Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.mft
File: zEDZYkKwgu_ltPIliCCzBZOWGY0.mft (raw, json)
Hash identifier: 9+Rkh5LhpN0LI5FfMqm+p6NpQufjvrx0SnNqmaD3i14=
Subject key identifier: 56:48:D0:0F:38:70:91:84:A5:62:69:72:DE:0F:5A:A3:0F:E0:51:3B
Authority key identifier: CC:40:D9:62:42:B0:82:EF:E5:B4:F2:25:88:20:B3:05:93:96:19:8D
Certificate issuer: /CN=cc40d96242b082efe5b4f2258820b3059396198d
Certificate serial: 019FA9E271DCA592B4086403EC9EBDF37B6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zEDZYkKwgu_ltPIliCCzBZOWGY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.mft
Manifest number: 19D4
Signing time: Tue 28 Jul 2026 18:00:17 +0000
Manifest this update: Tue 28 Jul 2026 18:00:17 +0000
Manifest next update: Wed 29 Jul 2026 18:00:17 +0000
Files and hashes: 1: 98fyEBb-PIBiroCj51bzkd-V_i4.roa (hash: 2RN0v3XP/euGb82/ECdLfjWteqkCXDXBbJynvO0cBWE=)
2: y97Q2cCIA4p_jfA1RbOfelZQKOo.roa (hash: oRmoVnYM94QBjpHDaFRFV+BA4jZYdHdlmrs4oEppUqA=)
3: zEDZYkKwgu_ltPIliCCzBZOWGY0.crl (hash: wcsIr5+R2bD5pA2mEfD28R35j9zC8VBxDbhX/tdO0Yg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/zEDZYkKwgu_ltPIliCCzBZOWGY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:71:dc:a5:92:b4:08:64:03:ec:9e:bd:f3:7b:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc40d96242b082efe5b4f2258820b3059396198d
Validity
Not Before: Jul 28 18:00:17 2026 GMT
Not After : Jul 29 18:00:17 2026 GMT
Subject: CN=5648d00f38709184a5626972de0f5aa30fe0513b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:bf:27:d0:5f:bf:ab:22:77:8e:b1:16:06:6d:
62:6a:2c:5b:39:eb:dc:56:65:15:9e:4a:64:83:03:
d9:8b:1b:ad:85:84:1e:c1:8f:37:9e:f7:a7:44:6b:
18:9c:6e:1a:50:f3:84:c7:a0:e9:04:12:e4:9a:2b:
3a:5c:17:2c:e4:b1:a9:36:3f:f7:f6:ef:de:ea:f6:
22:fd:ca:3c:01:91:98:bf:fc:74:a2:ca:68:fc:5a:
a3:2f:51:11:e1:4d:1a:41:0c:99:2d:25:9a:2f:6b:
a2:25:66:bc:ec:46:09:4a:9c:5c:a0:04:24:32:6b:
cc:d7:88:c6:35:af:cc:d0:cb:5a:3a:8c:c6:89:b7:
9f:3f:eb:4a:19:62:95:0f:82:df:81:b4:e6:67:0d:
4e:30:ac:35:f3:8e:1f:bf:4d:c2:f3:88:5a:63:ee:
2d:a4:ac:6c:f3:47:41:f8:36:e7:eb:b5:a1:f6:80:
58:f3:03:7b:11:56:9f:b3:ac:3d:ff:bb:90:f4:d7:
d4:02:c8:2c:f6:d7:d8:98:c2:66:4a:71:8d:5c:8e:
51:d5:7c:5e:20:b7:67:cb:b0:e0:c1:f8:eb:ae:2b:
c3:01:42:28:35:6e:2c:c2:66:14:58:b1:c1:67:44:
54:7b:47:5f:ef:66:88:72:55:ed:51:d7:ff:07:e6:
45:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:48:D0:0F:38:70:91:84:A5:62:69:72:DE:0F:5A:A3:0F:E0:51:3B
X509v3 Authority Key Identifier:
keyid:CC:40:D9:62:42:B0:82:EF:E5:B4:F2:25:88:20:B3:05:93:96:19:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEDZYkKwgu_ltPIliCCzBZOWGY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:3d:0f:d2:a0:82:cf:9b:a7:62:38:86:67:a6:9d:67:6c:b9:
e6:38:c9:d3:05:f5:08:b6:0b:27:63:41:2d:8e:86:98:0c:83:
19:fd:00:50:f4:33:c8:d7:b8:d3:e7:7a:eb:74:e9:46:27:a1:
57:78:d6:22:aa:8b:d3:65:67:87:02:33:5a:c9:33:b4:50:37:
7b:c1:3a:a2:23:3b:2c:5e:19:00:35:56:99:e5:13:f7:06:fe:
66:3f:2c:6e:5b:fb:16:d6:f3:1c:e3:70:93:05:58:a0:1c:33:
69:c3:00:d0:fd:3c:a9:c0:b0:e0:45:d2:05:3a:53:5d:7d:b5:
85:f1:08:a2:30:7f:cf:7b:e6:2d:27:ca:f0:1f:58:ee:37:58:
24:17:b7:17:bb:a0:ca:94:25:5b:5b:5e:85:11:06:89:a2:b8:
d3:77:2d:70:ab:a9:84:c6:96:78:f1:cc:37:ee:93:2d:34:4d:
62:e9:f7:9d:47:64:29:1c:58:77:6f:d8:b4:29:06:3f:f7:1f:
24:21:7f:a4:85:62:c5:62:06:64:d6:ea:7d:0f:c6:02:8e:fb:
f8:3d:d7:c9:c4:1a:57:21:24:85:84:9c:ad:86:14:2b:e2:a3:
bc:e0:df:ed:bc:7b:ac:4f:43:05:2d:31:2a:6c:00:8e:81:49:
b1:06:6c:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:30:57 2026 by rpki-client