Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.mft
File: zsR4iytpLHEDscueFhf4s2aRDxM.mft (raw, json)
Hash identifier: ukszazUW8Avfsa379w4DW5A3ab2q64I0sETjKJcqbcE=
Subject key identifier: 06:CE:16:15:40:9E:FF:82:3E:4D:A1:07:CC:71:3A:0D:0B:22:38:40
Authority key identifier: CE:C4:78:8B:2B:69:2C:71:03:B1:CB:9E:16:17:F8:B3:66:91:0F:13
Certificate issuer: /CN=cec4788b2b692c7103b1cb9e1617f8b366910f13
Certificate serial: 019FA9AB87A7390A6FCACDA7EC2027BE2657
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsR4iytpLHEDscueFhf4s2aRDxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.mft
Manifest number: 1968
Signing time: Tue 28 Jul 2026 17:00:18 +0000
Manifest this update: Tue 28 Jul 2026 17:00:18 +0000
Manifest next update: Wed 29 Jul 2026 17:00:18 +0000
Files and hashes: 1: mnbpCMhVQRFBI3ISYQo0OAu64Rk.roa (hash: kpDbhBfOi3H13L7NCoXgIwXVigbDMdLQLlKaVJyFWOo=)
2: zsR4iytpLHEDscueFhf4s2aRDxM.crl (hash: 8TamU+xYXebpvi2P1ezp7wJpJp7IH0FwR8WHLS7/H8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zsR4iytpLHEDscueFhf4s2aRDxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 17:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ab:87:a7:39:0a:6f:ca:cd:a7:ec:20:27:be:26:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec4788b2b692c7103b1cb9e1617f8b366910f13
Validity
Not Before: Jul 28 17:00:18 2026 GMT
Not After : Jul 29 17:00:18 2026 GMT
Subject: CN=06ce1615409eff823e4da107cc713a0d0b223840
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:b9:35:0e:c8:31:07:d4:33:d5:b1:90:6d:ba:
48:db:1f:aa:6a:7e:fc:95:c3:5c:6e:62:d4:3e:50:
d6:ff:38:0e:69:f7:77:8f:91:19:0a:34:cd:fa:7f:
f1:f9:cb:a6:19:55:98:7a:60:ad:51:6d:34:e8:02:
ac:fc:bc:35:0c:46:81:84:1f:c3:e9:78:60:9d:d4:
a6:2f:74:3f:a7:34:46:e3:1b:98:3a:13:08:5f:4b:
3f:90:cf:25:a7:a8:64:87:c9:9d:95:ff:c4:fb:02:
05:01:23:96:04:f1:0e:d3:3d:4d:5a:7d:72:4a:97:
ec:22:bd:0f:98:04:d7:f2:72:fb:b0:72:5b:d6:1a:
0a:b9:4a:51:02:73:07:9f:47:06:f5:94:07:36:ac:
eb:d4:d3:b6:14:b4:fb:c0:6f:16:86:52:eb:fe:f4:
66:a0:3a:cb:7b:81:db:ed:4a:3f:79:65:f3:84:05:
f5:39:e6:e4:77:49:56:90:5c:d6:00:3c:c0:00:d6:
e0:f4:13:d5:7b:9e:86:29:86:14:da:08:85:da:0c:
f8:db:60:aa:f9:20:bc:57:bc:05:07:2f:cf:30:e1:
83:58:1e:0c:16:e5:17:2c:bf:e6:18:21:4c:9c:13:
bb:f2:bd:97:48:65:c5:bf:2a:9e:73:ac:16:36:8a:
ed:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:CE:16:15:40:9E:FF:82:3E:4D:A1:07:CC:71:3A:0D:0B:22:38:40
X509v3 Authority Key Identifier:
keyid:CE:C4:78:8B:2B:69:2C:71:03:B1:CB:9E:16:17:F8:B3:66:91:0F:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsR4iytpLHEDscueFhf4s2aRDxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:dc:e6:7e:f2:ea:11:5b:51:9e:bf:6d:7e:c7:5b:e4:a3:92:
ed:90:d4:a3:49:3d:34:86:b9:13:5e:dc:c0:8a:84:20:9b:aa:
7e:fb:b2:1e:b1:5e:95:15:56:cc:be:e3:4d:be:94:83:ad:a8:
fe:64:43:67:52:cb:ab:05:cf:9a:1b:a8:6e:08:b3:fd:91:25:
ee:71:46:a4:19:56:88:60:df:46:c2:55:59:02:24:db:8c:04:
10:59:0d:b3:76:76:fb:46:55:c6:f9:c9:c5:a3:b8:c9:10:e2:
e5:e5:4b:d4:21:05:70:c6:10:84:52:08:22:9c:7c:e4:b5:3d:
8d:21:76:c6:b5:72:7e:dc:f3:ff:39:8f:fc:f6:93:93:74:30:
a8:d1:a7:0b:ed:b6:af:12:4a:e0:90:eb:4f:86:c4:a9:32:17:
a9:56:e4:f3:8e:36:fd:a4:fe:22:6a:d4:20:a3:57:5e:c4:52:
f3:24:51:d1:28:e3:fe:71:a7:05:f4:40:3a:96:5a:bf:55:4a:
73:3b:c8:e3:4a:0c:67:4e:38:bc:5c:25:89:8f:df:96:16:29:
7f:3a:b6:94:39:bd:96:1b:9c:b2:1e:71:ec:9b:f7:e2:bf:d3:
fc:da:b2:f3:56:e7:2c:ef:d0:4a:20:17:06:d3:e4:14:c4:8e:
cd:52:aa:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:51:38 2026 by rpki-client