Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/8c5787-09fa-4988-81a1-75d6be4e5c37/1/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.mft
File: ZkkYg8tMUBIv2ydUtiUv3W_J1R8.mft (raw, json)
Hash identifier: aZ8hGtRWsbJ1bhtLz3/37QGEJb1346uWJvygXiffUw0=
Subject key identifier: F5:28:07:8D:D4:7C:3B:1A:75:AE:83:92:D6:B0:91:13:03:7E:8D:14
Authority key identifier: 66:49:18:83:CB:4C:50:12:2F:DB:27:54:B6:25:2F:DD:6F:C9:D5:1F
Certificate issuer: /CN=66491883cb4c50122fdb2754b6252fdd6fc9d51f
Certificate serial: 019FADBF87E1768A8831053D2AE430DC5EC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/8c5787-09fa-4988-81a1-75d6be4e5c37/1/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.mft
Manifest number: 0DD1
Signing time: Wed 29 Jul 2026 12:00:38 +0000
Manifest this update: Wed 29 Jul 2026 12:00:38 +0000
Manifest next update: Thu 30 Jul 2026 12:00:38 +0000
Files and hashes: 1: 3FX3dROebXazZ9k_8-Lo5o1qkkI.roa (hash: iLVy4lChJ6R/aX19zh/vuVIS2qDiRo8xZfWhdwKLT/E=)
2: ZkkYg8tMUBIv2ydUtiUv3W_J1R8.crl (hash: 8a9b7SWn6LwsZgiFhiw3oUqiNsLMdOZTiQu4b/abiJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/8c5787-09fa-4988-81a1-75d6be4e5c37/1/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/8c5787-09fa-4988-81a1-75d6be4e5c37/1/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:bf:87:e1:76:8a:88:31:05:3d:2a:e4:30:dc:5e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66491883cb4c50122fdb2754b6252fdd6fc9d51f
Validity
Not Before: Jul 29 12:00:38 2026 GMT
Not After : Jul 30 12:00:38 2026 GMT
Subject: CN=f528078dd47c3b1a75ae8392d6b09113037e8d14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:83:25:b7:bc:73:07:d7:f7:69:a7:42:69:5b:
a6:d6:d4:d7:ea:b0:53:1d:e3:c7:2c:84:ca:3b:8c:
f5:be:02:5c:7f:1f:fc:a6:cc:96:9f:c8:f0:d0:d4:
7d:26:c8:27:99:54:7c:e0:9e:e2:a4:68:ba:5d:ab:
4d:8b:9a:f3:e9:9b:03:fe:fc:c3:9b:b0:90:63:76:
8a:9c:8c:a1:73:5b:59:88:6c:58:16:de:03:b7:69:
75:bb:52:d1:0a:a5:30:ea:ae:63:27:2a:bd:b5:54:
54:b2:96:2b:1a:76:41:f3:22:c3:02:e5:7c:61:eb:
ff:af:6d:d1:96:4c:64:cc:7e:0e:72:49:5c:af:40:
f4:37:65:a7:7f:72:91:b3:bf:17:d8:d4:77:3b:10:
12:fb:00:d4:c7:cb:8e:f1:4c:bf:03:a8:5d:01:29:
c8:7f:e5:4c:cb:94:16:69:2a:c9:b3:85:ef:bb:d7:
fa:95:53:df:69:12:b7:5e:e1:27:9f:88:17:be:23:
1c:73:98:c7:35:25:22:a0:dc:e1:e2:eb:ab:11:65:
69:bc:83:ba:6c:44:28:a9:b6:04:b9:da:24:1a:94:
75:55:f0:cf:07:1c:f9:34:ae:3e:39:35:49:f4:ae:
4f:e4:1a:1c:72:43:ba:85:2c:c6:5a:a0:e8:a6:90:
c7:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:28:07:8D:D4:7C:3B:1A:75:AE:83:92:D6:B0:91:13:03:7E:8D:14
X509v3 Authority Key Identifier:
keyid:66:49:18:83:CB:4C:50:12:2F:DB:27:54:B6:25:2F:DD:6F:C9:D5:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8c5787-09fa-4988-81a1-75d6be4e5c37/1/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8c5787-09fa-4988-81a1-75d6be4e5c37/1/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:ee:71:c3:d7:62:82:60:0e:3c:d4:b2:87:c5:cd:b5:b4:d5:
a4:8c:d3:86:14:d0:f4:d7:c8:5a:8a:9d:63:f0:72:6f:0a:4d:
e5:e7:77:42:2c:8d:61:a6:42:c3:a0:3f:81:b7:3f:65:a6:73:
43:d8:00:ce:8d:ab:39:d3:2c:43:60:3e:5b:cc:59:26:b0:95:
69:38:14:63:b8:7f:fd:bf:a8:24:52:1f:ea:93:f9:8c:30:87:
74:b3:54:b5:e7:68:77:9e:84:69:0b:fa:f8:7d:51:af:7e:bc:
97:c0:09:2f:97:ef:a1:7d:d9:b9:f7:e6:2c:df:47:d1:ff:10:
46:c4:8f:4d:a4:4c:57:c4:65:c4:db:36:d3:95:e2:99:28:3f:
ef:ab:57:d7:f4:aa:62:3e:3f:90:11:49:aa:be:ce:d9:9b:30:
d6:f2:d2:5a:44:8d:e7:6f:29:d7:f0:45:0b:f8:f9:30:f9:6a:
13:94:48:51:20:59:8e:9e:e3:4d:f5:a8:ac:65:14:12:03:8e:
53:53:bd:5b:32:c9:49:37:61:87:89:5f:04:2b:34:bd:10:b9:
1b:1c:1d:28:ec:11:b9:65:45:d0:99:e5:61:e4:53:9a:80:1a:
c1:aa:e8:30:a4:97:ce:46:72:ae:3f:e1:50:80:da:2b:19:30:
46:ea:4c:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:18:23 2026 by rpki-client