Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft
File: Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft (raw, json)
Hash identifier: AY293qTps5oopkFkCJ+8ER1r70md1/400OVlSHbYv7Q=
Subject key identifier: FD:3A:CB:94:71:2F:69:B5:36:A1:F6:94:3F:C8:DD:27:02:08:DB:59
Authority key identifier: 66:5E:17:C0:8A:CD:C7:7E:94:4B:28:39:50:8F:1F:D7:11:E8:E9:7B
Certificate issuer: /CN=665e17c08acdc77e944b2839508f1fd711e8e97b
Certificate serial: 019FAA8759C07C2C7CAC7627556E5952FA31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zl4XwIrNx36USyg5UI8f1xHo6Xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft
Manifest number: 0970
Signing time: Tue 28 Jul 2026 21:00:24 +0000
Manifest this update: Tue 28 Jul 2026 21:00:24 +0000
Manifest next update: Wed 29 Jul 2026 21:00:24 +0000
Files and hashes: 1: C_VRFP2HIVQ92IBRqKDUpWFoIEw.roa (hash: vn7JZEI6f0C3P1aOSgIzdjUGS6glebz8hQYfRM3UhMg=)
2: IAnS6bEzch3TIofLALz1ygB0iyo.roa (hash: lyXUvYyQfJt4aH/SJqViQQv03gKvKKB5vsWtq0xG3Ro=)
3: Zl4XwIrNx36USyg5UI8f1xHo6Xs.crl (hash: pjDUSSr5ybE4+61j7Fcjbaox7fI69jaryj5B9JU3B7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zl4XwIrNx36USyg5UI8f1xHo6Xs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:59:c0:7c:2c:7c:ac:76:27:55:6e:59:52:fa:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=665e17c08acdc77e944b2839508f1fd711e8e97b
Validity
Not Before: Jul 28 21:00:24 2026 GMT
Not After : Jul 29 21:00:24 2026 GMT
Subject: CN=fd3acb94712f69b536a1f6943fc8dd270208db59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:83:f8:fb:e3:18:77:a7:41:0e:c1:13:3a:d3:
ca:9c:22:ce:13:5d:71:31:e0:f6:56:7a:44:b9:54:
f4:ee:07:c3:66:00:d8:ac:c8:e6:e2:cf:70:7d:c2:
49:3f:eb:0d:4e:cd:97:e5:88:56:0c:45:13:05:0b:
5a:ca:19:43:d0:46:6a:e5:0e:69:c7:b0:50:23:bb:
04:a5:75:db:c6:e9:a2:85:e8:2e:62:fb:f1:ec:1f:
16:5e:98:7e:85:5d:5f:f1:2c:88:1f:99:61:b6:1f:
4c:5b:cc:bf:26:14:8b:72:72:99:56:31:0f:9d:25:
63:4f:fe:28:78:4b:91:4a:f1:ed:30:3e:39:ea:cf:
79:5a:4d:a9:0f:7d:9d:37:86:92:c1:68:4d:06:c7:
b6:5a:fe:b1:09:2b:0d:3a:61:6d:7a:20:d1:39:01:
34:24:dc:06:9f:6f:98:84:57:34:74:94:a3:ba:78:
1e:8f:13:30:12:e7:06:f2:25:89:2e:dc:a3:49:fb:
29:9e:38:0a:ba:dd:05:61:81:c8:71:10:82:cc:d7:
5d:08:3d:3f:ad:4f:c4:62:6b:ec:33:5a:ab:73:69:
1c:d2:6b:a9:f4:df:8a:43:00:45:99:4a:2d:a6:b3:
18:b6:1d:f9:9a:88:92:42:1a:2c:99:c0:c4:04:2b:
ca:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:3A:CB:94:71:2F:69:B5:36:A1:F6:94:3F:C8:DD:27:02:08:DB:59
X509v3 Authority Key Identifier:
keyid:66:5E:17:C0:8A:CD:C7:7E:94:4B:28:39:50:8F:1F:D7:11:E8:E9:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zl4XwIrNx36USyg5UI8f1xHo6Xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:94:35:88:66:87:c5:6f:55:0d:04:56:44:86:e4:e2:8b:38:
09:39:ed:19:70:c4:2e:30:e7:7c:42:65:46:a5:1b:b6:d1:05:
b7:09:be:5c:ab:e0:c6:60:95:d8:94:bf:56:01:9d:01:cc:f9:
ba:75:c4:51:cf:7f:ae:fb:be:4d:42:e9:4a:a9:12:fb:b5:72:
7d:9f:6e:8b:5a:76:3b:69:0f:e9:57:6e:2f:51:fc:45:d0:e4:
2d:2d:76:06:60:c0:32:60:5b:17:b1:c9:62:cf:14:c5:98:3c:
15:d8:f4:ac:e6:06:04:bc:db:47:50:a4:cd:32:02:35:d5:b2:
ad:fa:d8:4c:70:ee:0e:b6:eb:a9:e9:c0:76:dd:1e:8f:11:3e:
14:05:dd:b8:6b:34:66:13:fc:d5:3a:58:1d:3b:cc:0a:9a:e6:
0b:2b:46:fb:cf:46:5f:8e:42:43:e2:f2:12:05:08:b3:dd:0c:
f2:ca:ae:fa:03:13:d5:41:98:d1:44:7d:ef:6b:97:42:18:2d:
5c:74:0e:e8:0e:38:3f:4d:db:b1:da:7e:08:84:b3:0d:50:84:
e7:8a:ea:12:72:b9:2b:de:4e:ea:18:74:6d:87:17:5b:78:9c:
92:44:cd:a3:9b:e3:26:62:6c:93:44:8f:82:38:80:2c:77:45:
8f:d6:21:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:19:09 2026 by rpki-client