Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft
File: ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft (raw, json)
Hash identifier: VYrHr10YO3qX1eQCppPv/SQp34+BuXOoTh47ITIlSP0=
Subject key identifier: B1:73:5F:D4:59:74:C8:AF:55:BE:6A:B9:19:43:D9:1E:6E:FA:56:8B
Authority key identifier: 64:39:5D:6A:1A:28:88:D9:C3:56:EE:D3:27:89:E6:27:D2:3D:51:6E
Certificate issuer: /CN=64395d6a1a2888d9c356eed32789e627d23d516e
Certificate serial: 019FAA1A2440C570EFDB568D4F182A25B42D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZDldahooiNnDVu7TJ4nmJ9I9UW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft
Manifest number: 19D3
Signing time: Tue 28 Jul 2026 19:01:07 +0000
Manifest this update: Tue 28 Jul 2026 19:01:07 +0000
Manifest next update: Wed 29 Jul 2026 19:01:07 +0000
Files and hashes: 1: ZDldahooiNnDVu7TJ4nmJ9I9UW4.crl (hash: YQVj4YGhTvz2xxX6h9XREGn4M2HRIzkNLo7GmTOoLYQ=)
2: ftUP8AhWyKSCfDygp2EvHTO8Boo.roa (hash: ewSYxaolal/Z6l87pd6PUdDa+voxm7gfdPqRbZdlcCk=)
3: h7hfu83GdfBNM7Zx2PElKBPYyGY.roa (hash: HsgzFT58UTHg7xZoI81l8ngXvJujr6TYdyM2zeg4nXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZDldahooiNnDVu7TJ4nmJ9I9UW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 19:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:1a:24:40:c5:70:ef:db:56:8d:4f:18:2a:25:b4:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64395d6a1a2888d9c356eed32789e627d23d516e
Validity
Not Before: Jul 28 19:01:07 2026 GMT
Not After : Jul 29 19:01:07 2026 GMT
Subject: CN=b1735fd45974c8af55be6ab91943d91e6efa568b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f1:e0:1c:6f:3f:2d:91:08:87:fc:06:5d:25:
c2:fa:f8:cb:f2:b5:1f:ae:c0:0b:e4:31:6f:a1:4f:
18:68:e4:57:a7:32:95:ee:df:2b:c9:39:8a:b7:b3:
a1:7a:98:42:8a:82:c4:f7:34:e5:b2:c3:fe:db:82:
97:d4:67:89:a6:f4:e1:bd:47:dd:ae:81:32:f7:67:
06:c8:88:70:7b:b1:9c:54:50:03:dc:fe:09:01:62:
e5:9d:a1:ca:f2:02:00:3b:4e:d5:5a:97:68:76:e2:
af:0b:63:43:25:d6:c9:32:8e:5f:1b:6f:35:9e:3e:
36:13:86:0e:17:d6:b6:05:13:ab:e5:65:04:1c:06:
fd:e4:3f:ed:65:9a:8b:66:cb:a3:a8:e6:70:4a:c9:
17:09:75:2d:91:07:b7:77:0f:3e:f7:eb:ae:ef:48:
d0:32:3c:3d:32:1c:ab:04:22:99:2f:77:35:10:98:
f4:bd:4f:fb:9b:45:e4:16:4e:d9:56:87:4c:f7:e8:
3e:8e:00:6d:db:ae:2d:7e:fd:04:11:a5:cd:68:85:
a4:38:4a:d6:7b:3e:68:3a:5c:f2:6b:f3:cf:88:bd:
05:b1:9e:d2:78:27:80:75:97:ec:31:40:fe:bd:88:
62:d2:40:1e:8d:56:b2:f3:44:04:98:80:a4:f0:e2:
a9:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:73:5F:D4:59:74:C8:AF:55:BE:6A:B9:19:43:D9:1E:6E:FA:56:8B
X509v3 Authority Key Identifier:
keyid:64:39:5D:6A:1A:28:88:D9:C3:56:EE:D3:27:89:E6:27:D2:3D:51:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZDldahooiNnDVu7TJ4nmJ9I9UW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:bf:af:f2:b0:01:d9:af:3a:be:ca:18:aa:39:54:f3:1c:62:
f2:20:6e:21:98:c8:83:d5:bc:db:bc:8e:e8:75:04:ed:80:d7:
78:a7:86:e5:7b:fe:7f:9e:2c:d9:dc:28:47:a0:f5:72:bb:ab:
94:c7:94:70:13:eb:e4:3c:3a:72:a9:dd:6a:fe:98:a8:05:1a:
72:53:3c:7e:0c:2f:c0:42:c7:f4:5b:bf:25:93:1c:75:b5:a3:
f9:a8:f1:5a:f5:2f:83:72:89:7f:1f:48:5f:fc:8b:69:7a:70:
f0:b6:c4:7c:81:7b:80:b6:fa:3d:00:f1:c4:34:c8:e8:6d:09:
5d:1e:e5:c2:c7:b5:61:5d:70:6f:5c:e9:ec:28:51:d9:c9:80:
90:e6:11:5a:a8:7b:a6:00:89:6a:c5:0f:cf:0b:63:2e:90:94:
63:c0:98:50:c3:e8:07:5f:2e:f3:a4:39:47:c5:9b:4a:a7:07:
d8:e0:d1:08:44:65:88:bb:3e:92:b1:18:64:b1:ad:c9:17:72:
a7:26:8f:1f:c6:17:4a:c4:3a:f8:45:22:ea:ed:b3:00:6a:2f:
7b:50:84:2e:f6:b3:0d:c3:67:25:52:00:c3:22:bd:f5:b2:89:
b6:e6:6b:90:d6:72:3a:32:20:dd:65:b4:a5:1b:df:f9:e1:3a:
b5:92:a5:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:33:33 2026 by rpki-client