Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft
File: ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft (raw, json)
Hash identifier: zCdo1qkocurtyB8mnsMXy5k4X1J1XMNwluaw/zDD8DI=
Subject key identifier: 85:7D:ED:DD:3E:E2:76:C2:04:7E:85:32:4D:6E:48:71:5B:F3:4C:B9
Authority key identifier: 65:3F:55:62:91:21:B6:0F:B1:9C:97:F9:9C:75:DD:6F:01:5D:D6:E8
Certificate issuer: /CN=653f55629121b60fb19c97f99c75dd6f015dd6e8
Certificate serial: 019FAB2C2567D8CA2FB765DB6136F893016D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft
Manifest number: 19DF
Signing time: Wed 29 Jul 2026 00:00:24 +0000
Manifest this update: Wed 29 Jul 2026 00:00:24 +0000
Manifest next update: Thu 30 Jul 2026 00:00:24 +0000
Files and hashes: 1: 0GL7DdIdoFqMUjvFhCRfHpKPMbA.roa (hash: pZia0ALckAxbVwXjSvk9ZitHob5JnbAYRMcyTh/GAHw=)
2: 4CJ3InuHwPxMIYug15LfFjf4TFE.roa (hash: AqjwYTvPMHv8KhwXl422zB5jGiNZqfOiCwgbFsHZ07g=)
3: H6jlQnwQ3aiH-RYU25LA_SCJ8YQ.roa (hash: z0WYajZ68GEteUnmX5OmcBfJ0ynCGdGVIvLSKmVhonU=)
4: VxmBydPNDVkjAwNW0HlCl0mcW2A.roa (hash: 2uX2f6w9d7FkhAQJ79lByeDaz04Av+toag4OFSNYkF8=)
5: X4rKfB3PDI3kjmwak5Qpg6vv3Qo.roa (hash: rE1Gy+5Y3N/6nRhiVvsTgzmZ/j4C83X5X1jx7h+hjs0=)
6: ZT9VYpEhtg-xnJf5nHXdbwFd1ug.crl (hash: 4dcjWIAHAbWjPUN/+FTYb+2sDy1bitvNvuumoHldh4I=)
7: srwZqD3NLb6Mgfkh0xVjrlQc7p8.roa (hash: WOqlcZKIxr5sVUqyyKJNHMiLfFbk3vNnFX+UsNkt18I=)
8: zPyNAFdQmlJqV2qKRKA-eSuuTJY.roa (hash: WQ7fB4l+y3xXDPGETnFXWLdLLeTLH4yREUZKhvFa6Ho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:2c:25:67:d8:ca:2f:b7:65:db:61:36:f8:93:01:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=653f55629121b60fb19c97f99c75dd6f015dd6e8
Validity
Not Before: Jul 29 00:00:24 2026 GMT
Not After : Jul 30 00:00:24 2026 GMT
Subject: CN=857deddd3ee276c2047e85324d6e48715bf34cb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c4:f7:34:89:62:6e:2e:81:78:b8:57:c7:8b:
cc:12:e8:85:a2:7b:7e:10:2d:53:d8:64:30:ee:db:
35:b6:19:75:0b:d1:d0:5c:f9:a2:0d:4c:69:a3:1d:
1e:27:d4:3c:ed:3c:e4:a9:e9:06:fa:d3:9e:ed:88:
e8:36:10:9e:65:bb:20:5a:c1:f9:43:0e:d4:71:1a:
a2:21:a0:55:46:39:17:65:d3:df:cb:95:38:ce:1a:
a5:30:89:3e:94:af:fd:c2:35:ba:2d:9f:f9:bc:75:
27:b3:08:cd:a6:7a:86:37:04:01:69:f2:8d:72:91:
a7:5f:d6:93:64:a0:c4:b2:30:69:29:83:d0:5f:ff:
4d:80:ff:7e:d1:e2:33:bb:3f:5f:af:6e:43:d6:39:
19:d4:ab:24:3c:2b:7d:68:ae:f8:60:28:a4:3c:31:
47:bb:3b:af:52:f2:93:28:ef:06:bb:98:da:9b:2b:
90:1e:e6:a5:72:e9:de:e5:bf:48:0e:06:38:0f:bb:
e2:20:98:1c:dd:db:4f:a3:3b:9d:8c:dc:d5:06:de:
94:2d:a3:4e:9c:e1:4f:64:cd:2e:83:43:04:b1:0a:
cf:75:bc:d8:d4:f2:e1:84:e0:62:b7:37:f0:e4:aa:
1a:36:81:9b:da:af:fc:15:90:be:a9:75:04:f0:cf:
c9:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:7D:ED:DD:3E:E2:76:C2:04:7E:85:32:4D:6E:48:71:5B:F3:4C:B9
X509v3 Authority Key Identifier:
keyid:65:3F:55:62:91:21:B6:0F:B1:9C:97:F9:9C:75:DD:6F:01:5D:D6:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:41:d0:25:77:e5:a5:b7:bf:b8:b4:c0:4c:50:b6:4c:10:3a:
9a:6b:76:5f:53:55:c1:06:21:7a:07:2e:10:97:9a:54:ba:2d:
96:b2:18:c2:6d:eb:41:2b:ef:08:ec:b7:79:b5:75:e3:b0:63:
b1:a9:8e:1c:63:00:39:d6:22:e6:fb:7c:3b:9a:36:42:7c:da:
64:fd:90:51:c6:4b:9a:f2:d5:b1:34:8d:6e:26:1a:79:8c:78:
f5:12:70:76:5a:99:07:6b:ed:07:05:ad:9f:de:53:ab:04:ef:
8a:8c:17:b9:50:51:84:fc:a2:a7:7b:92:4c:1f:66:04:af:d7:
9a:8c:2c:55:2d:2a:d8:f3:79:be:c2:b8:74:e6:bc:59:78:ec:
3b:28:13:71:95:f0:ef:2e:4e:9c:24:fa:cd:44:94:74:36:61:
76:6f:e3:5d:6b:fc:59:f2:56:40:01:c9:2a:4c:bb:99:2e:1e:
cd:93:20:81:2e:49:f2:0c:ac:e7:20:78:b2:a0:6e:7c:63:2a:
a6:74:0f:50:fe:78:fb:0a:9c:45:47:5b:1f:56:55:ba:af:0d:
c2:70:f6:7e:6d:d8:e0:5e:d9:31:0f:d2:75:66:d6:7d:d0:4e:
2c:1c:82:cd:a1:65:63:16:cf:11:e7:fa:38:46:4c:7d:5d:76:
f1:24:85:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:10:31 2026 by rpki-client