Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.mft
File: ZE8DP3gurzKrCQiHddZKxLlLWxE.mft (raw, json)
Hash identifier: YL8GnNsLI/VB/srtT1au8RUlYQK9Rv6KsaqddYpbRX4=
Subject key identifier: CD:10:FA:A4:3F:CB:9B:70:5F:52:62:4F:EF:0F:48:E6:76:F5:1C:E4
Authority key identifier: 64:4F:03:3F:78:2E:AF:32:AB:09:08:87:75:D6:4A:C4:B9:4B:5B:11
Certificate issuer: /CN=644f033f782eaf32ab09088775d64ac4b94b5b11
Certificate serial: 019FAAF54016F01DC3C68DE4B96436DB4C66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZE8DP3gurzKrCQiHddZKxLlLWxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.mft
Manifest number: 0F1E
Signing time: Tue 28 Jul 2026 23:00:27 +0000
Manifest this update: Tue 28 Jul 2026 23:00:27 +0000
Manifest next update: Wed 29 Jul 2026 23:00:27 +0000
Files and hashes: 1: L5oncHcGX0JZWhyPpUVkQ2HdCRo.roa (hash: L2Pt1ipLnJmpkz1LbVmvE4yLg/k+xc8UXnr+qSGpbXY=)
2: XfoYwouinwxpmsIiaKSE5Ihe3J8.roa (hash: qt4foYpy013TlPUVpgU1Ocj8R+P8zvuJGdKNUnqndOk=)
3: ZE8DP3gurzKrCQiHddZKxLlLWxE.crl (hash: rmyDW+fhzvR7hDQad6P4Q8APCDBcuFq+xkUAKMKJDOY=)
4: j34AlrWJB9qIiT39tdgx6GORRPE.roa (hash: TLVwr6WxGYUdU6twEr0V8a4U4NI5yriKBDDpZ2ESBfY=)
5: l8pVdQcsPyvAv3HyaaD26uxVYS8.roa (hash: DQA293T0QyMdTSQE50m48vTaLc10PyZBH6Ba9LHMphE=)
6: lmALzp_C2hj8qDy6u9DneABNWCE.roa (hash: 0GPCM3inwnfBar+n/0nv3z67tNfW/VcLGbHgKFaiiwI=)
7: s1N5kDv4-SpOqan5hJxvvqdzfgk.roa (hash: G1JTBs4ptyy7NKoszv8bHZCq/4kKQ4/tpR/BQXAJYC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZE8DP3gurzKrCQiHddZKxLlLWxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:40:16:f0:1d:c3:c6:8d:e4:b9:64:36:db:4c:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=644f033f782eaf32ab09088775d64ac4b94b5b11
Validity
Not Before: Jul 28 23:00:27 2026 GMT
Not After : Jul 29 23:00:27 2026 GMT
Subject: CN=cd10faa43fcb9b705f52624fef0f48e676f51ce4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d3:f1:a1:fe:48:8f:11:7b:0b:83:9d:b5:c6:
a2:76:c4:30:62:95:81:e6:f4:02:3b:72:b6:43:0c:
4a:5b:75:44:26:e5:c8:b6:b7:04:3f:18:b6:39:89:
fe:eb:b1:1a:d0:e9:13:68:46:71:2a:4d:c8:61:9f:
25:aa:83:f2:b8:f4:fb:18:29:f2:49:d2:cb:b2:96:
e8:f3:3e:14:e4:d9:6d:62:70:33:ae:c6:03:03:d6:
4b:8a:9a:84:76:f2:ce:da:ab:7b:3a:de:7f:b8:de:
b0:cd:c5:a7:fb:27:4a:94:79:48:31:59:60:5a:13:
89:89:96:d4:14:3e:40:18:c4:a1:eb:ab:a7:e9:fc:
df:12:b5:12:51:f7:de:84:6c:ba:38:e0:60:92:08:
2a:ea:f2:c0:3d:54:fa:ff:6d:1d:11:42:22:59:07:
df:77:e6:19:0a:d0:5f:fc:fd:3a:dd:ae:ef:56:09:
b5:88:bf:0b:ad:5f:ff:cb:36:cb:be:6d:ce:33:36:
ce:ae:0d:b6:3e:2a:e5:ae:cb:d1:6e:04:76:6d:f3:
83:17:14:87:a8:02:88:37:c5:7e:68:39:6b:64:93:
a8:2a:cc:4e:bd:27:0b:48:81:5f:33:8e:74:cd:ac:
36:88:25:e7:b6:ed:50:64:39:e0:92:ac:ea:44:08:
2d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:10:FA:A4:3F:CB:9B:70:5F:52:62:4F:EF:0F:48:E6:76:F5:1C:E4
X509v3 Authority Key Identifier:
keyid:64:4F:03:3F:78:2E:AF:32:AB:09:08:87:75:D6:4A:C4:B9:4B:5B:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZE8DP3gurzKrCQiHddZKxLlLWxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:fc:64:f2:b2:cc:f0:56:55:8d:8d:cd:4e:01:d9:d1:b5:1d:
6d:29:46:a1:9c:4f:aa:76:cd:e1:02:73:bc:d0:85:6e:68:b2:
28:c2:90:34:86:fe:0f:e6:d4:9b:34:e4:7a:bb:5f:45:d1:34:
76:ff:33:85:3d:37:91:bf:6e:4d:da:68:70:3d:19:af:8e:16:
56:03:21:6f:7e:07:68:dd:cc:6d:4d:7e:be:d2:1d:e2:7b:da:
b0:ef:1b:4f:ae:6e:94:9a:9b:c0:7a:ad:44:d3:ba:59:78:57:
19:b8:79:3b:02:7a:e4:68:2f:06:4e:d9:a8:e7:61:18:ba:41:
79:7c:60:87:c1:eb:7f:96:6c:b7:36:15:98:cb:89:32:9a:b5:
09:7d:97:e6:eb:c8:ff:ce:b2:e1:5a:b7:5e:e0:43:5a:1c:74:
78:42:49:fc:a6:e4:62:2f:ab:61:9d:43:96:76:d5:f9:2f:c0:
46:ce:bf:42:16:a3:00:4f:d7:c5:ea:41:90:a5:4d:c1:a0:fc:
d8:93:1b:ea:46:ac:f5:5c:c5:06:1e:bb:82:1b:76:9a:5c:e9:
56:86:02:e5:12:8d:39:f9:e4:43:68:49:87:b2:76:02:8c:ef:
d8:12:8f:2d:c3:fd:c6:1b:ad:c4:d8:26:5f:f5:76:23:7f:35:
f6:00:d3:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:27:56 2026 by rpki-client