Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/bd75b1-174b-417c-8750-eb8a453bc56e/1/ZgiZEzMp-qW1cWsclfuvkwIfvGE.mft
File: ZgiZEzMp-qW1cWsclfuvkwIfvGE.mft (raw, json)
Hash identifier: W4geS14mKFwR4VyFN1fyp+9SJHnz2grBWdwOTIjB824=
Subject key identifier: F8:DF:44:63:FE:B2:23:95:79:AE:21:40:7D:68:EC:03:01:C3:FF:87
Authority key identifier: 66:08:99:13:33:29:FA:A5:B5:71:6B:1C:95:FB:AF:93:02:1F:BC:61
Certificate issuer: /CN=660899133329faa5b5716b1c95fbaf93021fbc61
Certificate serial: 019FAB2C4BB4FB981AC17206D95451428A98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZgiZEzMp-qW1cWsclfuvkwIfvGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/bd75b1-174b-417c-8750-eb8a453bc56e/1/ZgiZEzMp-qW1cWsclfuvkwIfvGE.mft
Manifest number: 10B8
Signing time: Wed 29 Jul 2026 00:00:34 +0000
Manifest this update: Wed 29 Jul 2026 00:00:34 +0000
Manifest next update: Thu 30 Jul 2026 00:00:34 +0000
Files and hashes: 1: ZgiZEzMp-qW1cWsclfuvkwIfvGE.crl (hash: vfPnEy6Ge79tP7IZ7S9qlGU1aEePyIdGlNxthL1tPyQ=)
2: kO3ikc55etvofjUz54lkxBw2Zts.roa (hash: FQtm/UjIvg0izBKVwcfTdDDZlcQWbE25eid7tWcMESM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/bd75b1-174b-417c-8750-eb8a453bc56e/1/ZgiZEzMp-qW1cWsclfuvkwIfvGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/bd75b1-174b-417c-8750-eb8a453bc56e/1/ZgiZEzMp-qW1cWsclfuvkwIfvGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZgiZEzMp-qW1cWsclfuvkwIfvGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:2c:4b:b4:fb:98:1a:c1:72:06:d9:54:51:42:8a:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=660899133329faa5b5716b1c95fbaf93021fbc61
Validity
Not Before: Jul 29 00:00:34 2026 GMT
Not After : Jul 30 00:00:34 2026 GMT
Subject: CN=f8df4463feb2239579ae21407d68ec0301c3ff87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:19:55:55:c3:be:5d:73:32:7e:67:85:a0:2e:
66:be:fb:4e:d4:6d:40:08:09:3f:e3:7f:62:95:45:
12:33:3a:28:bb:c4:db:d4:b3:00:c5:1e:12:da:90:
6a:1f:a3:7c:af:85:f3:30:16:7a:a1:64:1c:21:85:
c5:35:bb:e9:39:17:94:42:32:6e:94:3d:1e:1e:78:
11:53:d8:05:53:4f:a5:ba:ce:de:94:0b:dd:5f:0d:
0f:58:89:39:a0:42:1e:77:9b:76:78:20:e6:6f:52:
de:ee:d6:5b:5f:41:fb:45:33:23:22:2b:76:ab:83:
06:1e:5c:16:86:02:cb:d9:e5:7a:fc:7a:ab:20:b5:
5f:c3:05:c6:6a:39:2f:dd:0f:8f:d9:19:bb:9e:17:
b7:b4:f1:c9:20:91:b9:d3:ff:49:47:bd:7d:d6:c7:
9c:8a:d8:e6:2f:84:a6:01:c6:26:da:59:49:68:e7:
24:eb:1e:96:19:e4:67:40:65:32:4a:d3:28:45:b2:
6f:ea:83:99:c1:46:9d:b8:58:07:d9:0d:f5:ac:f4:
44:5f:b8:4f:bb:93:76:64:bf:71:42:d7:03:d1:30:
38:d0:68:5d:60:f1:9c:0c:c4:a0:a0:f2:b2:fd:02:
4f:ab:28:9c:c0:8d:2d:21:02:84:1c:06:6b:02:6a:
cb:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:DF:44:63:FE:B2:23:95:79:AE:21:40:7D:68:EC:03:01:C3:FF:87
X509v3 Authority Key Identifier:
keyid:66:08:99:13:33:29:FA:A5:B5:71:6B:1C:95:FB:AF:93:02:1F:BC:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZgiZEzMp-qW1cWsclfuvkwIfvGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/bd75b1-174b-417c-8750-eb8a453bc56e/1/ZgiZEzMp-qW1cWsclfuvkwIfvGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/bd75b1-174b-417c-8750-eb8a453bc56e/1/ZgiZEzMp-qW1cWsclfuvkwIfvGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:22:92:ea:f7:ec:12:a4:ef:a7:3b:76:a8:89:83:dc:fa:9a:
a4:06:58:1f:88:24:65:48:12:c2:51:1d:25:b7:33:a0:88:0d:
c3:0f:eb:e3:ab:2f:93:74:d8:04:cf:ae:2b:ca:04:0f:58:d2:
e5:ab:4b:68:ad:26:08:ef:b1:cc:aa:11:9a:04:52:60:39:0a:
9b:73:3e:99:0e:e1:fd:c6:09:9d:da:e4:91:fd:4c:d3:f6:b4:
4d:21:50:24:3d:5e:6a:84:38:2f:e0:ae:8d:70:88:0c:f2:ce:
18:a7:61:60:d7:e8:d8:bb:7c:96:11:d2:7c:2a:13:69:c1:31:
e6:97:63:43:f3:fb:f3:87:5b:ce:b6:48:af:55:79:6f:22:24:
70:b5:7d:e0:88:93:43:d4:ad:40:05:98:b1:81:d0:31:12:5e:
7f:51:0d:cc:24:0a:a0:5b:98:9f:e0:1d:e1:04:91:b0:2c:99:
bb:9b:35:6b:0c:1c:d3:e9:39:a2:86:7e:f4:a5:e2:55:7d:83:
ca:d3:49:83:29:6a:35:bc:ee:d1:e7:0b:2d:76:a3:ed:49:77:
99:eb:8c:a1:bf:61:d6:01:33:57:94:e2:f0:4f:21:33:f1:72:
22:88:cc:d0:c8:80:6d:7a:0f:89:bd:a6:4d:9c:1b:27:2e:bc:
65:18:9c:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:34:14 2026 by rpki-client