Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.mft
File: znBIWLZDJm98cQdyHJjyupPdUmU.mft (raw, json)
Hash identifier: KBH64LREG76ISS3B4B/aMbG8HPIaNfYw6mI3nXuzdAo=
Subject key identifier: 2D:8E:E5:91:6D:50:AC:1D:5F:BD:A9:35:79:ED:2C:42:AB:10:65:AF
Authority key identifier: CE:70:48:58:B6:43:26:6F:7C:71:07:72:1C:98:F2:BA:93:DD:52:65
Certificate issuer: /CN=ce704858b643266f7c7107721c98f2ba93dd5265
Certificate serial: 019FA93DF0288DB094903D3FA7C4D24248A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/znBIWLZDJm98cQdyHJjyupPdUmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.mft
Manifest number: 19D7
Signing time: Tue 28 Jul 2026 15:00:36 +0000
Manifest this update: Tue 28 Jul 2026 15:00:36 +0000
Manifest next update: Wed 29 Jul 2026 15:00:36 +0000
Files and hashes: 1: 4io-REhzFRxPhNR2ODLWtq5-pVg.roa (hash: wvYJq+OJ0yBLuz2nx1cnZCl0Nf5x5+pis6cfSb4TkHk=)
2: arrkUMPGlGp12fBDJz-y-TlydqE.roa (hash: FzEjkq/IJVG3rsaQp/9UZuy/iTz0QoR1J2fAeimur2Q=)
3: rDrbyqGHpXISP5iG3Y1GTyKdM24.roa (hash: IEFZML7lOlLhBvi4soPybXTGWqMozr/vczumNvS04HI=)
4: znBIWLZDJm98cQdyHJjyupPdUmU.crl (hash: cgd9E8CqpHfZ16SZVjV/GbPgz9yRhNpw4XKmvWT/bZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/znBIWLZDJm98cQdyHJjyupPdUmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 15:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3d:f0:28:8d:b0:94:90:3d:3f:a7:c4:d2:42:48:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce704858b643266f7c7107721c98f2ba93dd5265
Validity
Not Before: Jul 28 15:00:36 2026 GMT
Not After : Jul 29 15:00:36 2026 GMT
Subject: CN=2d8ee5916d50ac1d5fbda93579ed2c42ab1065af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4f:fa:45:4e:13:54:0f:23:e0:80:22:35:93:
ac:44:9a:53:fa:85:a8:ba:ea:8d:fb:ff:d1:db:ae:
4d:93:cd:e7:c2:2c:9b:ab:47:24:68:37:69:18:37:
63:a3:92:c6:98:f0:fe:81:db:ab:76:b6:23:5f:12:
1d:d5:64:c3:1f:ea:af:15:db:fe:36:51:62:70:a9:
06:89:5b:62:3a:57:46:d3:15:41:ce:70:9f:e3:df:
91:25:e7:3b:fa:e6:f8:de:c4:b4:08:43:11:b9:77:
03:cb:ce:de:27:b9:97:c6:3b:a4:80:5d:d2:06:61:
1e:52:2f:9b:06:d9:27:44:58:a1:d7:df:1e:8a:bb:
17:b7:2a:62:ac:df:80:37:99:2e:bc:2a:55:f5:2d:
c1:25:16:35:67:f9:90:8b:3b:b9:b9:5f:54:c1:ba:
65:65:5e:ef:1b:ad:14:21:ab:ac:9f:e9:7b:da:53:
68:22:b9:b8:5c:44:98:bb:fd:a5:cd:49:ce:92:a5:
b5:0f:3e:2a:5f:e6:fc:96:2b:d9:e6:db:84:74:d9:
5f:55:5e:5b:41:39:92:01:87:aa:46:7b:64:66:19:
5f:58:10:bc:9a:22:77:6d:01:58:28:32:68:2c:ac:
f4:66:34:89:58:e6:76:40:9f:75:64:2a:b9:40:e8:
09:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:8E:E5:91:6D:50:AC:1D:5F:BD:A9:35:79:ED:2C:42:AB:10:65:AF
X509v3 Authority Key Identifier:
keyid:CE:70:48:58:B6:43:26:6F:7C:71:07:72:1C:98:F2:BA:93:DD:52:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znBIWLZDJm98cQdyHJjyupPdUmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:c6:05:df:5c:14:a8:0d:49:e6:f6:ed:25:12:bf:ae:43:b9:
1c:b6:8a:d5:ec:fd:a5:2f:e6:5c:c0:a5:8b:08:60:04:41:42:
d5:88:51:22:8c:91:53:65:09:6d:b5:47:ee:71:04:e8:3b:53:
0f:d6:d9:24:36:a8:07:49:7a:e9:bb:2f:ef:cc:62:99:3c:b3:
bf:32:fa:b5:7d:f6:43:8b:95:92:57:e4:2c:c8:76:92:83:71:
b6:f5:a5:2e:3d:c9:e9:fa:b0:24:22:85:c8:74:a2:6a:a8:9c:
d2:6c:15:41:ea:83:8e:82:1b:67:39:b7:01:34:95:12:a1:e2:
2f:e1:7d:9c:00:88:58:dd:73:f1:35:61:c3:ae:01:11:3e:29:
e1:0f:59:63:58:08:94:60:d0:4e:c8:15:a6:48:00:1e:e3:8f:
2e:82:a6:86:88:c6:e9:4a:ea:13:05:38:a4:7c:a4:ff:bd:91:
c3:56:b1:7d:61:0a:eb:2b:5b:6c:07:a8:89:9d:09:24:03:10:
60:10:cc:d1:da:d8:9a:b4:0e:02:ae:e5:71:e0:7b:bc:71:38:
16:73:d2:bf:e6:8a:be:7c:52:c0:c1:49:f8:f0:83:ca:b6:d9:
78:e3:de:d4:5c:3b:ec:0d:e4:28:5c:d1:8f:ff:8c:19:fc:59:
94:fe:42:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:30:48 2026 by rpki-client