Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.mft
File: zDnmvkDYASiJbM0TH2WlWtmKQK8.mft (raw, json)
Hash identifier: sqxOfdQV+6L2FDCZJYgR35mHjbn0FoZbZbGnuLIXk1Y=
Subject key identifier: 66:77:0E:96:2A:BB:8C:33:98:12:AD:52:44:CF:D7:1B:9C:8E:82:41
Authority key identifier: CC:39:E6:BE:40:D8:01:28:89:6C:CD:13:1F:65:A5:5A:D9:8A:40:AF
Certificate issuer: /CN=cc39e6be40d80128896ccd131f65a55ad98a40af
Certificate serial: 019FABD107559DD1B0D49BCE86659EE34091
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zDnmvkDYASiJbM0TH2WlWtmKQK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.mft
Manifest number: 19D5
Signing time: Wed 29 Jul 2026 03:00:30 +0000
Manifest this update: Wed 29 Jul 2026 03:00:30 +0000
Manifest next update: Thu 30 Jul 2026 03:00:30 +0000
Files and hashes: 1: h8MAjW2nwR1TuDpY3gaR4GIp5Is.roa (hash: YMOvJ9hakU4xTrKD5f+aHfr6VChVy5zYjPbZPORV+p4=)
2: hq6cHZZmfTc8iDuXctwL9j8vYGA.roa (hash: gnwIM65nm0H3pqLfxC4cpwXQNNz6WAkiHxWYF953SRw=)
3: zDnmvkDYASiJbM0TH2WlWtmKQK8.crl (hash: u3arJwiXfHMsqjOq2kpiCmHUyoacdGH27zuBOCHzsks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zDnmvkDYASiJbM0TH2WlWtmKQK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:d1:07:55:9d:d1:b0:d4:9b:ce:86:65:9e:e3:40:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc39e6be40d80128896ccd131f65a55ad98a40af
Validity
Not Before: Jul 29 03:00:30 2026 GMT
Not After : Jul 30 03:00:30 2026 GMT
Subject: CN=66770e962abb8c339812ad5244cfd71b9c8e8241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:bc:8d:75:c8:a5:46:e5:c4:e5:a1:76:8c:57:
22:e9:c1:9c:65:42:7c:4e:99:bc:7e:7e:5c:35:ec:
e7:b2:b3:fc:9f:fa:84:e4:27:af:80:28:06:48:31:
8f:f1:e6:28:e4:ab:50:ce:b6:73:c6:a7:53:00:a7:
c9:11:94:22:65:db:ee:53:06:88:e1:12:74:96:41:
bd:07:79:32:09:fb:3d:b2:40:6f:c6:a1:d4:59:a3:
e0:14:07:5d:ec:8e:e2:12:5b:34:94:f4:ca:2f:99:
62:ce:15:c6:a7:d0:e7:cd:6b:3f:98:7c:fb:fe:3f:
42:d2:88:e4:83:7f:cd:3d:1a:99:ba:5b:5b:71:00:
5e:8b:71:15:84:98:8b:09:e5:85:61:a2:4c:94:c6:
e1:4d:c0:fd:74:2b:08:7e:e9:d5:f6:93:07:51:03:
b8:21:cf:db:16:77:2c:18:24:16:35:87:70:82:14:
f9:bc:e1:fd:33:ee:29:35:84:39:73:0c:9a:55:8f:
5c:55:02:47:13:63:da:89:a9:c0:c9:7b:f0:0a:1b:
d2:a0:a0:be:3d:6f:03:48:9c:30:9c:04:f4:c5:43:
0f:2f:b6:83:b5:c9:2c:52:da:b4:03:4d:10:17:db:
55:a3:9a:42:10:38:ea:25:63:f4:51:ae:fb:1f:a6:
5e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:77:0E:96:2A:BB:8C:33:98:12:AD:52:44:CF:D7:1B:9C:8E:82:41
X509v3 Authority Key Identifier:
keyid:CC:39:E6:BE:40:D8:01:28:89:6C:CD:13:1F:65:A5:5A:D9:8A:40:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zDnmvkDYASiJbM0TH2WlWtmKQK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:bf:1e:a9:8c:f2:e1:ee:b0:d5:cd:29:48:72:60:e9:0f:b4:
da:54:d1:b7:76:f4:52:c6:91:f7:df:c6:28:05:d6:8d:d3:6f:
c5:64:82:46:13:66:25:8d:f1:17:95:ce:c2:69:2c:18:22:7d:
5f:d6:8d:97:17:62:f2:aa:e8:bf:0b:17:a9:19:5a:14:aa:8b:
c3:6a:bd:f0:6a:f0:a3:23:d9:e3:f8:0c:a0:8d:5b:39:d5:b5:
0f:99:cc:91:50:eb:c7:d8:80:67:1c:51:70:b8:da:c5:05:f0:
6b:66:49:02:cf:eb:af:43:9a:f9:5e:2e:ad:09:fe:b3:b7:fb:
f6:5f:e0:b5:02:51:dc:aa:3f:2b:c1:ad:50:d7:52:c8:e5:b6:
3c:2b:70:34:74:e8:02:5a:1d:57:86:fb:82:dc:e9:4a:f5:42:
fb:9b:8d:92:25:49:ef:cf:60:be:1f:df:64:ce:c5:89:5a:63:
bc:04:01:14:cb:9c:99:bc:21:5a:ec:53:14:3b:51:1c:4e:83:
9d:1e:a3:35:61:d8:c1:fc:7a:51:90:a2:1a:3c:d3:40:84:18:
b8:a9:d7:28:6d:2b:e2:32:68:4f:6d:84:3d:90:a5:5c:6b:47:
69:3b:c1:b8:c1:65:c2:a5:8f:90:20:67:75:f5:41:59:c3:c8:
19:b1:e3:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:46:55 2026 by rpki-client