Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/7a1274-03ac-494d-ba8e-cfcffa3c0665/1/zT5kktRzFSDB7tvNopZ5UArAg6s.mft
File: zT5kktRzFSDB7tvNopZ5UArAg6s.mft (raw, json)
Hash identifier: Kybf6ZsZdKCvpZspau3llBEzRSKFT6+5TTEWhBvwaz0=
Subject key identifier: EA:88:DD:86:3C:8A:54:43:0A:79:BE:23:28:98:16:57:97:AF:8F:9C
Authority key identifier: CD:3E:64:92:D4:73:15:20:C1:EE:DB:CD:A2:96:79:50:0A:C0:83:AB
Certificate issuer: /CN=cd3e6492d4731520c1eedbcda29679500ac083ab
Certificate serial: 019FABD156AB94000EF778EDF6062ABC0C3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zT5kktRzFSDB7tvNopZ5UArAg6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/7a1274-03ac-494d-ba8e-cfcffa3c0665/1/zT5kktRzFSDB7tvNopZ5UArAg6s.mft
Manifest number: 08A2
Signing time: Wed 29 Jul 2026 03:00:50 +0000
Manifest this update: Wed 29 Jul 2026 03:00:50 +0000
Manifest next update: Thu 30 Jul 2026 03:00:50 +0000
Files and hashes: 1: C-10eoHVV_ERuNuHp1M0fCx__Ag.roa (hash: kJJFsA3C5xKnlbqZn0ozkgC1qO7Vwfq9ha16s0RBd0k=)
2: zT5kktRzFSDB7tvNopZ5UArAg6s.crl (hash: BxnGFVMRRbMC0nPQhYdteGVxS67LvqmLnbrFPqV+vis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/7a1274-03ac-494d-ba8e-cfcffa3c0665/1/zT5kktRzFSDB7tvNopZ5UArAg6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/7a1274-03ac-494d-ba8e-cfcffa3c0665/1/zT5kktRzFSDB7tvNopZ5UArAg6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/zT5kktRzFSDB7tvNopZ5UArAg6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:d1:56:ab:94:00:0e:f7:78:ed:f6:06:2a:bc:0c:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd3e6492d4731520c1eedbcda29679500ac083ab
Validity
Not Before: Jul 29 03:00:50 2026 GMT
Not After : Jul 30 03:00:50 2026 GMT
Subject: CN=ea88dd863c8a54430a79be232898165797af8f9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9a:20:05:c3:45:98:d9:c7:4a:88:eb:1a:41:
30:89:fe:be:f4:97:d6:58:28:8c:f4:51:b0:c1:4c:
2f:14:d9:0c:0c:fe:bd:0b:90:c7:20:af:54:e2:86:
41:77:80:a9:dc:03:b0:f3:9b:34:6c:ae:67:8e:aa:
97:4d:c5:e7:33:12:83:f7:e8:63:6a:bf:6d:23:bd:
e2:b9:8d:69:43:8c:d1:64:96:05:6a:67:a0:e6:8b:
ea:be:ca:2c:84:58:d3:cc:65:37:8f:cc:9b:98:7b:
01:d3:79:9a:6c:5c:70:83:a1:3e:03:1b:48:b6:a9:
61:d7:80:d0:6a:11:86:2d:62:f6:cf:ff:96:76:5e:
05:64:95:9d:a6:7a:13:d1:f8:68:a2:6f:16:38:29:
b5:23:47:49:9b:fd:ef:13:f5:06:34:66:77:64:6e:
af:f1:a3:0f:ca:5f:46:25:ab:26:7b:37:15:88:64:
4b:d0:3a:9d:b8:f4:e7:bf:b3:90:ff:88:41:51:92:
7a:1e:b9:d2:4d:40:b5:6d:f8:3f:e6:f7:7b:e5:e4:
b9:36:8e:83:3d:91:01:5e:82:39:2a:0d:81:29:13:
7b:ed:93:3a:a2:ba:6d:46:90:08:cd:72:a2:0d:35:
e2:21:26:76:42:bf:34:04:65:38:30:2e:d6:d1:f8:
21:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:88:DD:86:3C:8A:54:43:0A:79:BE:23:28:98:16:57:97:AF:8F:9C
X509v3 Authority Key Identifier:
keyid:CD:3E:64:92:D4:73:15:20:C1:EE:DB:CD:A2:96:79:50:0A:C0:83:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zT5kktRzFSDB7tvNopZ5UArAg6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7a1274-03ac-494d-ba8e-cfcffa3c0665/1/zT5kktRzFSDB7tvNopZ5UArAg6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7a1274-03ac-494d-ba8e-cfcffa3c0665/1/zT5kktRzFSDB7tvNopZ5UArAg6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:63:30:a9:68:21:06:f4:5c:a4:10:1a:ef:97:51:66:8e:f6:
49:b8:0f:d0:0f:30:99:71:3f:db:f5:43:e7:0e:6a:b7:ac:f0:
25:22:27:e3:52:7a:00:74:47:c4:45:e1:73:57:7e:e8:9c:1e:
22:6a:ff:31:29:8d:f3:77:e4:9d:9a:9e:77:ac:b1:83:8e:a6:
bc:75:79:47:20:3b:95:18:6a:54:d9:fe:5e:7f:e4:5b:f5:d7:
f6:e3:7f:d1:9d:dc:c8:71:ad:c3:6d:73:7c:9e:99:4b:ce:a1:
60:d5:ee:5a:6e:09:50:12:4b:a8:c0:b8:96:f4:50:24:5a:b4:
79:ee:27:86:1e:a0:f5:ab:86:dd:40:6d:b7:59:b1:77:9e:91:
c1:a3:51:1a:42:90:c0:58:41:20:9e:3c:23:c3:6f:bf:bf:62:
95:5f:c8:f4:58:65:e5:20:20:b3:e9:f7:b5:73:3b:12:a6:49:
ec:b8:fd:e1:bd:c0:3f:19:10:50:72:d0:2c:0e:3e:7b:84:d1:
1c:40:98:b0:35:58:8b:ee:6f:a2:2b:5d:12:9a:a4:f5:7e:b5:
54:e9:4e:d1:06:ba:cb:32:7d:f6:c4:34:8c:04:f4:31:f7:4c:
1e:9d:4b:91:22:97:6d:97:0d:d6:bf:91:c7:f8:00:95:fb:09:
1c:0c:0c:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:43:51 2026 by rpki-client