Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.mft
File: Z9vzHVl3RsmhQ0cGBipAZTvFRcM.mft (raw, json)
Hash identifier: DeO2y1dEQ6bdcXvhDg76x4F+CjgFRU/cSHNHSoyp1gI=
Subject key identifier: DD:5C:F8:FC:33:99:3A:DE:B2:9F:F5:69:40:50:B4:0B:54:23:DA:1B
Authority key identifier: 67:DB:F3:1D:59:77:46:C9:A1:43:47:06:06:2A:40:65:3B:C5:45:C3
Certificate issuer: /CN=67dbf31d597746c9a1434706062a40653bc545c3
Certificate serial: 019FAD8868551E1E8AB2D21C6408614B838C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.mft
Manifest number: 056B
Signing time: Wed 29 Jul 2026 11:00:25 +0000
Manifest this update: Wed 29 Jul 2026 11:00:25 +0000
Manifest next update: Thu 30 Jul 2026 11:00:25 +0000
Files and hashes: 1: Z9vzHVl3RsmhQ0cGBipAZTvFRcM.crl (hash: 4sx5/rVF3UeM0Wzy516VszqQORbiBYZK4lt85pejKn8=)
2: _7yKofbHnJoEbJpKfmaDh_UzpU4.roa (hash: SGPyBt5E90o9ZLuMZHW0/rutTar66Sv5UUe187RDyyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 11:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:88:68:55:1e:1e:8a:b2:d2:1c:64:08:61:4b:83:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67dbf31d597746c9a1434706062a40653bc545c3
Validity
Not Before: Jul 29 11:00:25 2026 GMT
Not After : Jul 30 11:00:25 2026 GMT
Subject: CN=dd5cf8fc33993adeb29ff5694050b40b5423da1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:bd:6c:a9:2b:25:98:4e:27:46:89:24:a9:a5:
4a:ea:e6:56:0b:7e:73:e2:49:ed:9a:7f:f3:1b:6a:
35:f9:1b:12:84:09:00:1e:c2:e7:b3:6c:98:dc:df:
c1:d6:e3:39:06:48:2e:6c:e3:87:27:63:26:4a:fd:
a1:0f:34:31:f2:9b:93:4b:b9:6b:49:08:85:e1:80:
40:da:ac:9b:f7:c9:5a:a4:a9:f0:ca:ca:ab:e5:71:
b5:4f:c8:d0:25:8b:1f:22:81:a0:d7:49:ae:fa:44:
00:c9:31:f6:df:25:ab:d3:71:06:34:ea:a0:70:2e:
e3:c4:f8:7c:40:ec:c3:be:b3:e2:25:ed:65:bd:d2:
25:12:21:fd:36:1c:51:6c:e8:60:49:8f:e5:7b:cf:
ea:e9:50:02:d5:54:2d:13:2b:84:0f:6b:df:4a:ef:
a9:0c:d1:53:7e:af:b7:1b:b7:b8:e0:f9:9d:df:8d:
16:d1:3c:83:26:d0:1f:22:72:b3:13:a2:ba:87:43:
b9:18:ec:8c:8b:71:da:7f:be:ce:b2:15:ee:83:75:
02:ef:54:d9:a7:36:f4:3a:7a:6c:5a:67:57:68:ac:
95:e0:3c:be:48:63:a0:60:17:b0:ef:0f:11:af:c8:
22:5a:49:17:6b:fd:54:22:59:23:f8:6b:46:82:d0:
dc:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:5C:F8:FC:33:99:3A:DE:B2:9F:F5:69:40:50:B4:0B:54:23:DA:1B
X509v3 Authority Key Identifier:
keyid:67:DB:F3:1D:59:77:46:C9:A1:43:47:06:06:2A:40:65:3B:C5:45:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:49:e7:3c:fc:2a:60:a3:e2:1a:d0:aa:ce:71:d1:ca:59:87:
2c:c2:f6:db:b0:3f:71:f0:df:08:25:f6:ee:19:95:36:a4:e5:
94:a3:73:2c:85:9a:7a:ca:ef:19:ee:50:e4:b4:03:f2:dc:e4:
ac:a4:66:78:98:f5:ee:2d:b3:41:2c:5c:5b:70:83:0f:40:ef:
29:7c:6d:e6:66:40:4e:e5:d4:ab:7d:7a:c6:4a:bf:94:e1:3b:
46:09:78:e6:98:24:5d:72:e5:23:38:fd:88:f6:c1:57:f2:0d:
39:dd:61:fc:82:2b:39:87:3f:eb:38:12:b4:e3:15:8d:d9:a6:
51:e4:59:3f:e2:39:6b:c4:c0:5a:45:94:e4:7c:a2:1f:d2:50:
05:10:cf:27:5f:3e:fb:cd:7f:10:7a:12:c9:e2:1c:7f:10:ca:
b0:d8:c6:76:f7:63:78:7c:de:43:6e:24:19:bb:94:7f:36:da:
87:de:64:e1:c1:4b:7f:5e:16:57:39:55:05:93:0f:41:3a:22:
6f:42:47:5b:e7:17:22:58:21:84:0a:37:ba:13:cd:fa:ae:67:
3c:79:87:ff:73:58:50:9c:f7:18:0f:a8:d4:32:31:ad:6c:db:
d7:ad:dd:59:2a:54:da:f7:21:2f:2d:cc:dd:30:33:c7:d8:57:
6e:a6:ce:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 17:30:29 2026 by rpki-client