Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/a5e8d5-3264-46b2-8026-a39a9c775a50/1/dZx6SnoOrkiBN3Ob7HGisyRw-O0.mft
File: dZx6SnoOrkiBN3Ob7HGisyRw-O0.mft (raw, json)
Hash identifier: KhepYUzFF18if5fdzwfjnr8qSK7tsuJZsnKJD+7rhqE=
Subject key identifier: EF:30:13:4E:DE:D0:0E:BA:02:EC:8A:F5:27:EA:3C:64:CF:46:A8:DD
Authority key identifier: 75:9C:7A:4A:7A:0E:AE:48:81:37:73:9B:EC:71:A2:B3:24:70:F8:ED
Certificate issuer: /CN=759c7a4a7a0eae488137739bec71a2b32470f8ed
Certificate serial: 019FACE3AE8830B73CE34E6CD4D582BD04D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dZx6SnoOrkiBN3Ob7HGisyRw-O0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/a5e8d5-3264-46b2-8026-a39a9c775a50/1/dZx6SnoOrkiBN3Ob7HGisyRw-O0.mft
Manifest number: 0228
Signing time: Wed 29 Jul 2026 08:00:30 +0000
Manifest this update: Wed 29 Jul 2026 08:00:30 +0000
Manifest next update: Thu 30 Jul 2026 08:00:30 +0000
Files and hashes: 1: 5vgf_9aZThkj_7VAzPV1SdycQ9s.roa (hash: WWuwQNMz2jPS1Lz9ZyTa8kKgvLVWvH3DolJRQpBYZVw=)
2: ZUFdt76XEIRqjB1ZsCU8KDPIIeE.roa (hash: +22Qmq4Y9pNmDRsynGIXRX9EtOmlc0lMrcEc8jeBxvw=)
3: dZx6SnoOrkiBN3Ob7HGisyRw-O0.crl (hash: ToKxGaxm8k7QMQg9wKNuE9k6as5lnIorJPwD10HtdhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/a5e8d5-3264-46b2-8026-a39a9c775a50/1/dZx6SnoOrkiBN3Ob7HGisyRw-O0.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/a5e8d5-3264-46b2-8026-a39a9c775a50/1/dZx6SnoOrkiBN3Ob7HGisyRw-O0.mft
rsync://rpki.ripe.net/repository/DEFAULT/dZx6SnoOrkiBN3Ob7HGisyRw-O0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:e3:ae:88:30:b7:3c:e3:4e:6c:d4:d5:82:bd:04:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=759c7a4a7a0eae488137739bec71a2b32470f8ed
Validity
Not Before: Jul 29 08:00:30 2026 GMT
Not After : Jul 30 08:00:30 2026 GMT
Subject: CN=ef30134eded00eba02ec8af527ea3c64cf46a8dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:22:71:c3:c8:f2:8c:c8:cb:2c:16:ad:34:1a:
72:53:99:42:b2:2b:11:e2:1d:73:36:28:36:75:59:
f7:f7:6c:a3:31:e1:ca:5f:bc:06:20:72:9a:db:2b:
e3:38:4e:50:15:e5:c6:38:39:17:60:5d:d1:4a:be:
bb:d0:8c:b8:bd:2d:75:12:ff:e4:ce:f9:3b:c6:b3:
f3:04:b9:6a:de:90:b2:9b:2e:a3:4e:06:4e:d9:12:
66:be:d8:f4:84:6f:1d:d1:e8:ab:93:5a:3a:65:0f:
8e:7d:d7:ea:7e:b4:57:5d:45:90:e8:41:4c:e0:df:
40:9e:4c:e9:d1:65:87:5e:26:ba:e5:6e:7f:8b:fe:
0c:0f:6d:d6:ec:5a:cd:e7:41:ef:8f:af:24:2f:68:
68:f3:82:e3:85:f6:63:5e:39:30:69:37:e6:0a:4b:
75:18:0a:f8:29:72:7b:98:0d:82:d3:8e:e8:7b:5b:
bf:ef:f8:8c:3d:1a:a4:e6:f4:39:1f:79:a2:30:d8:
7e:b3:ed:0e:0c:5a:55:dd:a9:33:bd:7c:49:f0:6e:
be:9a:1d:c3:0d:2b:78:56:c4:77:6d:dd:7b:49:7b:
f1:11:84:42:82:bc:9b:58:df:c2:8a:fa:3c:29:c4:
1e:6a:99:7a:e7:34:2b:c2:c8:32:a1:b1:d8:b9:ea:
ad:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:30:13:4E:DE:D0:0E:BA:02:EC:8A:F5:27:EA:3C:64:CF:46:A8:DD
X509v3 Authority Key Identifier:
keyid:75:9C:7A:4A:7A:0E:AE:48:81:37:73:9B:EC:71:A2:B3:24:70:F8:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZx6SnoOrkiBN3Ob7HGisyRw-O0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a5e8d5-3264-46b2-8026-a39a9c775a50/1/dZx6SnoOrkiBN3Ob7HGisyRw-O0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a5e8d5-3264-46b2-8026-a39a9c775a50/1/dZx6SnoOrkiBN3Ob7HGisyRw-O0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:7d:58:09:98:48:e1:ac:93:83:87:15:c2:07:57:ec:ce:49:
b9:d6:3d:1b:d8:7e:5c:f4:63:12:c9:dd:b6:37:b0:d9:0b:e6:
ea:ed:e7:d2:72:fe:59:a5:39:c4:48:f6:14:db:98:2e:d8:ed:
98:f1:d2:56:0e:a6:d9:a0:a1:56:33:55:7a:8e:3c:21:71:1a:
fb:bb:97:c4:c1:b6:81:6d:36:02:35:1a:0a:e3:f0:69:3b:50:
5a:9a:ea:50:d7:4e:6e:a2:de:33:46:fc:bf:50:a8:ac:3f:fa:
2b:90:34:3e:04:7a:3d:d9:d6:ae:60:b4:6f:65:44:0b:8f:b9:
0b:85:5c:b7:cf:63:89:1a:fa:6a:c2:b9:7c:eb:a5:b2:b3:e2:
5e:41:6a:96:fa:7f:b7:bd:99:f0:72:a0:a1:c2:72:f3:17:f4:
5c:62:1c:59:0b:84:d1:96:56:d7:00:a7:65:b6:b4:36:37:0f:
64:e2:b4:16:d0:f3:da:af:82:df:5b:ed:96:20:87:1b:65:90:
78:ef:0b:80:fd:90:d6:7b:40:86:dc:8a:fb:ed:2e:13:da:3c:
0d:ec:d6:ae:20:f0:34:4d:3b:1b:7b:6c:7e:60:2e:28:ee:33:
99:39:55:18:c3:c6:15:e6:21:4f:f1:17:c8:c6:38:bb:06:70:
3a:84:a5:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:11:01 2026 by rpki-client