Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d0c56b-67ef-4007-905f-da3c267a2528/1/zhAQE4i3zjeHB5k6BXaqPd2VqXk.mft
File: zhAQE4i3zjeHB5k6BXaqPd2VqXk.mft (raw, json)
Hash identifier: ZkOAdalb4WtX+UwgvqNxWkE71EXmvvmAizlKRGHrmlY=
Subject key identifier: 2E:8A:44:81:B1:F2:2C:82:B7:96:E8:53:64:52:88:7C:5F:32:C4:C0
Authority key identifier: CE:10:10:13:88:B7:CE:37:87:07:99:3A:05:76:AA:3D:DD:95:A9:79
Certificate issuer: /CN=ce10101388b7ce378707993a0576aa3ddd95a979
Certificate serial: 019FACAD1A36BF7508D54AC2FA30E07B65C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zhAQE4i3zjeHB5k6BXaqPd2VqXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/d0c56b-67ef-4007-905f-da3c267a2528/1/zhAQE4i3zjeHB5k6BXaqPd2VqXk.mft
Manifest number: 0174
Signing time: Wed 29 Jul 2026 07:00:53 +0000
Manifest this update: Wed 29 Jul 2026 07:00:53 +0000
Manifest next update: Thu 30 Jul 2026 07:00:53 +0000
Files and hashes: 1: i9y06XpGQ7gr-mdfp0S7uUFwlS4.roa (hash: /g2Zo7QZ+s2u4dfNouu8ACPFZIuHW58Outw73PTsBo0=)
2: zhAQE4i3zjeHB5k6BXaqPd2VqXk.crl (hash: Ewby451QmgjOWlPr375LUGmidgiLA3N0e7vBWoZ6O6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/d0c56b-67ef-4007-905f-da3c267a2528/1/zhAQE4i3zjeHB5k6BXaqPd2VqXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/d0c56b-67ef-4007-905f-da3c267a2528/1/zhAQE4i3zjeHB5k6BXaqPd2VqXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/zhAQE4i3zjeHB5k6BXaqPd2VqXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 07:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:ad:1a:36:bf:75:08:d5:4a:c2:fa:30:e0:7b:65:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce10101388b7ce378707993a0576aa3ddd95a979
Validity
Not Before: Jul 29 07:00:53 2026 GMT
Not After : Jul 30 07:00:53 2026 GMT
Subject: CN=2e8a4481b1f22c82b796e8536452887c5f32c4c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:20:9a:0d:7a:c8:de:28:c8:01:22:45:a0:22:
3b:03:c1:81:8d:1e:ad:a1:24:3a:95:24:ca:ac:f3:
a1:19:2c:f6:19:ab:e6:1d:96:f4:33:8e:41:d5:a7:
89:39:55:e1:d2:47:a1:5b:39:61:98:c7:94:b6:38:
2d:b4:57:69:47:e4:69:ca:62:8f:ac:78:ec:9e:e7:
c6:02:b3:ad:51:93:3d:cb:4b:f8:1a:59:5b:0f:00:
d0:96:b2:3c:67:2f:39:cd:ee:d6:8a:51:75:a5:cb:
66:fb:ba:77:7b:5d:31:db:e0:eb:a1:61:f3:bf:89:
87:51:6b:ec:14:99:5a:19:06:64:6e:e3:a1:11:e1:
d2:43:a8:f2:85:95:ac:d1:d3:c8:d1:34:2b:4f:27:
f1:b9:3b:e8:39:dc:26:a1:54:7b:00:f3:96:5b:73:
4f:a6:78:83:7b:5c:a1:49:eb:22:e0:91:76:97:0d:
28:b4:6b:eb:df:53:87:c6:99:a4:6c:fd:09:91:b2:
a1:26:43:34:2b:d0:1a:c6:93:2b:24:13:47:42:6e:
76:bf:0d:a3:61:0b:35:b1:1f:e1:dd:cb:49:ce:6d:
1c:25:e5:e5:67:64:7a:9e:76:fc:cd:ba:ec:f6:67:
4d:ed:63:09:ea:89:99:9d:45:1e:2f:7e:e5:41:b2:
9d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:8A:44:81:B1:F2:2C:82:B7:96:E8:53:64:52:88:7C:5F:32:C4:C0
X509v3 Authority Key Identifier:
keyid:CE:10:10:13:88:B7:CE:37:87:07:99:3A:05:76:AA:3D:DD:95:A9:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zhAQE4i3zjeHB5k6BXaqPd2VqXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d0c56b-67ef-4007-905f-da3c267a2528/1/zhAQE4i3zjeHB5k6BXaqPd2VqXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d0c56b-67ef-4007-905f-da3c267a2528/1/zhAQE4i3zjeHB5k6BXaqPd2VqXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:30:3d:6f:7e:08:a8:b6:49:e3:46:af:88:eb:1c:9d:83:39:
a7:71:31:32:a3:c2:af:d0:e9:d2:2a:0d:d7:05:08:2a:0f:ae:
55:3d:54:76:6f:2d:68:56:36:d7:df:bd:be:2b:cd:c8:43:cb:
7b:f5:a5:61:03:95:9a:5f:ae:78:8d:0a:99:66:b9:fa:f8:b1:
c1:62:12:33:f0:99:06:30:8a:c3:84:cc:42:3f:ff:bc:1e:8b:
1b:04:ea:40:e0:df:6e:45:68:2e:c4:51:f2:66:74:4e:31:b9:
bd:19:58:44:08:9e:92:26:46:9b:d1:7c:7b:5a:6f:8a:d8:0c:
39:a0:2b:6c:51:50:e6:01:13:42:28:63:3c:fb:aa:94:04:98:
24:fc:f6:b4:8a:f6:45:0d:13:fb:88:5c:ce:1f:f9:3d:9b:75:
a4:d8:7e:ae:9e:04:e9:ab:46:75:1b:4a:b5:b2:b6:c0:9a:76:
7f:f9:3d:b4:52:ab:b2:34:69:8c:64:a5:1c:ce:73:72:24:40:
6b:bd:5a:1f:2e:37:54:5c:93:ab:6c:a2:c6:83:db:38:a0:35:
65:b6:37:c1:94:b5:df:07:4e:15:61:ba:4f:cc:a8:fc:85:00:
3c:b4:30:01:fa:60:b9:98:dd:0f:2b:cd:56:08:21:38:2e:79:
ac:3d:ee:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 15:24:33 2026 by rpki-client