Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/999647-1e7f-499b-9d48-f950327f88d3/1/zvUB0tBSGF1PZWkhjCi_NYWQAPw.mft
File: zvUB0tBSGF1PZWkhjCi_NYWQAPw.mft (raw, json)
Hash identifier: sM1jqAiJmVrZICRxgHdJM+ixkgJ9s5jbb4H2m7t9kNY=
Subject key identifier: B3:CC:1C:A9:11:1C:13:E8:3F:CB:FC:41:DC:29:9F:06:B1:7F:5D:E9
Authority key identifier: CE:F5:01:D2:D0:52:18:5D:4F:65:69:21:8C:28:BF:35:85:90:00:FC
Certificate issuer: /CN=cef501d2d052185d4f6569218c28bf35859000fc
Certificate serial: 019FAC76991335C76884EB994F5A628E6387
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvUB0tBSGF1PZWkhjCi_NYWQAPw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/999647-1e7f-499b-9d48-f950327f88d3/1/zvUB0tBSGF1PZWkhjCi_NYWQAPw.mft
Manifest number: 0286
Signing time: Wed 29 Jul 2026 06:01:21 +0000
Manifest this update: Wed 29 Jul 2026 06:01:21 +0000
Manifest next update: Thu 30 Jul 2026 06:01:21 +0000
Files and hashes: 1: VtiYaN97FHtpr9nyOV9FFG85g5o.roa (hash: YRi8yVEk1+9sLs2A+db3vBfa8pzorD5js8IjbX492Nk=)
2: gIvmrtP4qhP-p_HNvQknynsugUc.roa (hash: T7F6BSJaNt+yN8P1agGWT43ZlvcgWoTw7wuq3mofmEI=)
3: zvUB0tBSGF1PZWkhjCi_NYWQAPw.crl (hash: W44mtsjPCb8MKD1gelvR3ppXxVeXHWeB2SRNWCMPWnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/999647-1e7f-499b-9d48-f950327f88d3/1/zvUB0tBSGF1PZWkhjCi_NYWQAPw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/999647-1e7f-499b-9d48-f950327f88d3/1/zvUB0tBSGF1PZWkhjCi_NYWQAPw.mft
rsync://rpki.ripe.net/repository/DEFAULT/zvUB0tBSGF1PZWkhjCi_NYWQAPw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:76:99:13:35:c7:68:84:eb:99:4f:5a:62:8e:63:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cef501d2d052185d4f6569218c28bf35859000fc
Validity
Not Before: Jul 29 06:01:21 2026 GMT
Not After : Jul 30 06:01:21 2026 GMT
Subject: CN=b3cc1ca9111c13e83fcbfc41dc299f06b17f5de9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:80:9f:35:2e:46:f1:b4:dc:84:eb:e5:3a:9a:
f8:88:41:f7:9a:0f:c6:d7:bf:f6:97:0f:c1:75:79:
b6:36:82:87:39:2b:36:ed:9a:6c:73:f5:da:ec:4c:
a4:b7:f7:74:2e:80:f9:40:18:7d:9b:e5:a4:ad:ef:
3f:9f:c1:8d:17:d8:95:29:ed:04:b0:09:4c:62:7c:
03:71:c2:cb:67:79:3d:5e:64:71:f6:3a:c3:32:9a:
7d:9b:e4:d6:46:e9:32:c5:03:96:50:de:81:bd:a1:
f0:7d:d3:26:af:e5:54:43:63:6c:3f:2b:d3:c9:8f:
4a:fa:0e:dc:d2:2e:fa:a3:50:c1:60:a6:8b:89:0f:
d0:69:d5:52:c1:35:4f:68:02:53:4c:da:84:31:59:
b2:f7:49:24:70:75:3a:7d:44:57:78:35:2f:9b:e8:
2a:af:45:2e:92:06:b5:77:52:ac:47:fe:5d:a3:a5:
80:ef:dc:1a:96:bb:14:39:69:02:96:77:f8:a4:51:
84:2b:89:c4:95:bc:a5:e1:40:d2:07:a6:c0:ed:59:
d7:8f:58:74:20:78:72:c2:15:a8:fa:2f:59:3f:75:
80:98:78:7b:da:8e:24:ff:f3:34:f6:9f:4b:80:17:
76:b3:2c:9a:47:0b:6b:ca:ac:5f:e9:17:3c:1f:00:
61:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:CC:1C:A9:11:1C:13:E8:3F:CB:FC:41:DC:29:9F:06:B1:7F:5D:E9
X509v3 Authority Key Identifier:
keyid:CE:F5:01:D2:D0:52:18:5D:4F:65:69:21:8C:28:BF:35:85:90:00:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvUB0tBSGF1PZWkhjCi_NYWQAPw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/999647-1e7f-499b-9d48-f950327f88d3/1/zvUB0tBSGF1PZWkhjCi_NYWQAPw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/999647-1e7f-499b-9d48-f950327f88d3/1/zvUB0tBSGF1PZWkhjCi_NYWQAPw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:e5:df:06:90:26:64:64:ca:22:df:0c:08:4b:3f:a7:b0:4e:
77:65:76:ea:f1:13:ff:7c:06:25:5f:f6:01:3f:4c:18:1d:d7:
4c:68:b6:5e:91:62:dc:84:e1:85:48:64:24:1c:a4:ff:eb:12:
a2:5f:2d:56:d3:17:3b:e0:e2:07:f0:38:9e:d8:eb:3a:17:f3:
b9:a2:d9:2c:49:8b:40:bf:e7:2c:96:fc:cb:db:c1:b3:3c:ec:
e7:71:d6:9e:d6:e6:9e:3f:02:32:89:49:95:5a:d7:78:0d:5a:
35:63:2e:0d:86:13:8c:46:ce:70:a7:04:0e:7e:ad:10:ba:dd:
8b:d0:0f:c9:d6:01:50:ae:0e:8d:61:87:70:c6:e8:d0:ac:c0:
1f:bf:0b:88:fe:44:dd:1a:db:78:a9:f0:bd:2c:1e:90:c2:c4:
d7:43:63:d1:9d:bb:38:37:8b:e2:3a:a2:c4:4a:87:5d:c5:3e:
f9:b6:44:65:5b:48:de:9d:4b:8a:44:1e:32:dc:2c:62:d3:66:
f0:52:b5:42:19:ca:9f:bc:4b:9a:5e:08:f4:ed:61:75:c7:b9:
4e:fa:d6:ab:12:29:e8:ea:e1:e6:cb:c1:9e:6a:01:ba:2c:fd:
3b:45:78:ed:37:20:25:1b:b8:d7:23:86:5b:f6:98:29:a2:4e:
e9:4f:32:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:34:44 2026 by rpki-client