Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/35a9a6-60cd-4f24-8ef0-7dc69430d352/1/ZxzQcdyWC9yCmwvn40trYc-LCx4.mft
File: ZxzQcdyWC9yCmwvn40trYc-LCx4.mft (raw, json)
Hash identifier: NFkvlJWY+FT2LqHzQUCJ7YpRcGe+P12l/y/Lhc0Kb9M=
Subject key identifier: 12:EA:BF:39:A7:2F:A9:86:22:B5:C2:FB:CE:A3:68:F6:19:56:68:3F
Authority key identifier: 67:1C:D0:71:DC:96:0B:DC:82:9B:0B:E7:E3:4B:6B:61:CF:8B:0B:1E
Certificate issuer: /CN=671cd071dc960bdc829b0be7e34b6b61cf8b0b1e
Certificate serial: 019FAA19B5789E1DAF771372546AF03DB906
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZxzQcdyWC9yCmwvn40trYc-LCx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/35a9a6-60cd-4f24-8ef0-7dc69430d352/1/ZxzQcdyWC9yCmwvn40trYc-LCx4.mft
Manifest number: 03AE
Signing time: Tue 28 Jul 2026 19:00:39 +0000
Manifest this update: Tue 28 Jul 2026 19:00:39 +0000
Manifest next update: Wed 29 Jul 2026 19:00:39 +0000
Files and hashes: 1: B0kj7SdwSZWmEU9GKPX-vqJAVao.roa (hash: UN4l73RmEx8CBEkdPrS/+GtzsuSkIQeGfMIfQBPpbKI=)
2: Mdx0wPKImju2r6Wn-sTkPv2XXCk.roa (hash: KkcVte1gTb6znaz/vnrVSs9UtNLYEStRQ8bGw7/kCho=)
3: ZxzQcdyWC9yCmwvn40trYc-LCx4.crl (hash: np8HPd/0Ptv5EAAVWV4bnY4MnYF+js1MTdqzpL+h6Uk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/35a9a6-60cd-4f24-8ef0-7dc69430d352/1/ZxzQcdyWC9yCmwvn40trYc-LCx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/35a9a6-60cd-4f24-8ef0-7dc69430d352/1/ZxzQcdyWC9yCmwvn40trYc-LCx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZxzQcdyWC9yCmwvn40trYc-LCx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 19:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:19:b5:78:9e:1d:af:77:13:72:54:6a:f0:3d:b9:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=671cd071dc960bdc829b0be7e34b6b61cf8b0b1e
Validity
Not Before: Jul 28 19:00:39 2026 GMT
Not After : Jul 29 19:00:39 2026 GMT
Subject: CN=12eabf39a72fa98622b5c2fbcea368f61956683f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:94:cf:a7:99:de:3b:db:40:ea:eb:0f:aa:37:
2f:4c:30:1a:cf:8e:9f:c5:d1:55:83:8c:08:8f:b4:
2d:64:0f:62:52:6b:50:89:d3:53:8e:5d:45:ba:ba:
f8:ad:b0:0a:76:0d:cc:db:d5:69:9e:54:27:0c:d4:
11:13:23:25:37:52:43:dd:e8:35:e5:1a:e9:00:b6:
ba:a2:22:7e:c6:ce:3b:16:81:78:85:1a:04:74:ec:
92:34:f1:49:61:e6:26:6c:e3:f4:7e:5c:cb:39:12:
bc:4e:c9:b0:d5:bc:c9:ff:cc:ab:32:8c:76:f5:82:
ef:1b:9b:8f:c5:7b:f0:d7:26:24:c6:95:04:fe:49:
b8:89:0c:41:17:06:04:12:2b:37:03:ec:ae:b8:13:
33:6a:11:3d:be:84:47:f7:27:8f:c0:59:16:7d:87:
66:86:aa:e9:e8:19:ea:67:78:7f:28:d2:54:96:f8:
6b:2d:2b:87:1b:a9:df:2a:47:f4:11:ec:22:ee:4c:
74:da:69:85:9f:56:66:ac:74:08:49:85:e7:f3:bf:
8a:1e:3c:9a:5b:9f:07:0f:99:0c:8c:b3:1c:3b:bb:
5d:f3:94:aa:dc:71:9b:4e:4a:1d:af:7b:60:b9:40:
25:c0:47:9c:d8:f5:52:3d:9d:63:5a:38:a2:bd:0a:
e3:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:EA:BF:39:A7:2F:A9:86:22:B5:C2:FB:CE:A3:68:F6:19:56:68:3F
X509v3 Authority Key Identifier:
keyid:67:1C:D0:71:DC:96:0B:DC:82:9B:0B:E7:E3:4B:6B:61:CF:8B:0B:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZxzQcdyWC9yCmwvn40trYc-LCx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/35a9a6-60cd-4f24-8ef0-7dc69430d352/1/ZxzQcdyWC9yCmwvn40trYc-LCx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/35a9a6-60cd-4f24-8ef0-7dc69430d352/1/ZxzQcdyWC9yCmwvn40trYc-LCx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:7c:6f:a0:3c:06:aa:78:b3:3d:03:6f:6d:13:27:dd:fd:7f:
c9:8a:94:4a:e5:e2:68:8d:5d:38:60:bb:a0:50:db:de:34:a3:
0d:0d:72:28:52:ee:f2:fe:18:7c:7e:00:5b:b5:ce:62:c4:8e:
35:0b:98:b2:86:06:d5:e5:cc:8a:97:47:6c:86:08:fc:f0:3e:
1d:63:e1:ab:05:c6:4a:cf:99:c9:27:47:c6:16:73:03:e0:f6:
9e:e8:15:e2:cf:a8:63:3a:1d:36:5c:c1:4f:f5:5d:c8:e0:5d:
c9:fc:a0:53:60:79:a4:fd:83:8d:91:b2:b4:80:44:18:a0:55:
76:f9:34:31:c4:9b:a2:97:bf:b4:fb:b0:47:aa:bb:38:1f:c4:
c6:43:93:7a:45:e0:57:f2:13:87:e1:14:f7:dc:6f:d3:32:fd:
f9:29:cf:12:ad:49:0f:e4:b1:ff:36:e2:91:c0:06:10:21:d0:
ba:91:8d:f0:c5:e8:a9:a3:bc:79:d7:e3:aa:78:ca:8f:f2:f5:
6d:2d:a0:fb:38:04:63:69:ea:f1:4f:49:96:73:24:0b:88:eb:
b6:4a:27:67:5d:87:8f:bc:5b:a8:cb:e3:4a:c1:fb:de:e7:5a:
ac:bf:e0:94:35:c5:39:45:22:49:17:eb:7c:72:c8:b5:f4:a5:
a0:e3:9b:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:17:19 2026 by rpki-client