Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.mft
File: Zl5NfqijRwyXA-51UUgcNvd0_rs.mft (raw, json)
Hash identifier: rpqKVKe+2L8BUoSXwqkz4wqERfyVJNML/V0j0a7RCBY=
Subject key identifier: 39:1D:4A:5C:73:7C:36:71:D3:ED:5E:22:60:87:A2:DA:8A:FC:4C:2F
Authority key identifier: 66:5E:4D:7E:A8:A3:47:0C:97:03:EE:75:51:48:1C:36:F7:74:FE:BB
Certificate issuer: /CN=665e4d7ea8a3470c9703ee7551481c36f774febb
Certificate serial: 019FAD1B0097C3870419470C120F38FAB434
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zl5NfqijRwyXA-51UUgcNvd0_rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.mft
Manifest number: 16F2
Signing time: Wed 29 Jul 2026 09:00:55 +0000
Manifest this update: Wed 29 Jul 2026 09:00:55 +0000
Manifest next update: Thu 30 Jul 2026 09:00:55 +0000
Files and hashes: 1: Zl5NfqijRwyXA-51UUgcNvd0_rs.crl (hash: 6AKCDuQlXeRgeCE35u2TDuXxMZxxVyZYoQeABJ8m9DA=)
2: tXb-ZOETTYTckpb9Qysc1kmvy6I.roa (hash: ecwsDlNutKSR5EQe4HHz/G8gZ+2PHPrWaHUQyPF5OHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zl5NfqijRwyXA-51UUgcNvd0_rs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:1b:00:97:c3:87:04:19:47:0c:12:0f:38:fa:b4:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=665e4d7ea8a3470c9703ee7551481c36f774febb
Validity
Not Before: Jul 29 09:00:55 2026 GMT
Not After : Jul 30 09:00:55 2026 GMT
Subject: CN=391d4a5c737c3671d3ed5e226087a2da8afc4c2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:67:af:23:b5:1e:db:4d:02:fb:7d:26:af:06:
0a:84:78:0b:df:6c:73:00:d9:ad:d4:ae:02:d6:d2:
33:14:d3:ff:50:54:76:47:36:37:53:9b:ee:f5:20:
c7:85:e6:e6:10:bd:4b:af:65:6e:f2:0a:7a:0c:22:
a6:25:30:69:28:c9:f8:8b:3b:0c:a7:9a:79:e1:94:
ab:ac:9e:47:e2:4e:b5:ab:b0:40:17:68:6a:b8:b2:
82:cd:9b:a8:70:3f:ec:53:2e:98:31:ae:5d:b3:a2:
de:48:2b:58:4b:2f:10:d7:4d:e8:40:67:e4:b3:86:
e1:81:cd:6a:d0:54:71:d4:8b:76:95:c9:90:a0:57:
b4:7e:8d:76:45:fd:ee:1e:e3:67:1b:4c:65:8e:64:
c8:67:79:e7:93:a5:76:27:7c:e9:b9:cd:39:d6:6f:
87:dc:a4:b1:b9:64:e3:de:11:76:26:aa:64:8c:47:
86:3c:44:be:00:44:e6:e9:dc:65:e6:95:39:9a:fe:
07:3b:db:19:3c:4f:2c:13:61:26:85:2e:9f:38:bc:
d0:4a:f7:19:18:0f:76:b8:bd:32:13:bd:88:77:3a:
45:38:48:49:b1:de:18:92:4c:42:f1:06:1f:22:3a:
8b:1b:30:90:98:b3:f7:6e:78:1f:dc:c7:d2:b7:c9:
71:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:1D:4A:5C:73:7C:36:71:D3:ED:5E:22:60:87:A2:DA:8A:FC:4C:2F
X509v3 Authority Key Identifier:
keyid:66:5E:4D:7E:A8:A3:47:0C:97:03:EE:75:51:48:1C:36:F7:74:FE:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zl5NfqijRwyXA-51UUgcNvd0_rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:b3:f8:87:37:2c:30:bf:bf:05:c4:2c:c9:1c:b1:c2:47:0b:
7d:65:31:63:3f:e8:43:0b:c4:25:d6:92:04:3b:3e:32:8d:6a:
7b:50:b3:0f:6c:58:37:2d:1d:f4:13:08:23:78:98:c6:86:fb:
d1:56:07:75:6b:0b:f8:ff:86:03:dc:6c:0a:55:72:15:db:93:
79:a5:03:4a:37:bc:57:56:c0:cc:38:f8:69:85:a8:25:82:d9:
82:95:dc:a1:ee:0d:f2:3d:af:2f:19:27:36:fc:10:94:d1:d2:
8f:a3:aa:3a:80:e3:63:75:3c:ca:4d:7b:d2:0c:99:cf:80:32:
c3:f7:15:22:4f:99:f3:81:cf:ca:66:6a:89:4d:c5:d0:66:04:
d2:53:ef:44:8f:5f:2f:f7:cd:5a:60:ec:e1:35:3a:85:84:2c:
eb:60:77:0f:31:11:74:32:1c:ef:5c:b0:36:ca:0b:5c:95:5b:
36:15:9b:c0:c7:b2:6e:b1:7d:77:23:b1:3d:ff:66:46:b2:36:
dc:4a:73:17:53:a0:e4:2c:82:9d:c2:cc:5f:c4:05:b2:5b:99:
21:ff:38:e6:cb:38:e2:d1:35:3a:5e:65:b1:e7:48:c6:96:1e:
65:3f:22:3c:4e:da:6d:32:65:0f:20:f5:a3:44:fd:e3:2b:20:
1a:96:2c:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:20:56 2026 by rpki-client