Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/3d947d-5881-42e6-b35f-5e822f310638/1/ZGg2ySFPqqFnmKk-h3PlmVNLKdc.mft
File: ZGg2ySFPqqFnmKk-h3PlmVNLKdc.mft (raw, json)
Hash identifier: BPQZB2r5Nr/JNEoSOgZ5h/+LLoq8reIgo/bxC782NKo=
Subject key identifier: 06:5F:BF:00:0F:68:73:E6:4F:57:4E:FB:CB:B5:D1:08:F8:D3:13:3D
Authority key identifier: 64:68:36:C9:21:4F:AA:A1:67:98:A9:3E:87:73:E5:99:53:4B:29:D7
Certificate issuer: /CN=646836c9214faaa16798a93e8773e599534b29d7
Certificate serial: 019FAAF58103241B2A2D59F51E92614863D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZGg2ySFPqqFnmKk-h3PlmVNLKdc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/3d947d-5881-42e6-b35f-5e822f310638/1/ZGg2ySFPqqFnmKk-h3PlmVNLKdc.mft
Manifest number: 0B41
Signing time: Tue 28 Jul 2026 23:00:43 +0000
Manifest this update: Tue 28 Jul 2026 23:00:43 +0000
Manifest next update: Wed 29 Jul 2026 23:00:43 +0000
Files and hashes: 1: ZGg2ySFPqqFnmKk-h3PlmVNLKdc.crl (hash: 1F/P9PiOkYIQVIGty3cQUks++m6J7TsGNNDz4hHOIUE=)
2: xqX86PxnYUFgmbMyGq-FYjU7myI.roa (hash: LU7BTND6Kz806aRKd+CDSvMICobI0jgTkTNE1f7lbDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/3d947d-5881-42e6-b35f-5e822f310638/1/ZGg2ySFPqqFnmKk-h3PlmVNLKdc.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/3d947d-5881-42e6-b35f-5e822f310638/1/ZGg2ySFPqqFnmKk-h3PlmVNLKdc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZGg2ySFPqqFnmKk-h3PlmVNLKdc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:81:03:24:1b:2a:2d:59:f5:1e:92:61:48:63:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=646836c9214faaa16798a93e8773e599534b29d7
Validity
Not Before: Jul 28 23:00:43 2026 GMT
Not After : Jul 29 23:00:43 2026 GMT
Subject: CN=065fbf000f6873e64f574efbcbb5d108f8d3133d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:4a:18:14:e2:3b:bc:e3:9e:a7:f5:f3:bf:4f:
01:a3:a6:36:50:be:5d:d8:e4:ea:46:11:41:de:ea:
72:3c:8c:95:b9:de:7c:8b:8e:e7:a9:02:83:c0:68:
27:92:83:77:42:a4:8a:d8:c3:cb:c6:c6:95:ac:12:
ad:eb:4b:7b:24:b9:6f:0f:b7:1b:45:03:dd:fe:61:
0a:00:d7:67:3e:88:60:ee:c3:dd:f8:d4:4b:71:2a:
9e:99:62:d6:d9:fb:98:65:16:ae:23:0c:3c:04:51:
fd:ca:92:0d:a3:66:f1:6c:85:83:2d:be:ea:06:8d:
c6:84:54:ae:dd:50:ca:f7:7a:6e:ab:1c:20:b1:04:
35:c7:66:02:91:fb:ce:30:59:3a:73:f9:0b:30:34:
56:35:d7:81:2e:14:6f:7c:98:ca:5f:d3:f5:9f:15:
04:39:5c:de:b2:39:34:3a:35:cc:27:74:5b:72:bb:
a6:e8:cd:26:27:a5:e0:b2:aa:6b:a3:21:4e:24:c7:
d6:6c:6d:e0:79:6b:6d:10:1e:80:7a:d5:e0:62:92:
11:b4:cc:d4:be:a3:e9:2c:aa:da:86:60:f9:02:19:
2f:ee:64:ce:83:97:8d:c3:91:b9:8e:9f:98:49:56:
fd:e1:39:70:2a:ab:ba:b1:e9:75:7e:14:1b:17:1e:
63:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:5F:BF:00:0F:68:73:E6:4F:57:4E:FB:CB:B5:D1:08:F8:D3:13:3D
X509v3 Authority Key Identifier:
keyid:64:68:36:C9:21:4F:AA:A1:67:98:A9:3E:87:73:E5:99:53:4B:29:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZGg2ySFPqqFnmKk-h3PlmVNLKdc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3d947d-5881-42e6-b35f-5e822f310638/1/ZGg2ySFPqqFnmKk-h3PlmVNLKdc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3d947d-5881-42e6-b35f-5e822f310638/1/ZGg2ySFPqqFnmKk-h3PlmVNLKdc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:a0:d8:8c:21:93:21:e5:ac:e4:82:09:4a:ce:42:08:45:1e:
ee:17:ea:7a:e6:ff:40:be:65:57:28:31:f5:7d:51:a1:57:69:
ba:53:91:2d:7f:2e:67:f8:29:fc:4f:b4:a4:83:15:19:6f:4a:
96:e1:5e:7a:fb:a4:6a:0b:2a:07:42:d1:35:26:e8:6d:94:9e:
67:b4:0d:73:3a:4b:67:12:f5:b9:10:fd:eb:a5:94:4c:63:2c:
80:2f:7e:bd:ae:d0:7a:52:1a:78:a7:95:52:24:99:b9:01:5c:
4c:8b:46:62:0b:80:13:13:dd:f3:9d:57:4d:b7:a5:2d:66:9f:
c5:9a:e4:29:f3:64:49:9a:29:ad:18:1d:86:24:3a:e8:b9:4a:
0f:c9:e8:d0:86:e9:13:74:51:84:8a:59:89:64:4b:04:fd:83:
46:47:fb:bf:98:dd:77:32:ee:6b:f0:df:47:6e:68:1f:3f:b2:
8b:49:79:6f:47:80:ba:85:f1:94:3d:2c:e2:ff:11:07:2e:cd:
3f:ed:b7:d4:fd:d0:9d:29:90:2f:a3:9a:6e:21:d2:82:0b:6e:
09:89:24:d7:c3:9d:fb:ef:ef:ba:c4:90:c4:48:5a:f9:e8:9b:
58:55:4b:cb:61:b7:dd:77:ba:a1:07:54:f5:a8:f9:c2:b9:7d:
16:ae:d8:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:12:44 2026 by rpki-client