Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/09456e-a71c-43b3-bd40-8ee3d98cad5b/1/zRQ2kCMKRApot6iqmCefL2Xf7ig.mft
File: zRQ2kCMKRApot6iqmCefL2Xf7ig.mft (raw, json)
Hash identifier: htkk0UFBwRx3AWLFQ7jNEKNQ5d/uE2WpuNDe29UOOPI=
Subject key identifier: 10:71:0A:0B:44:E2:42:CA:C7:24:D2:9C:43:92:07:2A:DB:12:06:90
Authority key identifier: CD:14:36:90:23:0A:44:0A:68:B7:A8:AA:98:27:9F:2F:65:DF:EE:28
Certificate issuer: /CN=cd143690230a440a68b7a8aa98279f2f65dfee28
Certificate serial: 019FAAF535B304B0FA7F427F8EBCB1BCE2F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRQ2kCMKRApot6iqmCefL2Xf7ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/09456e-a71c-43b3-bd40-8ee3d98cad5b/1/zRQ2kCMKRApot6iqmCefL2Xf7ig.mft
Manifest number: 16D6
Signing time: Tue 28 Jul 2026 23:00:24 +0000
Manifest this update: Tue 28 Jul 2026 23:00:24 +0000
Manifest next update: Wed 29 Jul 2026 23:00:24 +0000
Files and hashes: 1: beStaP3U9BouVtR6HKL7Bht809g.roa (hash: 9C0Yz+gtWBKD86eXJ/yNK0jQEWAJqpkTW4DLxbpVN08=)
2: zRQ2kCMKRApot6iqmCefL2Xf7ig.crl (hash: NafS/jQYbpHoyQuQg1D3v5SxzNpua8akjbyKwf9K868=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/09456e-a71c-43b3-bd40-8ee3d98cad5b/1/zRQ2kCMKRApot6iqmCefL2Xf7ig.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/09456e-a71c-43b3-bd40-8ee3d98cad5b/1/zRQ2kCMKRApot6iqmCefL2Xf7ig.mft
rsync://rpki.ripe.net/repository/DEFAULT/zRQ2kCMKRApot6iqmCefL2Xf7ig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:38:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:35:b3:04:b0:fa:7f:42:7f:8e:bc:b1:bc:e2:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd143690230a440a68b7a8aa98279f2f65dfee28
Validity
Not Before: Jul 28 23:00:24 2026 GMT
Not After : Jul 29 23:00:24 2026 GMT
Subject: CN=10710a0b44e242cac724d29c4392072adb120690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c5:ed:6e:c5:d2:05:01:34:df:64:fb:00:10:
00:e5:ed:1f:d6:2a:14:73:2c:d2:05:74:bb:c6:b6:
e3:c8:75:62:2e:1d:54:f9:59:25:1d:77:21:c4:99:
c1:b5:98:09:cc:0e:48:60:60:74:79:96:88:b8:bd:
2b:0f:14:3d:fa:e8:2d:12:f6:21:cd:9e:3a:68:43:
91:bb:a8:ec:76:af:b3:86:44:0b:67:ed:69:86:b6:
73:20:aa:3d:01:b0:8b:74:04:db:09:41:ae:aa:28:
30:14:7e:b3:46:08:05:1b:62:c6:74:89:7d:d3:c2:
cb:ed:6a:8d:75:54:fe:66:2f:02:22:14:de:f9:9c:
b8:3a:24:5d:dc:af:fd:e0:06:0b:e8:b7:64:0b:5c:
87:7a:b5:6f:9a:fc:36:97:7f:5b:7b:7c:b7:19:eb:
21:35:44:b8:cd:4d:6b:e4:e9:75:4e:62:1d:93:a6:
a3:f1:d7:c3:c7:fc:97:9e:89:cd:19:d5:ea:1b:11:
d3:26:69:03:84:3b:26:9e:a6:80:c8:91:24:13:32:
4d:94:02:80:a7:9c:41:37:70:5b:a8:7c:4e:37:86:
78:39:1e:96:63:b0:b8:93:91:d9:45:4d:50:9b:f3:
b5:05:3f:56:a1:f6:bd:7c:eb:0c:47:02:a4:e3:c5:
16:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:71:0A:0B:44:E2:42:CA:C7:24:D2:9C:43:92:07:2A:DB:12:06:90
X509v3 Authority Key Identifier:
keyid:CD:14:36:90:23:0A:44:0A:68:B7:A8:AA:98:27:9F:2F:65:DF:EE:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRQ2kCMKRApot6iqmCefL2Xf7ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/09456e-a71c-43b3-bd40-8ee3d98cad5b/1/zRQ2kCMKRApot6iqmCefL2Xf7ig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/09456e-a71c-43b3-bd40-8ee3d98cad5b/1/zRQ2kCMKRApot6iqmCefL2Xf7ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:f7:33:a1:39:bc:70:fa:e1:fd:78:12:29:5d:cb:f3:ff:e7:
b3:6c:83:2d:e8:ea:e0:52:39:96:be:be:7b:4d:2e:68:b6:02:
c9:f5:e6:61:c1:bd:4b:3b:c3:6e:f7:79:ef:b1:dd:12:ca:93:
7c:8b:d6:44:ee:fa:41:93:d6:5e:e1:dd:f6:24:27:d8:2e:08:
77:94:48:9d:fd:41:6e:8f:27:e1:ad:d1:97:da:5c:34:c9:9a:
fb:a6:13:1b:17:e2:e3:95:3b:d9:7c:ae:b8:fe:51:f0:12:84:
68:40:95:7d:fe:0e:1c:6e:a1:92:9f:6a:5b:7a:4a:5e:6c:5b:
aa:96:d3:03:0a:16:c6:17:ab:ce:fd:a4:0e:bb:51:52:6e:59:
1f:12:2d:c8:96:10:41:85:05:43:1e:b9:e1:98:11:a2:a0:30:
e1:50:ce:d4:30:64:31:b2:50:b6:ba:35:60:84:91:4c:06:e7:
2f:6d:63:53:9a:1e:e0:72:78:2c:e5:13:40:73:1a:cb:67:65:
59:d8:1e:5c:c9:ec:26:5c:16:70:cc:f6:4a:71:2f:0d:7b:1e:
e6:4c:83:75:c2:a3:65:5f:48:15:53:3a:fb:d1:18:97:9b:e9:
ae:0e:71:9b:75:9e:d9:5f:df:1b:0d:29:bc:25:f5:2d:e0:6d:
94:34:bf:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:43:06 2026 by rpki-client