Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/364ab5-de95-4259-8927-9d2e42f7f9ac/1/zP_mT0Kp8Euf1s11g3Kh21zYsZE.mft
File: zP_mT0Kp8Euf1s11g3Kh21zYsZE.mft (raw, json)
Hash identifier: vmyrFOgekKlKEf2oKdKMoQmXDjuHIi7ou5hNZPtLuFs=
Subject key identifier: BB:A3:8D:CB:08:A6:4A:55:95:28:64:F7:69:E4:7F:65:75:51:28:7A
Authority key identifier: CC:FF:E6:4F:42:A9:F0:4B:9F:D6:CD:75:83:72:A1:DB:5C:D8:B1:91
Certificate issuer: /CN=ccffe64f42a9f04b9fd6cd758372a1db5cd8b191
Certificate serial: 019F860D50125B93C4027767E33BB0863292
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zP_mT0Kp8Euf1s11g3Kh21zYsZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/364ab5-de95-4259-8927-9d2e42f7f9ac/1/zP_mT0Kp8Euf1s11g3Kh21zYsZE.mft
Manifest number: 16CE
Signing time: Tue 21 Jul 2026 19:00:47 +0000
Manifest this update: Tue 21 Jul 2026 19:00:47 +0000
Manifest next update: Wed 22 Jul 2026 19:00:47 +0000
Files and hashes: 1: bWCw9QvZ0n-9vSDkgSO_NuyUw34.roa (hash: Nv8e19B6F0Z+GsL3XuEotkyjFs4rEednWhdiNCJb51g=)
2: zP_mT0Kp8Euf1s11g3Kh21zYsZE.crl (hash: S41SXQFd24ibnrYYmY7mSAbcPf27vOF2Zl09tXkVKCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/364ab5-de95-4259-8927-9d2e42f7f9ac/1/zP_mT0Kp8Euf1s11g3Kh21zYsZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/364ab5-de95-4259-8927-9d2e42f7f9ac/1/zP_mT0Kp8Euf1s11g3Kh21zYsZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zP_mT0Kp8Euf1s11g3Kh21zYsZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:0d:50:12:5b:93:c4:02:77:67:e3:3b:b0:86:32:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccffe64f42a9f04b9fd6cd758372a1db5cd8b191
Validity
Not Before: Jul 21 19:00:47 2026 GMT
Not After : Jul 22 19:00:47 2026 GMT
Subject: CN=bba38dcb08a64a55952864f769e47f657551287a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:fe:5d:7b:e3:76:4a:e8:61:d1:8a:65:ad:69:
49:c9:c3:d2:4d:45:c3:a7:a7:a4:8e:05:79:24:d1:
fe:cc:5d:5f:1f:d1:f8:20:c4:11:ae:8c:1c:b0:db:
a6:80:9d:9d:4b:fd:e7:42:e9:73:21:9e:46:43:f9:
cd:cf:31:a6:60:06:54:0a:c8:64:1a:32:40:49:ee:
ff:20:e6:ff:26:e1:d4:ca:32:37:25:75:97:8e:28:
89:f0:9a:2c:64:0a:cc:1f:4d:e9:b2:af:7a:c6:49:
73:81:ab:7d:87:1d:ed:a9:6d:7f:50:97:bb:90:a6:
f1:94:6b:c9:ac:ed:19:41:6e:1b:05:e3:81:0c:d4:
bc:5c:97:66:9f:1c:dd:7f:6e:e3:09:30:86:c0:67:
e3:64:d7:de:77:28:f3:54:83:fd:3f:16:fb:7d:61:
81:2f:3f:30:30:c3:c8:9c:af:2e:70:6a:40:de:ce:
a1:e4:8e:ec:67:15:a1:71:6f:e6:45:f7:1f:98:49:
3f:8d:ba:f2:8a:23:dc:96:c9:81:24:35:f9:4e:8d:
7d:0b:f1:b6:1e:a0:75:39:1e:4e:89:3d:28:bf:86:
b2:ed:45:57:a9:0f:f1:61:30:84:19:aa:16:85:1a:
7d:0e:63:16:35:fb:04:4a:c8:ac:21:fe:19:e6:f2:
23:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:A3:8D:CB:08:A6:4A:55:95:28:64:F7:69:E4:7F:65:75:51:28:7A
X509v3 Authority Key Identifier:
keyid:CC:FF:E6:4F:42:A9:F0:4B:9F:D6:CD:75:83:72:A1:DB:5C:D8:B1:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zP_mT0Kp8Euf1s11g3Kh21zYsZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/364ab5-de95-4259-8927-9d2e42f7f9ac/1/zP_mT0Kp8Euf1s11g3Kh21zYsZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/364ab5-de95-4259-8927-9d2e42f7f9ac/1/zP_mT0Kp8Euf1s11g3Kh21zYsZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:94:5c:04:ab:a4:3e:e0:3c:32:63:0d:30:4a:e6:22:48:45:
a9:45:f4:3e:3e:c3:5e:fb:2a:b1:d5:d7:ac:f7:0a:07:20:ed:
07:23:72:dd:a4:4d:5f:5c:37:1e:1f:4f:44:10:3b:e0:60:89:
4f:d7:da:57:2f:74:5c:c4:d2:04:1d:80:86:24:b7:df:8e:71:
4f:f9:f1:c0:6a:93:54:db:5e:c2:0c:b4:7e:75:ef:e7:09:74:
bf:ad:f3:c5:94:9a:c1:52:70:9e:64:5d:66:90:93:7f:8d:87:
be:4b:d8:08:f5:a1:ff:48:86:63:1a:8d:40:1d:39:b9:1c:fb:
e6:31:3a:2c:d3:86:59:a4:0b:99:9b:21:d3:59:7b:69:e4:91:
9f:c0:60:d2:07:ec:f0:f0:5e:f4:6e:d4:5e:72:3e:6d:3f:50:
8a:62:95:f2:4c:6d:7e:bd:37:54:26:22:41:1f:7b:35:b0:ad:
ac:d7:38:39:c8:14:6f:90:f7:e2:41:05:d0:25:21:8a:d8:ce:
71:fa:ed:b9:71:dd:ad:62:9c:7d:39:44:a3:e5:e8:77:d7:ba:
2f:50:90:0d:20:7f:f3:c2:b3:74:87:c3:46:54:ec:45:1a:41:
ad:c2:24:e8:4f:ef:25:db:f5:53:93:b5:37:fb:8c:1d:25:d2:
33:10:1c:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:07:31 2026 by rpki-client