Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/32f9b3-de2b-41f5-a949-90030d040ff7/1/Zr5SEJO7idx2JQsif39_umbiKNg.mft
File: Zr5SEJO7idx2JQsif39_umbiKNg.mft (raw, json)
Hash identifier: MVk9FlsMUtr7HHWrNzWhO2GAuvWoCZZajsq+0rScdSo=
Subject key identifier: EA:28:2D:03:A2:4A:13:E8:1B:8F:F8:9D:6F:5B:0A:6A:45:5A:10:67
Authority key identifier: 66:BE:52:10:93:BB:89:DC:76:25:0B:22:7F:7F:7F:BA:66:E2:28:D8
Certificate issuer: /CN=66be521093bb89dc76250b227f7f7fba66e228d8
Certificate serial: 019FA86289024F961682A71D45583349FC70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zr5SEJO7idx2JQsif39_umbiKNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/32f9b3-de2b-41f5-a949-90030d040ff7/1/Zr5SEJO7idx2JQsif39_umbiKNg.mft
Manifest number: 0529
Signing time: Tue 28 Jul 2026 11:00:57 +0000
Manifest this update: Tue 28 Jul 2026 11:00:57 +0000
Manifest next update: Wed 29 Jul 2026 11:00:57 +0000
Files and hashes: 1: Zr5SEJO7idx2JQsif39_umbiKNg.crl (hash: NUNPKjnGlzNeU5EMji4iWW+/GP9iPtArVVSSzDCsfbY=)
2: aHYzogA8_WqXNHaKUaPcBWBK-e0.asa (hash: fDrzsmR+TVdgn5fOzpZUh6wt7D5Sp3KZs3IDsXyA4SA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/32f9b3-de2b-41f5-a949-90030d040ff7/1/Zr5SEJO7idx2JQsif39_umbiKNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/32f9b3-de2b-41f5-a949-90030d040ff7/1/Zr5SEJO7idx2JQsif39_umbiKNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zr5SEJO7idx2JQsif39_umbiKNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 11:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:62:89:02:4f:96:16:82:a7:1d:45:58:33:49:fc:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66be521093bb89dc76250b227f7f7fba66e228d8
Validity
Not Before: Jul 28 11:00:57 2026 GMT
Not After : Jul 29 11:00:57 2026 GMT
Subject: CN=ea282d03a24a13e81b8ff89d6f5b0a6a455a1067
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f8:19:65:5f:ce:3a:81:55:be:32:fe:05:e9:
b4:56:73:36:bf:f8:50:bc:99:1c:ff:45:3f:5f:07:
b9:44:48:8d:75:dd:9a:9d:f1:b0:37:f0:97:65:99:
4f:f9:36:72:d8:da:49:0c:ae:eb:14:3c:09:fa:28:
61:b1:a4:70:52:c7:0b:33:0a:e6:7b:a5:ab:43:6d:
5c:7e:a8:df:2c:08:ee:1d:32:74:78:ca:0e:a1:64:
9f:31:32:6e:ad:31:ba:1a:9c:dd:d7:f6:9c:4a:83:
b1:7e:bc:d4:e4:f6:ec:ad:10:52:10:f7:f8:c5:64:
d2:5d:e9:32:73:e4:1f:d9:89:09:09:d7:7d:f3:e4:
ea:3c:d3:ff:0f:17:cb:c7:3a:da:0f:d8:52:cb:fd:
de:d7:ce:1d:e7:70:e3:64:7a:49:cd:e1:8d:63:2b:
bd:0f:84:19:58:65:b2:c7:bb:58:03:5a:e2:30:52:
58:0b:e3:b9:3f:25:6c:c8:ec:49:e1:16:2f:30:8a:
0f:e4:72:25:bb:0a:23:05:c8:86:f8:ce:d5:25:dd:
6c:b0:7b:67:9c:39:e6:34:23:6f:6f:fb:f2:40:a4:
e8:7f:6b:95:f2:00:0e:2e:ba:28:e5:07:84:bc:74:
ce:a6:65:a3:c5:2b:0d:e8:17:f1:c1:b4:08:36:05:
aa:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:28:2D:03:A2:4A:13:E8:1B:8F:F8:9D:6F:5B:0A:6A:45:5A:10:67
X509v3 Authority Key Identifier:
keyid:66:BE:52:10:93:BB:89:DC:76:25:0B:22:7F:7F:7F:BA:66:E2:28:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zr5SEJO7idx2JQsif39_umbiKNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/32f9b3-de2b-41f5-a949-90030d040ff7/1/Zr5SEJO7idx2JQsif39_umbiKNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/32f9b3-de2b-41f5-a949-90030d040ff7/1/Zr5SEJO7idx2JQsif39_umbiKNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:58:3e:ba:0d:27:88:0b:51:f4:f0:ee:a7:97:ef:4b:c6:d3:
8d:0f:47:21:c7:d8:6c:26:93:97:59:8d:00:e0:69:45:bd:86:
30:8b:f3:f3:ef:aa:6f:33:78:46:52:c3:f0:86:9e:ab:28:24:
a1:6d:47:95:07:c6:12:7f:91:82:9d:de:a8:3b:ba:9e:0d:40:
68:24:e8:5c:c5:5b:f7:0f:f4:45:f0:cc:a1:a6:ee:d9:d4:3f:
6c:08:e6:4a:50:49:6c:c3:31:27:ca:16:51:13:57:a6:8d:cc:
6f:7b:95:9b:02:8e:06:2f:88:74:21:f5:6d:54:6a:be:c2:9e:
bd:b7:d2:46:85:2a:92:05:95:30:68:60:aa:e1:be:59:e5:75:
ba:11:96:ee:5e:2d:b9:4c:39:8a:68:90:7f:66:cd:f8:2d:0e:
59:a0:5e:9b:c7:0b:f7:3f:8d:8f:35:78:4f:1e:f3:e4:ec:de:
63:49:17:cf:bf:ec:8a:61:f8:55:e8:50:4e:0a:dd:9a:b0:a8:
f3:10:2f:46:bb:74:4f:25:9b:ac:12:fd:79:23:51:6b:f0:b5:
de:35:ba:b0:fc:3e:9f:9c:7e:08:5a:c9:1c:03:89:b2:61:00:
31:fd:a7:b2:80:eb:7f:97:84:f8:33:0e:90:4d:67:0c:8c:c6:
89:ad:f1:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:06:09 2026 by rpki-client