Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.mft
File: zsR4iytpLHEDscueFhf4s2aRDxM.mft (raw, json)
Hash identifier: M0hwz3E7AZcmEZT9sUYrR64X3rseJxyyb3JDwyjii5o=
Subject key identifier: 22:72:71:89:59:FB:77:D2:F7:0D:69:97:64:BC:05:B1:C7:83:7F:1B
Authority key identifier: CE:C4:78:8B:2B:69:2C:71:03:B1:CB:9E:16:17:F8:B3:66:91:0F:13
Certificate issuer: /CN=cec4788b2b692c7103b1cb9e1617f8b366910f13
Certificate serial: 019FAB9A6B50EA7765F8788405E0F0522A64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsR4iytpLHEDscueFhf4s2aRDxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.mft
Manifest number: 1969
Signing time: Wed 29 Jul 2026 02:00:51 +0000
Manifest this update: Wed 29 Jul 2026 02:00:51 +0000
Manifest next update: Thu 30 Jul 2026 02:00:51 +0000
Files and hashes: 1: mnbpCMhVQRFBI3ISYQo0OAu64Rk.roa (hash: kpDbhBfOi3H13L7NCoXgIwXVigbDMdLQLlKaVJyFWOo=)
2: zsR4iytpLHEDscueFhf4s2aRDxM.crl (hash: 3J8ry4xQP8MytJQbFjkfasjSdHOZu4hOY+fhRzD4wzw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zsR4iytpLHEDscueFhf4s2aRDxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:9a:6b:50:ea:77:65:f8:78:84:05:e0:f0:52:2a:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec4788b2b692c7103b1cb9e1617f8b366910f13
Validity
Not Before: Jul 29 02:00:51 2026 GMT
Not After : Jul 30 02:00:51 2026 GMT
Subject: CN=2272718959fb77d2f70d699764bc05b1c7837f1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6e:f2:92:4e:31:40:37:52:85:dc:f4:23:68:
01:84:cb:6d:b3:5d:c3:8b:14:45:89:e8:ed:40:46:
8d:e4:58:41:a9:72:c1:1d:8b:fb:93:20:74:a7:5d:
d7:da:b6:41:d4:09:b6:7e:bb:5d:61:ff:dd:de:35:
36:99:4a:5f:cd:19:5c:dc:74:14:c8:df:16:14:7c:
96:e2:75:e0:ed:05:c3:a9:88:0a:16:90:ae:62:e7:
33:62:ee:7f:d0:31:fb:c8:1e:21:03:b3:fb:52:0e:
d6:23:fb:3e:23:d6:7a:16:aa:17:63:59:ed:78:4c:
4f:5c:3f:be:a5:32:18:5d:bc:bd:5b:06:bb:46:23:
34:ca:68:e4:31:ec:08:56:2d:be:14:a4:34:11:00:
a2:b3:5c:a6:61:38:be:44:4f:d5:79:36:9a:c4:39:
93:df:9a:50:fb:c3:79:fd:15:b7:14:a8:d9:ff:ab:
10:69:e1:03:28:43:36:f2:3d:e4:d0:1f:db:fe:62:
87:1e:4f:5d:be:b5:65:e7:52:c3:73:7f:86:3f:a5:
49:20:79:fc:e6:57:1e:98:62:6b:82:05:b1:82:ef:
86:9d:8c:dc:b1:05:71:6e:ed:27:f0:ed:df:d0:b7:
4e:8d:dd:84:bf:a1:84:dd:b3:d4:1e:e6:85:e0:e2:
95:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:72:71:89:59:FB:77:D2:F7:0D:69:97:64:BC:05:B1:C7:83:7F:1B
X509v3 Authority Key Identifier:
keyid:CE:C4:78:8B:2B:69:2C:71:03:B1:CB:9E:16:17:F8:B3:66:91:0F:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsR4iytpLHEDscueFhf4s2aRDxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:f0:fd:5f:69:9c:26:d0:2f:28:02:e2:80:b0:d8:42:2f:34:
26:85:a2:9c:36:fa:eb:61:32:7f:a7:58:53:66:31:1a:47:b5:
aa:3d:e7:6c:7b:94:96:87:1a:55:c6:72:e8:42:59:8c:42:ab:
a4:5c:66:81:6c:43:9e:2e:a0:a7:69:f0:06:03:3d:5e:76:e9:
1b:15:49:b0:3f:8a:fd:c3:0f:55:96:3e:ca:3e:5c:bb:3e:b3:
56:22:7c:98:41:4d:15:95:c5:c1:25:43:91:34:b9:f9:61:b4:
b2:0c:c4:63:7d:66:00:4c:a6:d9:5d:ad:95:16:23:a4:81:2a:
31:94:65:a2:a9:e5:74:11:d7:b2:90:b0:54:19:2c:c7:76:48:
2a:1b:8e:18:6b:02:f4:67:65:70:5b:62:1d:a0:b1:0e:d9:24:
2d:9c:ba:10:c8:17:8a:39:25:95:ed:51:2e:c2:08:36:62:4b:
91:8a:0c:84:83:68:37:e3:5a:88:39:26:61:00:8f:92:12:f5:
84:b9:e3:2f:e1:be:ca:31:3b:e1:26:97:f3:7f:07:ef:72:48:
0a:69:76:66:36:2d:15:be:8a:a8:c3:63:74:32:3d:57:79:64:
71:9f:67:58:03:b2:21:fe:98:96:49:26:b6:4b:05:8f:1c:36:
be:42:8b:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:30:34 2026 by rpki-client