Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.mft
File: ZcKTOAvEH1LZExWFqFgAOPkvXcw.mft (raw, json)
Hash identifier: wHft/yzyYwJkOfZeplIQDvhzDtpH+WgsiTIE048++IQ=
Subject key identifier: 00:BA:65:2C:B4:18:7B:E7:1C:77:7A:DD:34:E4:6F:3A:18:38:86:2B
Authority key identifier: 65:C2:93:38:0B:C4:1F:52:D9:13:15:85:A8:58:00:38:F9:2F:5D:CC
Certificate issuer: /CN=65c293380bc41f52d9131585a8580038f92f5dcc
Certificate serial: 019FAA19B40A226FB70FBA2A5023C920536D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZcKTOAvEH1LZExWFqFgAOPkvXcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.mft
Manifest number: 19D5
Signing time: Tue 28 Jul 2026 19:00:38 +0000
Manifest this update: Tue 28 Jul 2026 19:00:38 +0000
Manifest next update: Wed 29 Jul 2026 19:00:38 +0000
Files and hashes: 1: ZcKTOAvEH1LZExWFqFgAOPkvXcw.crl (hash: RelfF0A7lvYYu4vjS1HTgjXAxUw3mdgeHzNp6foWrfU=)
2: tLzYTCMgcEaSpA6pqJ49xM0mJhg.roa (hash: v1AukhZWCgWLe1okLFBBNkZmMt/d4/1gGQHfd9186v8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZcKTOAvEH1LZExWFqFgAOPkvXcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:19:b4:0a:22:6f:b7:0f:ba:2a:50:23:c9:20:53:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65c293380bc41f52d9131585a8580038f92f5dcc
Validity
Not Before: Jul 28 19:00:38 2026 GMT
Not After : Jul 29 19:00:38 2026 GMT
Subject: CN=00ba652cb4187be71c777add34e46f3a1838862b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:79:d7:70:48:dd:73:cf:e3:6d:18:f9:c7:74:
2a:48:5c:d5:0c:9e:30:9d:dd:bf:b6:29:e6:19:0a:
5a:56:51:6b:94:2e:81:b1:f4:05:29:c4:f2:6d:69:
01:64:5b:9d:29:56:28:35:07:cf:2e:f9:8b:9d:41:
98:b1:c8:b0:ac:7f:fc:64:e8:e0:a8:b9:4d:05:2b:
36:bc:ea:c0:33:fa:80:b3:b7:26:44:19:b1:eb:2d:
ea:6c:bc:20:64:08:97:ca:cc:22:08:51:c3:a5:1d:
39:83:14:43:e3:0a:49:13:ac:7a:61:ee:a3:72:04:
73:03:93:76:eb:95:d8:36:7a:4b:ef:4c:bf:f0:88:
97:c5:21:5b:07:13:fc:a4:44:26:26:38:b4:6a:10:
60:4f:0f:69:3d:d9:a3:18:5b:ff:75:7d:57:05:3c:
ea:7f:3d:7e:b3:33:46:c6:56:62:7a:80:bc:c2:64:
19:a0:b2:bb:ac:a5:03:1b:53:04:59:9f:b9:cf:93:
c0:24:61:b4:6f:d7:eb:44:64:ba:ce:e3:dc:16:4e:
1a:ae:7d:b9:c3:24:2f:da:5e:7b:a1:86:65:c1:75:
71:64:af:60:4b:b7:17:13:48:3d:ec:b6:ac:2e:6b:
0d:91:18:1f:25:27:2d:c8:06:51:39:03:11:dc:35:
d3:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:BA:65:2C:B4:18:7B:E7:1C:77:7A:DD:34:E4:6F:3A:18:38:86:2B
X509v3 Authority Key Identifier:
keyid:65:C2:93:38:0B:C4:1F:52:D9:13:15:85:A8:58:00:38:F9:2F:5D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZcKTOAvEH1LZExWFqFgAOPkvXcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:15:91:8f:55:68:b0:3b:9d:62:2a:a6:37:93:3d:76:5a:0b:
c2:75:26:23:95:89:e5:93:15:a0:a2:54:80:96:38:fc:37:d9:
bb:4c:7a:c6:6b:3b:14:16:c7:51:aa:03:a0:5d:02:98:67:80:
46:de:2d:32:09:9b:b9:3d:04:5c:9b:02:41:19:d9:1f:ba:9f:
3c:cb:f5:9e:54:3a:9f:06:74:99:9d:bc:ec:d7:bd:1d:2c:aa:
e5:68:dd:0b:0e:5c:aa:fb:c3:21:9d:d7:da:60:af:3d:66:bc:
4e:a4:0b:4c:ea:83:0c:d4:49:64:68:14:a0:57:00:42:03:34:
0b:3f:64:e4:e7:02:f6:61:ed:7a:7c:9b:1f:3d:b1:c4:51:28:
7f:50:c9:1c:fe:91:84:0f:32:01:8a:85:2c:15:81:11:3e:93:
be:8c:0c:ba:13:40:4d:93:58:f3:a6:36:49:48:6f:45:fd:e5:
a6:e3:5f:11:33:0d:1d:26:29:53:c0:dc:1a:9a:5a:bd:5a:6f:
2c:fa:39:8e:57:92:bb:7c:2f:c8:1b:f4:7f:ac:b9:ec:fa:e2:
36:61:54:9d:40:17:39:ed:c4:e6:f7:3b:1e:70:d8:14:36:fb:
f4:58:be:63:56:2f:87:c6:97:05:46:a7:39:56:de:66:a7:b6:
4f:57:b9:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:49:45 2026 by rpki-client