Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.mft
File: p_ZlIvQD2MmUpIRoKHB5lBfOHoE.mft (raw, json)
Hash identifier: 8CX9HM/Wl4W0d3pw+/PsBLZ2gTezlByzEtm0zh400Lk=
Subject key identifier: 77:F0:A5:10:64:FE:DE:E6:60:DB:D1:89:C5:C5:3A:56:A7:E6:E2:A4
Authority key identifier: A7:F6:65:22:F4:03:D8:C9:94:A4:84:68:28:70:79:94:17:CE:1E:81
Certificate issuer: /CN=a7f66522f403d8c994a484682870799417ce1e81
Certificate serial: 019FAABE56705702C82CECC9110BE885E3CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.mft
Manifest number: 1557
Signing time: Tue 28 Jul 2026 22:00:28 +0000
Manifest this update: Tue 28 Jul 2026 22:00:28 +0000
Manifest next update: Wed 29 Jul 2026 22:00:28 +0000
Files and hashes: 1: Kh2cfJTXoBgXnb5cU5bkPsfJ3G8.roa (hash: OIPaE117G5MhGem++zxKuvBio3gr+RNCi90er+bU030=)
2: p_ZlIvQD2MmUpIRoKHB5lBfOHoE.crl (hash: d+9TEk0zq2IVBIH7ISVgzQI+N/TdzyAXWXxnGoIGL1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:56:70:57:02:c8:2c:ec:c9:11:0b:e8:85:e3:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7f66522f403d8c994a484682870799417ce1e81
Validity
Not Before: Jul 28 22:00:28 2026 GMT
Not After : Jul 29 22:00:28 2026 GMT
Subject: CN=77f0a51064fedee660dbd189c5c53a56a7e6e2a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d5:6a:c3:74:ed:e7:c5:00:db:14:f3:d3:7a:
85:e7:52:bf:28:03:f7:4a:37:3f:71:1f:44:f9:16:
a2:af:5f:1b:f1:78:74:0d:95:8b:29:27:33:3e:9e:
ff:07:15:88:b9:09:98:d9:3e:89:28:fc:23:b5:ac:
46:e7:12:b5:55:9c:fb:80:03:aa:16:a2:f2:a9:61:
42:86:b1:1f:69:bd:0b:7b:da:a2:67:0e:65:e8:f0:
63:5c:b5:6e:96:fc:21:50:a9:10:25:c3:c0:bd:24:
5b:c7:65:eb:cf:d8:9d:00:03:6e:52:da:b6:41:0a:
da:ba:44:0a:2b:eb:90:e4:21:e9:69:19:30:03:39:
9d:64:f4:89:39:5d:63:22:81:18:eb:71:7e:9c:5f:
01:0c:12:f5:b2:44:b2:cf:a8:08:67:32:36:2b:ba:
83:82:f6:e8:37:e4:11:73:65:7e:33:6c:21:cf:bf:
83:98:07:13:61:47:28:51:d3:31:5e:3f:41:1f:6f:
28:f0:98:cf:3d:44:0b:0d:7d:a6:f5:94:13:d7:5a:
29:6f:e5:b4:3f:f9:6d:2f:e6:2c:38:ff:ba:53:2c:
18:72:dd:31:a0:68:f2:53:d7:86:6d:5e:65:cd:47:
26:45:b3:aa:55:de:d6:6b:b4:5f:34:05:e6:d8:46:
fd:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:F0:A5:10:64:FE:DE:E6:60:DB:D1:89:C5:C5:3A:56:A7:E6:E2:A4
X509v3 Authority Key Identifier:
keyid:A7:F6:65:22:F4:03:D8:C9:94:A4:84:68:28:70:79:94:17:CE:1E:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:63:97:22:8d:c9:ea:d8:dd:44:b8:b1:a4:e2:7d:bf:3c:7d:
7e:15:3f:b3:79:8a:75:de:d6:c2:c9:43:fe:4a:a3:91:fe:b7:
ff:93:c5:05:93:b2:22:78:35:22:c2:95:a7:3d:80:91:d3:d0:
62:c2:56:b4:e0:d5:e0:c3:1e:cc:4f:70:7d:f8:f4:52:cc:1a:
b5:2e:2d:67:af:01:a0:01:27:94:37:98:d6:89:3c:ce:1b:83:
55:91:1b:b7:47:b1:3f:9d:51:06:cd:9f:ca:a2:70:5d:73:1f:
46:60:40:ad:31:e4:4a:ae:cb:51:f7:14:e1:fe:0b:63:25:f6:
0c:78:1e:59:0b:c6:de:49:d0:c5:d4:03:a3:6b:20:2d:f6:f6:
7d:79:87:b0:f4:33:e8:b7:68:c9:86:09:d9:ce:70:6f:2a:80:
b2:05:1e:d2:1e:23:ff:0c:99:0b:f3:9d:61:3c:ba:5e:7e:6f:
05:06:c4:71:6d:a0:3b:49:9c:b5:92:ad:00:08:6b:7b:1f:e9:
75:12:81:07:b3:0f:33:f6:d9:e2:4f:fd:fd:55:ac:02:f8:d3:
cb:23:d4:2c:78:68:59:13:91:b8:cb:8b:74:0d:3b:75:51:2b:
f9:a2:41:0a:d9:4e:5c:fb:65:18:d9:51:b0:d2:bf:2f:75:09:
c8:5a:fc:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:27:55 2026 by rpki-client