:7a:26:15:d7:0e:5c:31:6c:6b:9b:
8f:67:dd:75:1d:4a:2c:5e:8c:60:31:88:3e:63:64:97:77:c1:
09:8c:71:6c:6a:e0:78:2c:df:f3:ea:54:a0:fc:61:cc:be:a8:
f9:2f:d4:8c:1e:81:b6:93:ff:26:a8:8c:3e:f2:30:8a:51:1b:
36:b6:69:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:34:12 2026 by rpki-client