Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft
File: 0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft (raw, json)
Hash identifier: kuo9I021qukWubua38FpS4kvuMdPNRWb5tnmn771QAI=
Subject key identifier: 28:EA:04:FE:8C:0C:04:F9:64:B0:B1:3F:44:3C:3F:6E:F2:E4:EC:E2
Authority key identifier: D1:98:83:41:D3:60:78:65:F5:0F:5B:B0:2A:9A:3F:5C:2D:E5:8A:92
Certificate issuer: /CN=d1988341d3607865f50f5bb02a9a3f5c2de58a92
Certificate serial: 019FAABE917287BF54608A0C1876A6D1E082
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ZiDQdNgeGX1D1uwKpo_XC3lipI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft
Manifest number: 0536
Signing time: Tue 28 Jul 2026 22:00:43 +0000
Manifest this update: Tue 28 Jul 2026 22:00:43 +0000
Manifest next update: Wed 29 Jul 2026 22:00:43 +0000
Files and hashes: 1: 0ZiDQdNgeGX1D1uwKpo_XC3lipI.crl (hash: zSHla9tNaWMSyPpKtEiLCCCmYwPxnQwTmKpqdXRvWQU=)
2: 7jgvwOfbTS9EcboNY_mci-_zFzQ.roa (hash: SGXWMpwVSmLMAKNP+kPKK/+5RwAE6AIl6oVDLelweNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0ZiDQdNgeGX1D1uwKpo_XC3lipI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:91:72:87:bf:54:60:8a:0c:18:76:a6:d1:e0:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1988341d3607865f50f5bb02a9a3f5c2de58a92
Validity
Not Before: Jul 28 22:00:43 2026 GMT
Not After : Jul 29 22:00:43 2026 GMT
Subject: CN=28ea04fe8c0c04f964b0b13f443c3f6ef2e4ece2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7f:9d:06:42:79:53:24:18:87:c2:19:6c:15:
89:b4:74:4e:04:0f:1c:8f:96:80:92:01:c9:ce:58:
40:58:9c:65:2c:cc:fb:67:95:63:6a:5a:c7:50:1f:
6f:af:5d:55:a9:69:13:17:d5:d5:fd:cb:67:4f:20:
59:48:59:b9:ae:90:7d:b6:2a:0a:5b:36:4c:6d:c9:
f9:bd:77:03:df:8a:2c:29:91:37:b8:81:fa:cd:45:
43:7a:8a:99:28:69:32:ed:ea:ee:fa:64:48:fd:1e:
ff:ab:2b:c4:0c:98:92:b5:93:4e:c2:57:a4:79:2d:
13:2a:f3:88:10:76:5b:08:ed:21:a1:e2:c2:32:5a:
c2:04:cc:23:35:bb:59:40:9f:10:32:87:5b:08:31:
c7:e4:aa:c8:2e:3c:7d:74:c6:31:8a:c4:9b:0a:bb:
44:35:df:ae:51:36:8e:b2:ad:b6:83:15:11:63:4a:
8d:b7:5e:25:41:d8:84:c3:9e:1a:d0:8f:44:5e:4b:
65:95:6a:4c:c4:34:d7:ca:6f:77:86:04:73:69:16:
85:f6:2f:25:4b:b5:6f:21:79:0c:35:5b:99:e0:71:
cf:3a:2f:d2:40:67:14:df:6d:c9:bf:63:58:ec:25:
0e:10:b2:d3:8b:85:79:1b:17:d0:ee:1b:83:aa:ab:
17:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:EA:04:FE:8C:0C:04:F9:64:B0:B1:3F:44:3C:3F:6E:F2:E4:EC:E2
X509v3 Authority Key Identifier:
keyid:D1:98:83:41:D3:60:78:65:F5:0F:5B:B0:2A:9A:3F:5C:2D:E5:8A:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ZiDQdNgeGX1D1uwKpo_XC3lipI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:d8:a1:04:3a:6f:40:1e:24:82:3c:9e:1b:02:78:16:e7:2e:
5b:9f:08:12:c7:9a:9d:5e:d0:54:ff:ff:2b:0d:ea:54:e7:56:
9c:ff:d3:76:65:84:58:ac:2e:3b:66:ee:cb:52:ef:06:b0:08:
18:4f:33:2d:b2:8d:46:22:c7:c5:3c:b1:bd:2d:9c:f5:59:7e:
13:51:62:17:16:cb:d7:b5:54:b7:a9:9b:df:e6:c3:9b:a5:8e:
c5:87:aa:ec:1b:25:a6:1f:1a:41:0a:e0:09:95:11:f4:3e:ec:
6b:7d:dc:e8:79:da:84:7f:23:91:ae:63:2b:00:d1:80:37:af:
28:b6:3d:d3:b8:5d:ae:ad:1f:ba:5e:6b:11:0c:87:75:29:20:
82:05:69:28:72:d6:62:88:b3:54:17:56:75:67:dc:2e:33:94:
ab:57:13:c0:8b:27:f7:ad:d5:91:92:34:d1:13:4c:6d:5e:b4:
38:ae:74:5a:fe:db:c3:3e:cd:84:15:8c:51:aa:d8:43:f1:4b:
3c:09:33:d1:55:c9:f0:77:5c:bd:06:dc:e2:78:c4:75:78:95:
d3:99:7e:fb:2f:93:b8:61:84:75:dc:ea:c0:81:21:fe:3c:96:
b9:ac:f8:8b:77:d1:08:95:1a:5e:8d:22:1c:da:1c:9d:bd:95:
ec:95:a9:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:37:05 2026 by rpki-client