Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.mft
File: zHrEehn2b0GDl-6l_vFaB_8sACM.mft (raw, json)
Hash identifier: 10qeVhj/LVJ7YmKyZ0ZWlF5aPX5NjF5xp6jd62PD50o=
Subject key identifier: EE:F7:57:D3:D5:E4:06:53:02:D5:8A:98:3C:1E:CD:1B:8A:40:C7:D2
Authority key identifier: CC:7A:C4:7A:19:F6:6F:41:83:97:EE:A5:FE:F1:5A:07:FF:2C:00:23
Certificate issuer: /CN=cc7ac47a19f66f418397eea5fef15a07ff2c0023
Certificate serial: 019F8B6A5AEEF28E3017F11E4AD3A1CFC57E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zHrEehn2b0GDl-6l_vFaB_8sACM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.mft
Manifest number: 19C5
Signing time: Wed 22 Jul 2026 20:00:30 +0000
Manifest this update: Wed 22 Jul 2026 20:00:30 +0000
Manifest next update: Thu 23 Jul 2026 20:00:30 +0000
Files and hashes: 1: AENYJALANSjKlBoltdKemnCFKjs.roa (hash: s2OVjDuX6iIGr8lYPRWiO+GCWriVBdcRjsgW+JAkKFY=)
2: WT3Gx2IH-UOQxMFe0DcDIk0_2gs.roa (hash: 8xLda/bRGDPhlqY86QUEIR+DAlGhY+eQ/Yy7FCK+A6E=)
3: zHrEehn2b0GDl-6l_vFaB_8sACM.crl (hash: +5CORAyRHMpAZD2zm7015KYWlvC0mqvW3zMZIPnqs94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zHrEehn2b0GDl-6l_vFaB_8sACM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8b:6a:5a:ee:f2:8e:30:17:f1:1e:4a:d3:a1:cf:c5:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc7ac47a19f66f418397eea5fef15a07ff2c0023
Validity
Not Before: Jul 22 20:00:30 2026 GMT
Not After : Jul 23 20:00:30 2026 GMT
Subject: CN=eef757d3d5e4065302d58a983c1ecd1b8a40c7d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:51:a7:11:38:99:e5:b8:58:a5:f8:fe:8a:67:
65:50:eb:50:74:29:7b:68:21:90:2c:29:db:b4:eb:
53:de:00:49:5d:c8:e5:d1:6a:2a:4b:93:be:cf:09:
33:f5:3a:f7:de:e5:f0:15:da:c7:43:9a:3d:81:a3:
0e:24:fa:67:b2:f2:42:a7:f2:fa:5b:a2:aa:da:7a:
0d:40:02:7f:09:21:03:46:4d:a8:82:3c:f0:82:59:
4c:a8:7f:63:5d:00:7b:5b:bb:df:6d:82:2a:65:03:
11:1a:68:51:e0:47:f3:74:ef:06:fd:5f:13:a0:fb:
61:48:79:f7:eb:c0:eb:42:be:6a:0e:28:03:22:8c:
f3:95:3c:22:7f:fa:31:c9:2c:17:5a:f7:85:5a:2a:
e1:ff:43:a5:3f:82:3c:6e:10:27:fe:e9:5d:3d:2e:
78:ee:f6:81:94:ea:a9:3c:68:c0:b2:f2:7e:e5:31:
b7:c4:89:c0:36:c5:b6:7f:1a:70:c0:77:2d:bc:c6:
36:54:71:e5:db:f8:e3:a8:24:24:e3:7e:5f:fa:1b:
89:88:83:7a:e7:74:4a:bd:7b:19:2d:3b:98:44:a8:
5f:a5:b1:d1:21:5e:40:c5:0b:3f:96:30:37:0e:52:
bb:a2:fc:44:de:ba:f9:46:d7:38:06:8b:1b:b6:63:
69:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:F7:57:D3:D5:E4:06:53:02:D5:8A:98:3C:1E:CD:1B:8A:40:C7:D2
X509v3 Authority Key Identifier:
keyid:CC:7A:C4:7A:19:F6:6F:41:83:97:EE:A5:FE:F1:5A:07:FF:2C:00:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zHrEehn2b0GDl-6l_vFaB_8sACM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:4f:f8:c4:cc:6d:80:d4:19:21:36:71:e6:f5:c9:4e:75:6e:
14:6d:d3:aa:9e:84:24:79:27:1c:b0:5e:d0:0e:ba:5d:67:4d:
88:4b:c9:0a:50:fd:b2:6a:e2:7e:29:e8:32:e8:66:ec:5d:f1:
36:e7:b1:f9:e0:e8:df:a7:83:24:29:21:f9:51:fa:7c:77:bc:
3e:2d:4c:27:cf:c7:5a:44:18:df:92:74:e0:f6:29:dd:77:83:
14:d2:86:3f:cd:f8:15:e7:58:54:2b:b1:91:21:ff:ca:83:5c:
22:80:24:5b:70:6b:50:87:d2:dd:33:71:b7:0c:2b:c1:a2:79:
39:bb:91:ed:9b:e8:78:98:bd:fc:5f:a0:b5:ef:26:1f:de:b8:
91:02:8d:62:68:4d:fd:a2:0d:80:00:9d:96:3d:3d:df:98:41:
d1:b8:63:1a:3f:ad:05:6e:47:95:02:cc:1c:29:57:d6:90:11:
ed:90:20:41:43:b8:ee:84:34:74:79:15:f8:8a:9d:c5:b4:34:
26:e7:55:a9:07:d4:3d:9e:d4:f0:dc:d8:a3:ee:82:b1:4c:ed:
bc:ff:58:cb:04:ce:c0:3f:39:87:91:a3:e2:ae:ca:06:06:20:
29:98:e6:7b:24:08:c5:f9:58:49:77:27:a8:00:25:15:87:2c:
96:c2:8e:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 22:40:10 2026 by rpki-client