Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/b7cd7c-5795-4146-8477-0da87b51ffac/1/ZpSrKKgJqi4Kd46pJbHtnSp3VxY.mft
File: ZpSrKKgJqi4Kd46pJbHtnSp3VxY.mft (raw, json)
Hash identifier: rI5CF66HFjQbNwQAJhRCAOE30QP10cbEzW+5chipD+M=
Subject key identifier: 90:59:2A:09:9E:9F:BC:B7:7F:13:7F:06:A2:E2:1E:F9:93:DD:FD:0C
Authority key identifier: 66:94:AB:28:A8:09:AA:2E:0A:77:8E:A9:25:B1:ED:9D:2A:77:57:16
Certificate issuer: /CN=6694ab28a809aa2e0a778ea925b1ed9d2a775716
Certificate serial: 019FA8990109DE9EE30136ABED2A065BBB9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZpSrKKgJqi4Kd46pJbHtnSp3VxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/b7cd7c-5795-4146-8477-0da87b51ffac/1/ZpSrKKgJqi4Kd46pJbHtnSp3VxY.mft
Manifest number: 4C
Signing time: Tue 28 Jul 2026 12:00:27 +0000
Manifest this update: Tue 28 Jul 2026 12:00:27 +0000
Manifest next update: Wed 29 Jul 2026 12:00:27 +0000
Files and hashes: 1: 65lyhfcnUeev5X-4CcMUdWujCvQ.asa (hash: Q5VU2hVKSklyugtCkKPk1YQjPGPSs0Bldy1d061Ftg4=)
2: PQUU7wS6Dnj9yIlgV8Xc2NVBH64.roa (hash: KhnDFB03h86ec4eUqmqIrwmEs0JGq+ImfCvKHB/LolY=)
3: ZpSrKKgJqi4Kd46pJbHtnSp3VxY.crl (hash: tfho0hX4Jpmacxxf5i33g1Db6RILEDUkFDgjZEtUlZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/b7cd7c-5795-4146-8477-0da87b51ffac/1/ZpSrKKgJqi4Kd46pJbHtnSp3VxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/b7cd7c-5795-4146-8477-0da87b51ffac/1/ZpSrKKgJqi4Kd46pJbHtnSp3VxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZpSrKKgJqi4Kd46pJbHtnSp3VxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:01:09:de:9e:e3:01:36:ab:ed:2a:06:5b:bb:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6694ab28a809aa2e0a778ea925b1ed9d2a775716
Validity
Not Before: Jul 28 12:00:27 2026 GMT
Not After : Jul 29 12:00:27 2026 GMT
Subject: CN=90592a099e9fbcb77f137f06a2e21ef993ddfd0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7b:1f:6d:70:9b:68:d0:56:75:8c:e3:0c:23:
0d:4b:c1:08:2b:a2:7e:5b:0a:bd:9f:7b:f9:b8:3f:
f0:37:e1:d4:d9:ec:c4:9f:b7:ec:9b:46:a0:ca:a4:
0f:68:c3:09:6f:70:52:9c:e6:ef:9b:d7:ff:a9:aa:
d7:83:b1:99:a5:40:0c:42:10:5d:02:f3:f9:17:96:
f2:05:be:bb:43:44:3c:9b:02:b9:de:1d:7a:b9:76:
b7:45:c1:af:97:89:53:b3:31:47:c1:d8:25:f8:a9:
d1:93:b9:e8:e2:a6:2f:4b:26:1d:33:92:b0:e5:b2:
ca:b3:a8:6b:0e:39:29:ab:2f:12:bc:fe:3c:de:e3:
55:28:64:57:c3:99:2d:09:c6:d2:d9:38:54:55:c3:
b4:e0:23:13:5a:b0:f4:5a:af:ad:7f:5a:4c:58:3d:
d7:6a:ac:b6:f2:7a:a8:43:f3:56:d8:ad:65:fa:17:
c4:28:1e:04:2f:ed:ee:8c:f6:c6:1b:ea:d2:7e:fb:
99:f7:20:21:45:a2:50:f5:58:84:f7:30:13:81:fd:
84:3a:7e:f0:d8:13:c6:0d:5c:a3:57:d7:1b:5f:ed:
9a:27:2d:34:31:b3:e1:f7:b2:1a:1d:8a:e4:96:78:
af:f8:b6:e6:33:a4:66:65:61:13:89:bc:82:1b:cb:
f1:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:59:2A:09:9E:9F:BC:B7:7F:13:7F:06:A2:E2:1E:F9:93:DD:FD:0C
X509v3 Authority Key Identifier:
keyid:66:94:AB:28:A8:09:AA:2E:0A:77:8E:A9:25:B1:ED:9D:2A:77:57:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZpSrKKgJqi4Kd46pJbHtnSp3VxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b7cd7c-5795-4146-8477-0da87b51ffac/1/ZpSrKKgJqi4Kd46pJbHtnSp3VxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b7cd7c-5795-4146-8477-0da87b51ffac/1/ZpSrKKgJqi4Kd46pJbHtnSp3VxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:07:8f:38:d3:dc:8a:69:ef:16:40:38:2f:c8:36:9a:a1:35:
b9:89:44:a0:7c:20:81:ba:03:3c:bd:fc:e8:d3:43:e8:82:19:
9c:a2:fe:1e:10:67:f4:4d:3d:fe:f4:d3:13:e6:ad:e9:2b:e4:
0d:c3:be:47:28:e8:a2:64:ad:87:e6:6f:4c:94:8e:a1:fd:a7:
b5:23:0f:3b:25:e2:29:b1:3f:71:f5:a1:f6:6c:28:74:e7:47:
cb:32:23:87:9a:20:5a:80:05:c0:7d:bf:90:8d:bb:d4:84:75:
94:c2:16:32:44:00:66:f2:1e:b7:05:47:b0:50:35:20:06:85:
f0:26:1d:e8:74:38:e0:16:30:c0:d4:98:85:34:62:e3:6e:1e:
06:66:4a:09:69:80:db:40:6a:45:1c:67:4f:b2:dc:e6:2d:65:
b6:9a:cb:83:fa:86:1f:ee:70:82:17:16:e4:e3:38:f0:99:3e:
c2:a8:ad:c3:3b:69:a9:9a:e7:55:9d:a4:db:e4:6f:91:d3:b6:
b8:29:bc:b5:1b:77:07:fd:95:dd:27:0f:f9:9e:36:3a:3b:fd:
20:8f:02:0f:b7:ae:54:3e:88:24:97:01:9d:f3:e0:5b:13:80:
a8:a7:31:60:d3:60:46:a2:bc:bb:55:f5:3a:a1:32:35:b0:57:
ac:4e:de:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 14:42:13 2026 by rpki-client