Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/e8b89c-8268-402b-aa26-ead041774e07/1/Z2WiG1YbqGZc95-_RMMZWd4o8hY.mft
File: Z2WiG1YbqGZc95-_RMMZWd4o8hY.mft (raw, json)
Hash identifier: HD677o476wRrnpoTH9SkFFvn0+v8qGlOZaqKpVflcdk=
Subject key identifier: 8E:9F:D4:64:DD:88:A5:4A:D9:61:6E:CB:D5:F4:24:09:4E:3C:5E:A8
Authority key identifier: 67:65:A2:1B:56:1B:A8:66:5C:F7:9F:BF:44:C3:19:59:DE:28:F2:16
Certificate issuer: /CN=6765a21b561ba8665cf79fbf44c31959de28f216
Certificate serial: 019FA7F4991A7DEDAC63341ADBC53546E04F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z2WiG1YbqGZc95-_RMMZWd4o8hY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/e8b89c-8268-402b-aa26-ead041774e07/1/Z2WiG1YbqGZc95-_RMMZWd4o8hY.mft
Manifest number: 0B1E
Signing time: Tue 28 Jul 2026 09:00:52 +0000
Manifest this update: Tue 28 Jul 2026 09:00:52 +0000
Manifest next update: Wed 29 Jul 2026 09:00:52 +0000
Files and hashes: 1: XxbITpOJuSZiY6H9TV5ap_4aUaY.roa (hash: GGGD2/9LfCjCuy4UA1Jhb/88EGXnxXM/rGiFG8eHBow=)
2: Z2WiG1YbqGZc95-_RMMZWd4o8hY.crl (hash: 5+wM9VFxKayDYnVWvRhYbx/vMIwcDkrvUWfFcefwua4=)
3: sj6CcgFQW1xXVqY_4XZQj4z-6A4.asa (hash: VwCG7Y0uTpbjnmJAQtc9+mdH7M+TQGbGHrYZ5OCItWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/e8b89c-8268-402b-aa26-ead041774e07/1/Z2WiG1YbqGZc95-_RMMZWd4o8hY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/e8b89c-8268-402b-aa26-ead041774e07/1/Z2WiG1YbqGZc95-_RMMZWd4o8hY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z2WiG1YbqGZc95-_RMMZWd4o8hY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 09:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:f4:99:1a:7d:ed:ac:63:34:1a:db:c5:35:46:e0:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6765a21b561ba8665cf79fbf44c31959de28f216
Validity
Not Before: Jul 28 09:00:52 2026 GMT
Not After : Jul 29 09:00:52 2026 GMT
Subject: CN=8e9fd464dd88a54ad9616ecbd5f424094e3c5ea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:2f:d6:96:ed:d1:0e:95:d3:f4:90:59:3e:03:
e8:41:32:44:a8:fc:d6:64:32:d7:92:34:21:55:14:
83:2c:fe:9b:58:8a:89:ef:a0:92:98:a7:a7:89:fa:
15:19:c5:30:b7:c8:e7:17:ec:37:5b:2a:bd:d6:3f:
60:5e:1c:7b:0c:b5:d2:1c:ed:2a:74:5f:6d:41:6d:
b6:32:50:f5:f8:ea:74:6f:60:74:ef:be:c1:ea:a9:
1c:3d:17:bb:d9:2c:c1:5c:17:3a:c8:28:a3:a3:e2:
a4:ca:6b:d2:de:90:a0:dc:0d:a0:92:d8:d6:e0:e9:
0b:e5:32:4a:6a:ca:45:0f:3c:b6:b5:68:3f:1c:c1:
cb:6a:5f:88:40:55:66:1b:ab:08:7f:eb:fb:67:4f:
e7:0b:29:38:fd:1e:26:77:d2:99:2c:60:f1:28:48:
b4:58:04:7c:a0:54:f6:f3:ef:7e:1f:31:17:73:ca:
eb:c6:ce:c3:24:77:67:01:f1:59:d2:ff:96:55:9a:
34:b8:5b:35:3a:40:bd:8a:2c:26:d5:29:63:4d:92:
e5:64:f9:8b:69:44:02:44:c3:28:09:3d:d0:33:d8:
99:36:66:95:49:0d:5f:8b:58:65:85:b7:24:f6:d2:
db:49:cc:8e:c0:71:99:84:72:98:5b:47:e7:e4:07:
72:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:9F:D4:64:DD:88:A5:4A:D9:61:6E:CB:D5:F4:24:09:4E:3C:5E:A8
X509v3 Authority Key Identifier:
keyid:67:65:A2:1B:56:1B:A8:66:5C:F7:9F:BF:44:C3:19:59:DE:28:F2:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z2WiG1YbqGZc95-_RMMZWd4o8hY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/e8b89c-8268-402b-aa26-ead041774e07/1/Z2WiG1YbqGZc95-_RMMZWd4o8hY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/e8b89c-8268-402b-aa26-ead041774e07/1/Z2WiG1YbqGZc95-_RMMZWd4o8hY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:df:64:f9:90:01:d1:66:a1:b5:7e:8e:64:51:f5:e5:2e:5b:
11:ee:5a:32:b3:73:36:ab:5f:c0:78:d4:3a:1c:56:a5:b3:b7:
69:25:f8:cf:68:e4:61:54:93:b4:33:d5:39:d5:d9:31:fd:28:
6d:09:14:bb:b8:ea:e6:4f:0c:2d:74:f1:9d:fa:6b:5b:a4:dc:
d8:48:72:ac:1a:49:95:39:c1:13:99:8d:9d:6a:29:f2:c8:3d:
72:fe:69:57:58:35:5d:3a:78:04:2c:ce:49:7e:25:dc:6a:16:
ed:86:43:b7:79:2c:62:ee:bf:33:79:0f:f0:af:ad:54:42:f1:
1a:0f:e6:cc:c0:08:d3:dc:25:e5:89:50:5e:c2:89:d6:40:e5:
98:99:5c:0c:4a:ed:61:e4:9f:b8:0b:36:38:43:d6:7d:db:69:
a7:3a:29:52:41:34:e9:ab:7a:62:b2:05:18:c7:73:b5:f8:48:
61:de:ca:3a:f9:2f:37:4e:be:ca:cb:34:76:f0:73:02:9f:59:
8b:e6:3f:fa:92:35:4b:84:d2:79:95:74:11:ed:ff:3f:27:98:
6d:0f:c4:b8:f0:e4:e1:de:6a:14:5c:ab:6b:30:2a:50:97:ca:
a2:db:d1:ae:17:b2:e8:a4:86:fa:4d:ff:93:0e:93:c3:52:c5:
85:8b:b0:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:57:01 2026 by rpki-client