Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/407a3f-66c0-4979-a725-09eb0013fc24/1/zJgWyv_6ViY90NdIGclNVALxu20.mft
File: zJgWyv_6ViY90NdIGclNVALxu20.mft (raw, json)
Hash identifier: qxFw+HtWm3lZy//ALF7WeUoAXuhb2ZCyvZHxv6bjgbU=
Subject key identifier: 35:51:1F:6C:B3:54:0E:7C:4C:B7:4C:21:BD:8B:2A:19:46:67:D6:E6
Authority key identifier: CC:98:16:CA:FF:FA:56:26:3D:D0:D7:48:19:C9:4D:54:02:F1:BB:6D
Certificate issuer: /CN=cc9816cafffa56263dd0d74819c94d5402f1bb6d
Certificate serial: 019FA7BD5D9E323EC8253247ED03422914E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zJgWyv_6ViY90NdIGclNVALxu20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/407a3f-66c0-4979-a725-09eb0013fc24/1/zJgWyv_6ViY90NdIGclNVALxu20.mft
Manifest number: 0587
Signing time: Tue 28 Jul 2026 08:00:33 +0000
Manifest this update: Tue 28 Jul 2026 08:00:33 +0000
Manifest next update: Wed 29 Jul 2026 08:00:33 +0000
Files and hashes: 1: 8hUTE1rNYy5U_ZEAjeKyMjN64k0.asa (hash: WUMeLZ4dr9HFfgEPPRc+l/n2HJv4KBfKC27gniFGLbQ=)
2: e9f3B44EK2wKomC2T7X1vPJt_tY.roa (hash: w9sFrHQXnGx9nnQqHsGkGtrOe5lM1/FzKdCvsaW8Vb0=)
3: zJgWyv_6ViY90NdIGclNVALxu20.crl (hash: sj5Hwk6tjaQ+MrvgBTuObPsgpoq+xGVWQD+Ddny+jxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/407a3f-66c0-4979-a725-09eb0013fc24/1/zJgWyv_6ViY90NdIGclNVALxu20.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/407a3f-66c0-4979-a725-09eb0013fc24/1/zJgWyv_6ViY90NdIGclNVALxu20.mft
rsync://rpki.ripe.net/repository/DEFAULT/zJgWyv_6ViY90NdIGclNVALxu20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:bd:5d:9e:32:3e:c8:25:32:47:ed:03:42:29:14:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc9816cafffa56263dd0d74819c94d5402f1bb6d
Validity
Not Before: Jul 28 08:00:33 2026 GMT
Not After : Jul 29 08:00:33 2026 GMT
Subject: CN=35511f6cb3540e7c4cb74c21bd8b2a194667d6e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5f:ae:ee:31:ea:7b:0c:65:43:ed:8c:ef:c1:
a8:29:b8:b2:b8:a9:b8:67:23:d5:d3:88:dd:33:51:
04:b9:fc:9c:a3:a9:1e:c2:a8:c3:a0:28:08:6b:52:
5f:03:87:d2:20:68:30:45:3c:a3:c1:6e:6d:cb:38:
50:5e:6d:9f:ee:d8:dc:88:79:a8:ab:ed:60:fc:c8:
11:8e:ff:ae:22:6e:14:09:e7:11:3e:ea:f9:15:e9:
21:e3:a0:41:91:9d:d2:6e:3c:92:8f:22:16:95:09:
3b:86:77:56:e4:8e:c4:90:9d:28:24:da:01:82:ca:
24:0d:78:97:a0:d2:ec:c1:08:f0:9f:84:ac:bb:42:
30:a5:0c:6e:0b:fd:96:fc:44:48:fb:ea:fa:91:ef:
1d:2e:09:90:07:a1:b8:14:3a:6d:c2:35:2f:41:88:
1c:f9:47:0b:cd:dd:8a:e2:eb:7b:35:75:2b:59:84:
6b:e5:94:0a:bd:ee:32:57:d1:93:8a:0e:ee:16:60:
81:6a:2c:34:b5:de:05:09:f0:80:22:dd:4d:ff:cb:
f6:a4:f9:2b:94:64:6e:4c:fb:3c:bf:48:42:a8:cf:
f0:95:c8:be:47:e3:39:64:a3:ff:fa:3c:f6:ff:b3:
5c:8f:bf:8c:52:0a:94:e5:c5:65:a6:8e:43:cf:5c:
58:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:51:1F:6C:B3:54:0E:7C:4C:B7:4C:21:BD:8B:2A:19:46:67:D6:E6
X509v3 Authority Key Identifier:
keyid:CC:98:16:CA:FF:FA:56:26:3D:D0:D7:48:19:C9:4D:54:02:F1:BB:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zJgWyv_6ViY90NdIGclNVALxu20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/407a3f-66c0-4979-a725-09eb0013fc24/1/zJgWyv_6ViY90NdIGclNVALxu20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/407a3f-66c0-4979-a725-09eb0013fc24/1/zJgWyv_6ViY90NdIGclNVALxu20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:0b:92:a2:fe:a4:01:10:19:63:88:45:75:53:f3:36:0b:06:
17:1e:e7:8f:cc:42:52:94:8e:f0:7c:ee:7d:03:cf:01:95:18:
45:f8:7d:cb:50:0a:b2:5f:bb:b0:99:c8:de:a2:ae:ce:e6:18:
48:fe:31:5e:9c:4b:09:6a:11:e4:bf:1f:7b:4e:8f:34:a4:17:
f2:93:64:7f:3c:a1:58:a3:42:3e:6a:56:bd:18:db:b2:83:36:
27:98:29:a1:08:6b:45:b7:d8:fc:4d:3c:d5:50:89:86:15:de:
b1:94:c6:77:0e:7f:3d:46:94:7a:67:16:9d:44:ff:ef:30:d7:
1b:ca:46:1e:3b:87:a4:98:f2:ec:07:bf:af:d2:d2:4d:cf:aa:
52:f9:51:ff:cb:1f:f0:a5:9b:59:b8:ae:2e:1a:ee:32:07:ff:
e8:6f:08:83:bc:0e:ff:8f:73:42:63:a9:d8:96:39:ac:62:22:
a5:ba:6f:dc:ec:3e:78:a1:57:b4:7c:9e:b8:db:e4:28:ff:79:
da:f7:f7:a3:44:a9:a4:8d:d0:90:49:a7:ca:d9:e3:04:4d:da:
a0:ea:fb:6c:65:1d:9d:4f:82:04:27:33:85:27:fb:e9:09:30:
d2:6e:0e:81:86:77:bd:be:63:1b:1d:22:f5:ef:1e:9a:68:bd:
98:21:4f:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 13:40:33 2026 by rpki-client