Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/c1a46a-a79d-4595-bb39-e291a52a9d15/1/ZHZkuldzYUo8RPkMEq5yVUinXNQ.mft
File: ZHZkuldzYUo8RPkMEq5yVUinXNQ.mft (raw, json)
Hash identifier: 3ACHusjdjYvxOkdzeePEklIBlBW4hMjcvpBU/9vocWE=
Subject key identifier: 90:2A:93:DE:66:60:D5:E1:7F:69:F8:3B:18:27:7A:DA:59:45:C2:4A
Authority key identifier: 64:76:64:BA:57:73:61:4A:3C:44:F9:0C:12:AE:72:55:48:A7:5C:D4
Certificate issuer: /CN=647664ba5773614a3c44f90c12ae725548a75cd4
Certificate serial: 019FA74FF5BB5333D8F7A9EC8D219804077B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZHZkuldzYUo8RPkMEq5yVUinXNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/c1a46a-a79d-4595-bb39-e291a52a9d15/1/ZHZkuldzYUo8RPkMEq5yVUinXNQ.mft
Manifest number: 02A2
Signing time: Tue 28 Jul 2026 06:01:03 +0000
Manifest this update: Tue 28 Jul 2026 06:01:03 +0000
Manifest next update: Wed 29 Jul 2026 06:01:03 +0000
Files and hashes: 1: PSXgbstGMyjW_mMkM7IVEqdHJ1A.asa (hash: eV63GJ9ipiimjdW8Etph0ZZ2mFMgDuXa4HBBJK921ZI=)
2: ZHZkuldzYUo8RPkMEq5yVUinXNQ.crl (hash: +UZSeboEHin+bjoiJBq3QChxbt3BtBv+bFnMrM5WNDc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/c1a46a-a79d-4595-bb39-e291a52a9d15/1/ZHZkuldzYUo8RPkMEq5yVUinXNQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/c1a46a-a79d-4595-bb39-e291a52a9d15/1/ZHZkuldzYUo8RPkMEq5yVUinXNQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZHZkuldzYUo8RPkMEq5yVUinXNQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 06:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:4f:f5:bb:53:33:d8:f7:a9:ec:8d:21:98:04:07:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=647664ba5773614a3c44f90c12ae725548a75cd4
Validity
Not Before: Jul 28 06:01:03 2026 GMT
Not After : Jul 29 06:01:03 2026 GMT
Subject: CN=902a93de6660d5e17f69f83b18277ada5945c24a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:cc:56:d1:0b:91:fd:86:ee:ac:d2:b7:fd:df:
bd:97:ce:c8:86:9a:94:d3:cd:ab:61:d0:bb:ef:ee:
cf:d4:7b:42:b9:bf:cb:2a:b5:ab:e7:86:05:b5:8e:
79:e1:77:e8:d3:fa:d1:58:86:ba:db:a7:9d:82:27:
42:21:1a:a1:6a:8b:69:59:03:e0:37:be:62:4d:76:
cc:ec:34:eb:61:c4:c8:04:12:4b:01:ce:2c:ce:d7:
b5:3f:a0:5a:c8:ec:76:85:f0:00:3b:cc:98:ab:91:
75:73:0f:90:c4:06:38:75:c4:49:0d:f5:62:8f:0e:
a3:41:95:3e:44:50:4f:03:d8:17:da:e2:40:a7:2b:
01:10:55:29:36:60:e8:de:a5:ae:ba:1d:e0:f1:61:
31:f3:e8:61:a0:17:8b:aa:52:5a:ec:09:63:77:fa:
ce:4f:5d:ff:86:53:36:1c:91:ef:d6:12:61:ce:2a:
c7:50:4f:0a:7e:f8:de:ed:bc:07:3c:ca:e2:1f:99:
9b:d1:ea:c9:70:7e:22:f1:b8:68:1b:a1:2b:1c:eb:
ab:26:65:38:17:b0:7a:db:69:d2:b5:58:27:1c:d0:
33:d1:ae:81:62:be:25:97:23:bd:f7:99:a1:7d:f2:
88:36:57:84:30:c7:56:55:83:7c:2a:a7:26:9b:b3:
53:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:2A:93:DE:66:60:D5:E1:7F:69:F8:3B:18:27:7A:DA:59:45:C2:4A
X509v3 Authority Key Identifier:
keyid:64:76:64:BA:57:73:61:4A:3C:44:F9:0C:12:AE:72:55:48:A7:5C:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZHZkuldzYUo8RPkMEq5yVUinXNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c1a46a-a79d-4595-bb39-e291a52a9d15/1/ZHZkuldzYUo8RPkMEq5yVUinXNQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c1a46a-a79d-4595-bb39-e291a52a9d15/1/ZHZkuldzYUo8RPkMEq5yVUinXNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:53:94:75:17:25:59:60:73:67:60:4b:5c:bb:19:df:97:19:
69:61:1a:92:b4:94:d6:25:47:71:46:4e:82:95:55:45:d6:61:
a9:d4:89:a1:f3:78:ff:45:13:cc:69:ed:40:c3:b7:18:66:39:
bb:5c:3b:fc:20:a3:52:76:b4:fd:15:b6:2c:23:f9:64:ad:7d:
05:dd:fe:ae:7c:9b:9d:68:8e:aa:85:03:82:7e:45:d5:6a:95:
a3:5f:49:87:66:53:fa:0e:f7:1a:d8:de:7b:67:ab:71:b5:02:
98:1f:0e:f3:f9:80:fa:6b:77:29:af:a3:b1:0e:5a:17:75:04:
ab:0e:26:62:e6:25:13:d5:ed:90:37:98:17:fa:a9:f0:8b:a4:
78:f2:21:ec:9d:a7:b3:1b:b5:1a:d5:f0:bd:39:df:c6:be:20:
a3:1d:8e:21:a6:3d:e8:98:9f:7d:e4:d5:5d:95:ed:90:7d:9b:
7a:c3:a4:af:77:f4:e4:82:a4:3b:8a:a2:f9:00:85:ae:5b:68:
e0:e7:81:ba:60:0d:f5:5c:93:49:b5:fa:20:68:14:18:42:31:
17:79:91:52:0c:45:89:8c:01:3b:ea:07:9b:c3:6c:38:33:fd:
86:51:da:57:67:e6:35:40:3a:c2:e1:8c:67:5b:91:22:f6:ce:
41:aa:39:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 14:48:46 2026 by rpki-client