Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/Z1g3tKd23KNiTol_HHTm4n0fwVQ.mft
File: Z1g3tKd23KNiTol_HHTm4n0fwVQ.mft (raw, json)
Hash identifier: JQwms0mg26KRIyr+xo0oATGbFga/ZyWgQLj5OGIVfJk=
Subject key identifier: 05:C9:78:E1:5A:86:4E:6C:E9:43:AF:3C:5D:00:37:49:8E:57:E6:CE
Authority key identifier: 67:58:37:B4:A7:76:DC:A3:62:4E:89:7F:1C:74:E6:E2:7D:1F:C1:54
Certificate issuer: /CN=675837b4a776dca3624e897f1c74e6e27d1fc154
Certificate serial: 019FAC7681442F9FB4A9EB36B48D900A40E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z1g3tKd23KNiTol_HHTm4n0fwVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/Z1g3tKd23KNiTol_HHTm4n0fwVQ.mft
Manifest number: 4E
Signing time: Wed 29 Jul 2026 06:01:15 +0000
Manifest this update: Wed 29 Jul 2026 06:01:15 +0000
Manifest next update: Thu 30 Jul 2026 06:01:15 +0000
Files and hashes: 1: Z1g3tKd23KNiTol_HHTm4n0fwVQ.crl (hash: O8pcvtgy29CaWvx0b0lOK/lFyPV8PTaiuWEfCwbH5AA=)
2: _99RUrGdci44Oq4_4xcT9uSL-jY.roa (hash: YvmqrGHSZPjUN26szsH0GLTZcYZv0BvXR40esmV5asY=)
3: h658PKckKesTLernUES_denhymQ.roa (hash: TondVlbf8pLFUhLFF4XczbxXR4UNpHDTwhjMbduJWEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/Z1g3tKd23KNiTol_HHTm4n0fwVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/Z1g3tKd23KNiTol_HHTm4n0fwVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z1g3tKd23KNiTol_HHTm4n0fwVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:76:81:44:2f:9f:b4:a9:eb:36:b4:8d:90:0a:40:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=675837b4a776dca3624e897f1c74e6e27d1fc154
Validity
Not Before: Jul 29 06:01:15 2026 GMT
Not After : Jul 30 06:01:15 2026 GMT
Subject: CN=05c978e15a864e6ce943af3c5d0037498e57e6ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:55:99:3a:5a:72:62:e9:22:57:ea:d2:a5:30:
e6:b8:86:38:ac:61:3f:2b:5d:c4:61:87:e8:d8:45:
db:c4:4f:91:c5:dd:1f:d3:99:8a:37:fe:b4:8e:15:
83:ed:38:e5:35:5f:97:a1:81:90:fe:92:3b:1f:2e:
99:e9:50:ba:af:8f:b9:9e:c8:57:5d:00:2b:69:11:
87:0b:8c:dd:56:b2:f8:f5:e1:8c:da:24:fd:42:86:
49:76:0d:ff:c1:ea:1c:b5:ef:5d:2f:81:5d:28:e8:
be:7f:83:1e:9e:6e:28:78:9b:9c:cf:8b:ed:cc:64:
69:a9:5f:99:80:07:b4:87:0f:05:0b:97:11:fa:e5:
0f:a0:21:50:0b:4c:2f:c4:3c:68:a4:c1:17:86:9e:
82:45:3f:cf:da:0d:69:8b:17:93:f5:21:9d:52:35:
f6:e5:83:dc:fe:87:e2:41:78:f4:1f:b5:db:e6:0b:
f7:fc:dd:9e:df:31:d8:e4:e2:18:21:e9:35:45:f3:
cf:6f:5b:2e:a2:af:3f:84:15:48:7b:7f:3a:c4:8d:
c7:92:ec:de:51:cc:0d:a8:92:35:7d:02:2f:50:4e:
ba:88:86:00:6e:01:2a:25:97:a8:67:4a:0b:39:3e:
dc:5c:3d:8d:6f:8c:e3:9b:de:10:59:4e:e5:9c:d3:
37:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:C9:78:E1:5A:86:4E:6C:E9:43:AF:3C:5D:00:37:49:8E:57:E6:CE
X509v3 Authority Key Identifier:
keyid:67:58:37:B4:A7:76:DC:A3:62:4E:89:7F:1C:74:E6:E2:7D:1F:C1:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z1g3tKd23KNiTol_HHTm4n0fwVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/Z1g3tKd23KNiTol_HHTm4n0fwVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/Z1g3tKd23KNiTol_HHTm4n0fwVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:5c:fa:fc:07:6b:d3:d8:00:a4:c4:24:26:4a:ad:db:c2:4c:
8f:b0:c7:20:28:11:9b:02:43:94:00:fe:df:02:20:4f:fb:ca:
9e:ea:c8:23:42:a7:4c:be:5e:0e:e5:50:9f:6f:a0:3d:5f:9b:
8f:9c:40:71:44:11:20:ec:5b:3e:50:67:b5:c1:4e:a2:7c:7e:
8f:6c:21:3d:13:de:1f:17:fc:c9:7e:d0:78:d3:e3:38:2b:b2:
b1:88:bb:9e:a0:ff:70:ca:fa:02:fa:ee:b0:42:37:28:39:24:
2c:95:f9:f3:b4:69:c6:ba:e3:84:bd:3e:07:86:ab:cc:ae:fb:
23:62:d9:16:0c:f7:dd:9e:1d:5b:4e:80:14:6f:cf:e4:8c:40:
3c:ea:38:0d:a4:bf:dc:6e:1c:7f:57:bc:04:21:30:b2:09:8b:
28:0c:e7:c2:c4:e4:ac:f5:eb:30:c6:60:8b:e4:04:41:1b:27:
f1:a8:26:78:e0:b1:36:9c:8a:1a:43:72:b1:d1:4e:66:1f:8e:
c6:17:34:7e:b2:db:74:e7:7a:b5:b7:f1:d5:0a:40:c4:5f:e8:
a9:bc:99:f7:84:6d:ca:94:ac:e6:fe:3c:f4:c7:9c:60:30:00:
c3:fe:f5:ef:18:9c:77:89:6e:59:b3:01:3d:31:e0:44:e6:94:
ad:c6:a9:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:05:32 2026 by rpki-client