Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/zepK3ugLBlGc5A3T0T8oup9XWVc.mft
File: zepK3ugLBlGc5A3T0T8oup9XWVc.mft (raw, json)
Hash identifier: tHBOPa85biQAe2AvuPiA+uPuO77f30BrAorQywKCKAk=
Subject key identifier: BB:08:9A:DC:53:D0:D7:1B:51:99:BE:27:A2:30:6D:52:0A:CD:8A:1E
Authority key identifier: CD:EA:4A:DE:E8:0B:06:51:9C:E4:0D:D3:D1:3F:28:BA:9F:57:59:57
Certificate issuer: /CN=cdea4adee80b06519ce40dd3d13f28ba9f575957
Certificate serial: 019FAA886EF03A3409D37DFCFE5C673FEF9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zepK3ugLBlGc5A3T0T8oup9XWVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/zepK3ugLBlGc5A3T0T8oup9XWVc.mft
Manifest number: 16E4
Signing time: Tue 28 Jul 2026 21:01:35 +0000
Manifest this update: Tue 28 Jul 2026 21:01:35 +0000
Manifest next update: Wed 29 Jul 2026 21:01:35 +0000
Files and hashes: 1: q_Sdx_pDux5HG_B-3KML3ZxV1Q4.roa (hash: ht/8yca5f/4MvUCuC03a4MjP5eq5Ql1KG2x7zVYULEQ=)
2: v8cGXi_NSEn4R2Pj8ik0gEWzS6g.roa (hash: Tc7POOVIwZMXLz0qNFWoVFFcyKsqMyAM9BmZSJShLfc=)
3: zepK3ugLBlGc5A3T0T8oup9XWVc.crl (hash: blJNDdLrjEyLV3YVYHdaQdlRY33JnInEXcFGxOfaMIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/zepK3ugLBlGc5A3T0T8oup9XWVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/zepK3ugLBlGc5A3T0T8oup9XWVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zepK3ugLBlGc5A3T0T8oup9XWVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:6e:f0:3a:34:09:d3:7d:fc:fe:5c:67:3f:ef:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdea4adee80b06519ce40dd3d13f28ba9f575957
Validity
Not Before: Jul 28 21:01:35 2026 GMT
Not After : Jul 29 21:01:35 2026 GMT
Subject: CN=bb089adc53d0d71b5199be27a2306d520acd8a1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:85:1b:22:db:5f:a1:ff:db:a5:35:9f:e3:e6:
40:c0:7f:f7:73:21:9d:6f:30:d8:f1:97:5c:da:9e:
74:91:58:7a:b5:75:3b:df:22:6c:1c:07:74:1d:3f:
65:5a:77:42:90:7c:7a:76:c8:fa:b1:c9:32:4e:95:
91:b9:9d:b3:1d:b1:b3:d8:e5:e2:cb:cd:ea:4e:5f:
49:72:e7:82:6e:7e:ec:93:0d:23:d7:a3:a0:f1:3a:
b6:dc:99:94:2e:50:7c:13:35:17:d2:c3:95:59:f3:
6f:e3:ad:e4:d6:8e:39:81:10:91:4a:2d:b7:f4:76:
2c:80:7f:bf:89:89:ad:bf:92:af:77:16:2a:20:da:
d2:ec:92:cb:8b:7f:4f:c7:27:d4:c4:a7:3d:c5:f1:
61:1e:fb:46:1f:a5:1f:28:78:5e:85:37:8c:a6:f9:
94:d9:87:6d:ce:a1:da:b3:bb:ea:dc:08:48:32:3e:
95:14:b0:30:5e:91:43:0a:7e:6a:db:a1:fa:4f:de:
f5:83:2e:18:0c:9e:45:bb:62:00:04:e2:bd:20:fe:
bc:5a:4b:ec:40:76:30:4e:ab:34:10:c0:00:08:7d:
f4:85:57:70:0f:5e:5e:f3:6f:4b:dd:a3:c1:d3:b4:
33:22:ad:54:01:28:e2:f9:ca:d0:7d:4c:c3:da:4d:
23:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:08:9A:DC:53:D0:D7:1B:51:99:BE:27:A2:30:6D:52:0A:CD:8A:1E
X509v3 Authority Key Identifier:
keyid:CD:EA:4A:DE:E8:0B:06:51:9C:E4:0D:D3:D1:3F:28:BA:9F:57:59:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zepK3ugLBlGc5A3T0T8oup9XWVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/zepK3ugLBlGc5A3T0T8oup9XWVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/zepK3ugLBlGc5A3T0T8oup9XWVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:d3:d3:9c:8b:48:47:8e:d8:a7:b9:6c:71:91:5e:ae:8c:40:
a7:bf:6e:89:bc:3b:f5:2c:5c:00:51:72:9b:40:2c:22:32:b3:
30:58:6d:0a:03:92:aa:21:61:b4:37:14:ea:49:f8:f0:01:0d:
24:ef:f3:e5:1a:52:87:2d:9e:22:a2:9d:7b:8b:58:bb:43:e0:
06:00:53:5e:ba:61:c9:5b:31:2c:22:9e:30:3a:8b:3e:20:38:
d8:e8:d7:3c:1d:a6:9d:ee:2f:56:39:e0:a7:72:fb:4b:89:12:
62:46:28:cf:f7:1c:91:11:3a:be:c0:4e:af:f4:24:2a:3b:7e:
dd:75:6e:22:6d:00:cf:8c:b2:68:9d:9b:32:02:9c:85:78:71:
86:05:25:e9:74:b3:67:5e:80:60:9e:1c:f2:cd:f1:02:b8:0c:
68:ea:2d:02:c9:73:96:87:c1:f5:02:42:a6:57:30:44:d3:0c:
c7:96:1b:68:72:f2:72:9b:a8:8b:c1:7d:10:fc:9a:b4:3e:80:
0c:72:c9:71:27:a5:d6:44:de:07:9d:a6:a3:d4:ed:c5:bc:17:
11:9d:f0:d6:82:46:98:6b:b9:c0:9b:23:91:ef:91:1a:e3:29:
1c:8d:65:c5:0c:3e:f3:c4:b4:99:61:cb:c9:a4:4b:98:d9:92:
c9:f9:76:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:49:32 2026 by rpki-client