Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/zWj3o5G3sWSe1JA0gtPpMe0049g.mft
File: zWj3o5G3sWSe1JA0gtPpMe0049g.mft (raw, json)
Hash identifier: VunSbGd/HxeoVnsn0pPs1k8VPe1jxg1yrjAMHbPyTlw=
Subject key identifier: 5C:0F:E1:E2:8B:88:10:D2:86:9B:AF:84:9E:95:AB:C5:FD:82:17:99
Authority key identifier: CD:68:F7:A3:91:B7:B1:64:9E:D4:90:34:82:D3:E9:31:ED:34:E3:D8
Certificate issuer: /CN=cd68f7a391b7b1649ed4903482d3e931ed34e3d8
Certificate serial: 019FAC3F1699F8B651239AD2DF2D94C2C368
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zWj3o5G3sWSe1JA0gtPpMe0049g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/zWj3o5G3sWSe1JA0gtPpMe0049g.mft
Manifest number: 12D0
Signing time: Wed 29 Jul 2026 05:00:43 +0000
Manifest this update: Wed 29 Jul 2026 05:00:43 +0000
Manifest next update: Thu 30 Jul 2026 05:00:43 +0000
Files and hashes: 1: 1-xP6wGH4E4j9NJ-NB2QfLldx1Lw.roa (hash: uFFlZsAMKLJKDEktW5ybjbZi8RHcBaE5UQZ62izVnr4=)
2: G9U4X93rXqstWDjqCmr74O0MOOc.roa (hash: lHIU6yFEQWHJAGlwWMO/pP3VoRev0tS4Byvjv7Nl/Nk=)
3: SV_A5OMf5Dv_YVGf3i03i121qDE.roa (hash: Yx1VNJorHPI+3bEwTwwZMtNZ1vpLF6jyHjPFF9j0vFs=)
4: u0VefA4FNPAM3OaDOe1uGO8G7GM.roa (hash: L/EGbgrpKOwV4dXB0O77kAg3sNSvZROrNTY/PmdUGpM=)
5: zWj3o5G3sWSe1JA0gtPpMe0049g.crl (hash: z3S4lFTitw8irGwgUrNLRzktLHq2VJkw/OV83vRaPgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/zWj3o5G3sWSe1JA0gtPpMe0049g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/zWj3o5G3sWSe1JA0gtPpMe0049g.mft
rsync://rpki.ripe.net/repository/DEFAULT/zWj3o5G3sWSe1JA0gtPpMe0049g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:3f:16:99:f8:b6:51:23:9a:d2:df:2d:94:c2:c3:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd68f7a391b7b1649ed4903482d3e931ed34e3d8
Validity
Not Before: Jul 29 05:00:43 2026 GMT
Not After : Jul 30 05:00:43 2026 GMT
Subject: CN=5c0fe1e28b8810d2869baf849e95abc5fd821799
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:17:43:4e:bf:9c:e4:37:84:9a:85:be:17:77:
1e:6a:11:fc:87:95:d8:1d:80:0b:98:f0:4c:80:58:
c3:0b:ea:17:99:79:d5:a8:e4:56:4a:7b:ea:70:40:
14:d5:0a:f4:cd:42:8b:4b:63:32:b3:ac:21:fb:eb:
92:e9:23:42:6f:1c:fe:fd:31:6f:02:46:f5:55:f7:
da:ec:2c:fe:fc:8d:fa:db:9f:8b:ee:e4:27:94:82:
7b:99:35:fe:78:39:f7:2a:3a:87:a2:c6:13:fa:ce:
cb:14:4e:5b:10:57:9f:c4:1b:03:f4:d9:d5:9f:53:
d4:0e:f3:29:af:58:cc:91:90:dd:68:4f:83:d5:57:
fb:a9:b9:5f:c9:fa:4d:9d:fe:49:c3:cd:2d:9a:33:
a3:95:40:63:02:d7:9f:00:ed:d7:09:8c:e7:80:cb:
4f:f7:0d:ce:d5:d2:8e:9e:dd:6f:df:62:46:9d:52:
39:77:4a:10:2f:17:14:dc:1a:a9:b1:9d:0f:42:d0:
94:cc:e8:f4:a5:02:37:1f:71:ba:f8:5d:8f:05:9a:
cb:59:e4:4f:b7:89:8c:c4:58:4e:9f:14:1b:5e:fb:
01:7a:1c:16:0a:c3:49:70:14:8f:e1:89:44:f6:bd:
2d:48:71:cc:b5:4d:b5:67:5c:fb:7e:a9:e0:b2:c8:
93:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:0F:E1:E2:8B:88:10:D2:86:9B:AF:84:9E:95:AB:C5:FD:82:17:99
X509v3 Authority Key Identifier:
keyid:CD:68:F7:A3:91:B7:B1:64:9E:D4:90:34:82:D3:E9:31:ED:34:E3:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWj3o5G3sWSe1JA0gtPpMe0049g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/zWj3o5G3sWSe1JA0gtPpMe0049g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/zWj3o5G3sWSe1JA0gtPpMe0049g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:8a:6f:c3:3c:b3:e9:db:e7:d6:bd:f4:a7:8d:25:4c:33:65:
33:ce:d4:6f:ba:61:f5:9d:92:db:7b:d4:40:da:1e:9c:fe:db:
ed:21:8b:8b:af:b1:5a:fc:31:bb:14:38:77:80:67:34:6b:4d:
4c:64:50:01:39:dd:bb:22:00:f7:79:7b:d0:ac:00:7c:70:44:
a6:8a:d6:4e:ad:b4:e1:8c:97:1b:9c:1b:76:59:57:0e:74:40:
a4:d1:43:52:b1:51:e2:00:76:8a:27:25:2d:32:20:b3:d8:a4:
10:df:69:40:47:5e:26:7b:c6:6c:c4:49:be:48:b1:f8:4f:11:
35:f9:db:4e:78:14:49:ab:5a:0a:9d:ad:38:cf:9d:81:51:5e:
4f:18:a3:90:44:a8:a9:51:41:5f:a7:0c:ac:09:d9:10:fc:b1:
2d:e5:5b:37:e5:45:be:28:a3:41:bb:db:df:4a:09:56:06:f4:
81:a3:d3:d2:37:ee:e4:cf:8e:26:46:a8:c6:9a:35:d1:eb:53:
ac:30:36:99:6b:95:d4:48:04:76:fd:e4:9a:da:ec:99:91:db:
18:e3:d6:07:40:cd:93:5b:ce:29:df:74:99:cb:97:50:31:18:
c7:fd:3e:c8:7b:7e:09:e3:bf:71:a3:2a:a0:17:1a:d0:1f:73:
90:58:bd:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:57:01 2026 by rpki-client