Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.mft
File: rrwz1bpYUjTMzvilethsoer8SqI.mft (raw, json)
Hash identifier: 41dmT0kdIYZY53GYFpYGOPbvGDxzWkt/V7ONH4h2Pc4=
Subject key identifier: 7C:B6:35:61:9F:5C:43:FE:B5:6C:F0:F9:A3:BF:C5:A5:CD:30:97:E0
Authority key identifier: AE:BC:33:D5:BA:58:52:34:CC:CE:F8:A5:7A:D8:6C:A1:EA:FC:4A:A2
Certificate issuer: /CN=aebc33d5ba585234cccef8a57ad86ca1eafc4aa2
Certificate serial: 019F8756725C9CF145C598C8CFBEBA44C81C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rrwz1bpYUjTMzvilethsoer8SqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.mft
Manifest number: 096D
Signing time: Wed 22 Jul 2026 01:00:17 +0000
Manifest this update: Wed 22 Jul 2026 01:00:17 +0000
Manifest next update: Thu 23 Jul 2026 01:00:17 +0000
Files and hashes: 1: E907k5QYJtLiwC_jK3iFvXI9RdI.roa (hash: snQqBx0r+DlkIlsrsM46ddsGDow3XlKtABIHB2rzqdc=)
2: rrwz1bpYUjTMzvilethsoer8SqI.crl (hash: x9Kz4IaPyY/KHDaD60T754Vk/0mRQmTIZ4Svj8CmYCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rrwz1bpYUjTMzvilethsoer8SqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:87:56:72:5c:9c:f1:45:c5:98:c8:cf:be:ba:44:c8:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aebc33d5ba585234cccef8a57ad86ca1eafc4aa2
Validity
Not Before: Jul 22 01:00:17 2026 GMT
Not After : Jul 23 01:00:17 2026 GMT
Subject: CN=7cb635619f5c43feb56cf0f9a3bfc5a5cd3097e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a8:ad:7b:8b:8c:e3:83:11:41:d5:d9:40:19:
13:3d:b7:d8:ef:0f:f7:95:38:ff:6e:80:ec:85:b4:
2e:11:09:4e:72:37:ef:c8:2c:88:fd:74:a5:3d:98:
5e:da:17:88:15:a8:f3:99:08:50:d1:8a:b3:30:8a:
88:eb:da:54:32:b6:82:a8:2a:4d:64:dc:f8:d2:3b:
88:6d:5c:b9:d6:a9:85:e9:ed:9b:76:95:36:b5:99:
c9:d3:a9:ed:9c:ab:30:7e:a1:5f:7d:50:3b:4e:6e:
69:82:13:9c:eb:b7:1a:6b:b7:81:da:d2:86:63:dd:
de:8a:ff:d7:ed:7f:c9:a2:c0:fb:93:b0:ea:29:cc:
df:de:72:26:b9:63:fd:60:97:ca:ac:52:59:eb:f3:
db:b3:44:31:6f:24:24:7d:81:43:9f:09:04:fa:3d:
76:4a:26:1c:c2:b9:11:8b:b5:04:6c:bd:42:2e:c8:
a5:3f:c1:8e:70:28:b7:ea:b0:d6:ef:55:7e:9c:80:
69:ac:60:94:76:60:55:72:03:e7:c9:3d:a3:18:37:
4f:50:d5:aa:66:ad:5d:53:68:20:cb:36:6c:e3:98:
54:5c:59:af:26:f2:2d:ea:75:52:0d:72:07:f3:19:
ad:95:3a:db:1e:1f:56:38:9a:0c:6a:40:03:5b:74:
40:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:B6:35:61:9F:5C:43:FE:B5:6C:F0:F9:A3:BF:C5:A5:CD:30:97:E0
X509v3 Authority Key Identifier:
keyid:AE:BC:33:D5:BA:58:52:34:CC:CE:F8:A5:7A:D8:6C:A1:EA:FC:4A:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrwz1bpYUjTMzvilethsoer8SqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:21:eb:3b:fd:00:49:35:9b:9a:17:c6:f1:e5:b0:43:e2:53:
5d:b3:3b:80:ed:f0:df:1b:9b:59:ed:ba:4e:a6:c1:19:bf:fd:
33:bc:f8:3e:8b:3b:dd:31:1d:fc:61:ed:db:75:0f:33:e0:03:
cf:23:ff:f4:38:f2:94:84:d2:7d:35:11:d2:18:6e:d9:96:b6:
e1:38:ad:58:38:03:20:71:76:5b:c7:3a:d8:35:7b:4f:90:18:
27:c1:70:21:88:3e:e8:5f:b2:2a:89:8d:93:86:d8:eb:55:3a:
75:a8:69:72:7d:6c:52:47:ee:83:11:ca:3c:f5:11:5b:7d:e5:
a9:58:c1:f4:8b:e3:d7:44:39:35:41:b7:91:1a:45:c9:a4:07:
cf:63:0b:61:aa:f1:58:74:bd:23:dd:99:48:eb:1d:37:73:42:
35:19:59:10:a5:6a:b6:ef:a9:91:a4:e6:35:52:1f:5f:6b:82:
02:0d:f9:43:e8:6c:c9:8b:a2:c1:81:48:30:b9:f4:df:24:23:
7e:52:1b:32:c0:f0:c3:a2:2c:91:a5:e2:a0:2f:41:35:1c:a6:
6c:a7:ce:c1:2e:5e:c0:57:b6:e8:2d:13:49:c2:d1:7c:5a:68:
69:14:39:82:be:00:40:cf:f4:81:03:38:a0:c1:6c:bb:17:b5:
3a:82:f1:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 03:10:54 2026 by rpki-client