Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft
File: zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft (raw, json)
Hash identifier: qv9isyKrDF3bte/FisRzmeJMjcVyFc9mNKzB2gnS/fw=
Subject key identifier: 7E:F2:FD:F3:F7:D5:85:D9:6A:9E:7D:D7:D9:4E:E7:2B:16:F7:B6:B1
Authority key identifier: CE:38:47:66:75:10:F4:F2:E5:9B:B1:B3:94:AE:27:E8:DA:D0:DC:97
Certificate issuer: /CN=ce3847667510f4f2e59bb1b394ae27e8dad0dc97
Certificate serial: 019FAAF5647060ADB978C964A93EDB37758D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft
Manifest number: 0984
Signing time: Tue 28 Jul 2026 23:00:36 +0000
Manifest this update: Tue 28 Jul 2026 23:00:36 +0000
Manifest next update: Wed 29 Jul 2026 23:00:36 +0000
Files and hashes: 1: 8SFtp1aCFpYsdLLGD8-X8oWNs5M.roa (hash: vW27EEEHFIjxPNptjKVXW1mndyFG/tHqMAs2SVdYCFw=)
2: BXr8T58hSJEA-WIUlWA_j2WefBk.roa (hash: PXtNEgJxgvpk0g/Oj/zCBk+DYm9a/J1sVkZt5dkYamA=)
3: zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.crl (hash: FZzTVXYvEPpbKJ/orkujc5/awo2RgBtuKpVqTdU56oY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:64:70:60:ad:b9:78:c9:64:a9:3e:db:37:75:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce3847667510f4f2e59bb1b394ae27e8dad0dc97
Validity
Not Before: Jul 28 23:00:36 2026 GMT
Not After : Jul 29 23:00:36 2026 GMT
Subject: CN=7ef2fdf3f7d585d96a9e7dd7d94ee72b16f7b6b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:3d:7f:e5:33:85:5f:87:47:d1:b3:e8:e7:77:
f4:44:66:d9:87:1f:ae:2f:6f:64:5d:2d:a7:80:0a:
29:82:37:82:bf:5a:28:83:a7:a3:cc:d7:b2:a1:75:
dd:a9:5a:ea:ac:ca:dc:3f:ad:8e:f8:e0:11:8f:31:
b2:23:dc:78:37:91:4e:92:19:d3:c2:dc:d7:16:55:
d2:28:b4:7c:b4:d5:1f:94:03:9a:d4:ba:bb:83:37:
46:c2:76:b5:81:2d:5c:9a:bb:fb:b7:71:22:41:4d:
70:ab:19:88:13:1c:a3:6f:8c:92:fb:75:8c:52:81:
c3:40:8d:f8:4d:db:58:fa:a7:8a:86:02:a1:20:43:
cf:81:84:bc:05:55:91:3e:7c:bb:55:9d:6d:16:8a:
8e:f5:6b:19:94:57:2b:15:3b:81:db:1a:77:fe:30:
27:d2:d7:de:83:54:b1:98:ab:5e:67:22:36:89:49:
22:4c:c2:96:13:ec:9e:f6:e0:88:40:62:0f:7d:cd:
fd:75:c7:08:3f:6b:43:05:af:cd:a5:5d:cb:b2:04:
b1:c4:e2:62:06:8b:3f:94:79:98:ae:d0:39:3c:aa:
83:ae:b7:d2:af:9b:7d:07:8a:99:17:40:0b:05:33:
80:e8:0d:8b:83:ae:cd:09:a0:df:d5:68:3b:9a:57:
40:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:F2:FD:F3:F7:D5:85:D9:6A:9E:7D:D7:D9:4E:E7:2B:16:F7:B6:B1
X509v3 Authority Key Identifier:
keyid:CE:38:47:66:75:10:F4:F2:E5:9B:B1:B3:94:AE:27:E8:DA:D0:DC:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:ca:de:14:78:2f:3d:d0:05:fe:ab:1c:97:a2:84:36:35:3d:
a3:60:3a:98:20:5c:19:d6:9f:8f:f4:6b:ee:36:78:c2:fd:1a:
87:13:f7:ee:0b:e0:e2:38:a1:49:1c:2b:3e:ff:e4:48:65:63:
97:2b:25:fe:1c:65:5d:24:d5:f9:62:63:d4:6a:e2:9a:a0:ae:
e3:df:eb:63:c7:df:f8:50:d3:a2:2d:43:e7:ce:e2:e4:f8:7d:
45:88:2a:f8:ef:bb:92:f9:ad:a1:a9:5c:b4:c4:80:29:01:3c:
ed:ae:b4:a1:00:f2:31:c3:98:2c:ba:03:cc:b9:9f:d9:39:db:
15:02:4f:b6:9c:a0:28:ab:0e:8e:8b:b3:6a:82:f0:db:ea:c3:
8f:4e:26:d5:4f:62:8e:cc:f6:b0:50:f6:29:83:33:d5:b6:d3:
9d:12:53:ff:8a:e3:b5:ce:44:5a:7d:16:c5:2f:e6:f6:61:a7:
69:0e:d8:1e:8e:4c:94:e3:f9:2c:c9:f7:57:3f:06:c4:95:af:
02:01:d6:49:ec:af:8f:ad:60:1b:4d:2a:e9:15:7e:a6:65:d9:
c0:5b:96:68:70:82:96:9a:13:f7:e9:68:d3:45:c5:0f:6f:b3:
57:43:2e:84:ad:1c:30:b3:ee:40:b0:af:15:e4:67:d1:04:d1:
d5:02:ce:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:10:20 2026 by rpki-client