Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.mft
File: zr9l4AadvMdre1VujB1wWInfJ-k.mft (raw, json)
Hash identifier: MbzRGR22mT4KT/se+ktPzMPfy9B09HZDjFh2bNDloDQ=
Subject key identifier: 84:18:32:63:63:83:38:1E:FA:AE:33:47:FC:6D:CE:8F:ED:08:6A:5D
Authority key identifier: CE:BF:65:E0:06:9D:BC:C7:6B:7B:55:6E:8C:1D:70:58:89:DF:27:E9
Certificate issuer: /CN=cebf65e0069dbcc76b7b556e8c1d705889df27e9
Certificate serial: 019FAB62FB9CB2EE9CE44AC92EA6B84C13C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zr9l4AadvMdre1VujB1wWInfJ-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.mft
Manifest number: 19E3
Signing time: Wed 29 Jul 2026 01:00:18 +0000
Manifest this update: Wed 29 Jul 2026 01:00:18 +0000
Manifest next update: Thu 30 Jul 2026 01:00:18 +0000
Files and hashes: 1: kLUG7I7zaleUboTqrqB19XXsTkQ.roa (hash: cKKeB+BIlOYQDOr355c8ocGK4xiw2EqpjCd7kzeueqs=)
2: ku0WTxDvPv2BRSWmhVXxJBzi0EM.roa (hash: gVb5IHgLpvS8ffqO/hNhQNz/nK0f5pvRNLYLZEY7RQs=)
3: zr9l4AadvMdre1VujB1wWInfJ-k.crl (hash: LCirvQPWOUI/dvQm25Nqa4UQB5oEor+usxHM9F6VMm8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/zr9l4AadvMdre1VujB1wWInfJ-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:62:fb:9c:b2:ee:9c:e4:4a:c9:2e:a6:b8:4c:13:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cebf65e0069dbcc76b7b556e8c1d705889df27e9
Validity
Not Before: Jul 29 01:00:18 2026 GMT
Not After : Jul 30 01:00:18 2026 GMT
Subject: CN=841832636383381efaae3347fc6dce8fed086a5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:38:25:56:7e:0f:30:7c:42:68:09:2d:70:63:
a9:1f:1a:a0:29:61:e7:90:b8:f4:0e:37:64:51:1f:
e2:b0:0e:39:51:e8:29:c1:1e:c9:fc:e6:6c:e7:af:
df:6a:ff:31:0b:2a:40:cb:45:81:4a:24:5e:77:87:
d7:48:ae:82:78:45:86:7c:ed:a3:45:e2:cf:cd:be:
3c:0f:28:df:d3:d7:1d:9c:74:f0:f8:39:86:a0:48:
fd:5a:aa:6d:1a:29:85:89:48:ab:2e:00:4a:85:12:
c7:33:fa:76:a5:71:54:27:4a:9a:47:96:19:c5:eb:
5a:d4:4d:e0:0c:8b:7f:f7:89:1a:1a:e0:ce:84:69:
67:13:b6:a2:10:82:4f:8d:b7:10:3e:d3:31:65:45:
76:6e:0a:e9:db:b5:83:1a:dd:e4:54:0e:43:30:92:
1d:f3:49:e7:92:fa:fa:6e:42:0e:0d:5b:d6:af:17:
b9:f6:5b:ab:3c:25:52:01:c1:b9:e8:ec:ad:47:38:
ec:7e:5e:6a:58:89:81:64:82:f6:51:61:e4:90:20:
87:03:38:a5:4c:d4:97:17:5b:4d:a1:25:d3:0a:83:
69:ca:29:ad:77:31:27:b8:a3:be:90:de:d9:5a:cd:
ef:35:36:30:bd:00:a1:4f:0d:a0:e7:1f:eb:ff:a9:
5c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:18:32:63:63:83:38:1E:FA:AE:33:47:FC:6D:CE:8F:ED:08:6A:5D
X509v3 Authority Key Identifier:
keyid:CE:BF:65:E0:06:9D:BC:C7:6B:7B:55:6E:8C:1D:70:58:89:DF:27:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zr9l4AadvMdre1VujB1wWInfJ-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:60:c0:91:5f:05:08:23:8e:73:2a:0d:90:7a:b4:75:98:8e:
a2:29:58:9c:03:a1:15:44:1b:d7:6c:6f:a3:c3:5c:e8:ec:ae:
f4:f2:ad:df:f8:f4:2b:70:c6:46:dd:30:eb:97:d0:70:11:95:
c9:a3:16:0d:9e:2a:16:f0:45:a5:f5:fb:64:89:8a:00:1d:02:
a8:14:2b:6e:f7:56:ae:a3:cf:7a:95:0f:dc:24:4f:d4:33:05:
c4:5c:45:7d:c4:3d:90:19:5e:6d:db:8b:25:a8:da:53:c9:ec:
b2:9a:4c:5d:e3:a4:8a:bb:91:2d:9f:04:ea:96:5f:5c:fc:9f:
10:d6:aa:c9:c3:80:a1:00:14:30:7d:2b:03:e3:15:8b:86:43:
7a:f6:a0:da:27:53:18:70:0e:af:9b:f9:fb:b7:d5:8f:01:3f:
4a:49:e3:f6:32:99:ec:ac:bc:24:fb:d7:cc:3d:38:35:0d:1f:
86:3e:f8:bb:19:11:4d:b3:f7:c9:9b:ba:66:90:13:05:30:55:
48:9d:ef:a9:dc:79:5a:eb:03:f5:9f:2b:06:09:50:f8:7b:48:
9a:5e:16:df:b2:2a:28:1f:1c:bb:b3:ed:41:b6:25:40:ed:d2:
9b:fa:fe:31:3e:25:9a:a7:85:98:e7:5a:a3:5f:aa:e9:d7:06:
a6:3d:a7:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:41:33 2026 by rpki-client