Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft
File: ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft (raw, json)
Hash identifier: X5u0+3XJqn1HpqoN/Xqs/cSE0ewB0q1Slu0bYOPm9x8=
Subject key identifier: AC:10:74:FD:E9:C2:94:6F:91:51:E1:A9:FE:07:B8:CF:C7:44:2C:27
Authority key identifier: 65:4D:96:67:2A:59:EC:38:95:FC:15:84:7A:CA:1B:29:DB:79:12:44
Certificate issuer: /CN=654d96672a59ec3895fc15847aca1b29db791244
Certificate serial: 019FAABE40B40A74BE3A1FB28342C837DAE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZU2WZypZ7DiV_BWEesobKdt5EkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft
Manifest number: 0956
Signing time: Tue 28 Jul 2026 22:00:22 +0000
Manifest this update: Tue 28 Jul 2026 22:00:22 +0000
Manifest next update: Wed 29 Jul 2026 22:00:22 +0000
Files and hashes: 1: Utc_slWR8yHDk290AryGYchTlYA.roa (hash: NUCfh9s0WjqwyOFskJUWEakWr/HjDtF3kDLbwsne7Ro=)
2: ZU2WZypZ7DiV_BWEesobKdt5EkQ.crl (hash: JAEpug/rmLp+aHWa/z0wOPt9JMxEnUQrAaXb29SNWoE=)
3: zynEh3pPdQY3KJQVgvhOsaYxciw.roa (hash: rOMrg3wVXzNicfVb9K/t1LGxhcGrIWejZTOsjk80vqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZU2WZypZ7DiV_BWEesobKdt5EkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:40:b4:0a:74:be:3a:1f:b2:83:42:c8:37:da:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=654d96672a59ec3895fc15847aca1b29db791244
Validity
Not Before: Jul 28 22:00:22 2026 GMT
Not After : Jul 29 22:00:22 2026 GMT
Subject: CN=ac1074fde9c2946f9151e1a9fe07b8cfc7442c27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:5e:b2:af:c9:28:a5:40:35:50:3b:fe:3d:6a:
8b:59:64:77:dd:30:94:de:98:3e:c1:3c:19:c9:f6:
7d:88:ac:35:f6:d4:51:79:ce:4f:e7:c1:98:07:ba:
37:85:bf:8b:74:82:37:c0:ba:fe:84:f0:e8:8c:34:
8b:a9:a7:25:10:71:01:67:0f:62:92:c6:03:48:d1:
55:b3:b1:e9:ce:9e:fe:a2:96:c4:35:ca:07:a8:0f:
3f:90:5d:e2:e5:7a:9f:d4:00:e4:be:12:18:23:d7:
35:54:11:e0:32:8d:a6:50:a8:d7:81:9a:fb:07:a3:
be:70:05:6d:fc:8f:c3:07:16:24:e8:5f:4e:cb:91:
c9:b4:bc:55:b0:4d:3d:c3:25:db:0b:30:1c:c8:8d:
e3:87:f2:f5:f9:ca:95:ac:35:ff:5c:f3:dd:2c:53:
a0:5c:53:3f:3f:48:81:b7:9f:b1:c4:3d:87:ed:52:
05:9c:9d:8b:9e:d0:bf:ab:73:4b:23:41:51:80:49:
f5:44:4d:29:47:fe:bd:65:c8:91:76:7c:ba:89:20:
d7:d1:ce:f0:e5:40:6b:44:fc:51:25:51:9f:b0:c0:
81:df:a7:c8:df:44:1e:87:45:2f:8a:fe:15:48:fd:
b5:25:70:7b:b6:2f:9c:20:75:d7:3e:d9:47:ff:e1:
df:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:10:74:FD:E9:C2:94:6F:91:51:E1:A9:FE:07:B8:CF:C7:44:2C:27
X509v3 Authority Key Identifier:
keyid:65:4D:96:67:2A:59:EC:38:95:FC:15:84:7A:CA:1B:29:DB:79:12:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZU2WZypZ7DiV_BWEesobKdt5EkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:01:d8:46:e0:2b:b5:6a:e4:11:f9:9a:77:8d:1d:c0:53:43:
af:82:30:a3:24:76:a3:79:f0:6e:81:70:3b:66:ef:29:a6:0d:
1d:a2:95:da:e3:27:28:40:4b:1e:0c:95:d0:89:f2:17:2a:a3:
95:59:8f:49:1e:ca:71:ec:41:51:a7:98:2e:44:cc:c6:38:9c:
8b:79:a9:6e:43:0b:43:2c:25:e0:ec:1f:00:7a:4f:18:b0:a9:
c4:cb:0c:e4:9e:30:c0:af:a1:16:74:d1:fb:fc:e9:77:0f:db:
3c:80:79:c7:77:c2:76:12:ba:d2:1e:aa:65:41:b7:b8:09:87:
b2:90:85:90:3e:42:42:37:ac:e1:24:b0:30:32:4b:e9:65:73:
33:0a:19:8f:75:82:7e:22:23:0f:76:18:67:8f:cd:dc:52:f6:
d7:2a:ff:f1:e7:3e:3a:a2:86:b0:e6:c4:75:80:a0:d7:a6:12:
6f:ee:f9:bd:d5:44:7f:d3:33:0a:3a:30:f2:9d:d7:ec:4e:b9:
ef:2a:b7:7e:d9:32:61:2d:5f:9b:4c:d5:17:78:3d:9e:b1:a4:
5c:c4:cf:91:e6:41:68:67:3e:d8:79:30:ec:3e:cb:80:78:b4:
58:7d:08:06:77:44:8c:13:80:9e:1b:e9:ee:1d:f4:70:8c:bd:
98:70:e1:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:03:58 2026 by rpki-client