Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/mZK1NCb7YU2aWm2D9ABWamYMndI.mft
File: mZK1NCb7YU2aWm2D9ABWamYMndI.mft (raw, json)
Hash identifier: fyAoYjfAFCRn744jYf1CTMYdiQVA6981J9ao2bu2lS8=
Subject key identifier: F0:74:01:86:43:FF:A0:27:99:1A:F3:3F:75:60:61:53:68:B7:05:ED
Authority key identifier: 99:92:B5:34:26:FB:61:4D:9A:5A:6D:83:F4:00:56:6A:66:0C:9D:D2
Certificate issuer: /CN=9992b53426fb614d9a5a6d83f400566a660c9dd2
Certificate serial: 019FA0E0D954E6C72156D7DABB6234F185B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mZK1NCb7YU2aWm2D9ABWamYMndI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/mZK1NCb7YU2aWm2D9ABWamYMndI.mft
Manifest number: 15A2
Signing time: Mon 27 Jul 2026 00:01:57 +0000
Manifest this update: Mon 27 Jul 2026 00:01:57 +0000
Manifest next update: Tue 28 Jul 2026 00:01:57 +0000
Files and hashes: 1: LKFdqAxekSyGKQc0Md8_7Xelo-E.roa (hash: hzROPb2XKPcBYg2mXSPUmlxSomnvcQdFm4oNZy6YiVs=)
2: mZK1NCb7YU2aWm2D9ABWamYMndI.crl (hash: E9GDtsxgFIUgkk//YFcqVD1fT4ZJwvhxRq6yttOD6po=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/mZK1NCb7YU2aWm2D9ABWamYMndI.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/mZK1NCb7YU2aWm2D9ABWamYMndI.mft
rsync://rpki.ripe.net/repository/DEFAULT/mZK1NCb7YU2aWm2D9ABWamYMndI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:e0:d9:54:e6:c7:21:56:d7:da:bb:62:34:f1:85:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9992b53426fb614d9a5a6d83f400566a660c9dd2
Validity
Not Before: Jul 27 00:01:57 2026 GMT
Not After : Jul 28 00:01:57 2026 GMT
Subject: CN=f074018643ffa027991af33f7560615368b705ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e9:9e:d5:d7:16:cf:14:df:0e:85:d7:dc:48:
59:e5:47:fb:b1:24:1c:c5:62:a0:6b:38:7e:4c:af:
ab:5d:49:87:19:c5:97:8c:e4:45:c8:1b:3d:d8:ae:
18:dc:c7:b6:3f:54:8e:71:e7:5a:5b:1a:df:a7:b3:
26:89:5b:4b:78:af:c3:0d:60:36:a7:78:f1:d8:9c:
75:fe:cb:19:f5:26:8d:d1:d8:81:e2:bc:0e:33:c4:
31:11:99:0f:df:41:c8:49:61:57:eb:b4:00:a7:7c:
a0:60:e7:9c:0c:8d:57:4f:86:a5:25:57:b1:24:53:
0c:28:d3:ce:00:d4:5a:02:06:8d:90:a9:c7:f7:81:
e0:65:08:96:d7:b2:53:65:4b:da:05:45:c6:69:8e:
30:82:32:3d:23:24:7c:b0:f8:16:94:e7:0e:c7:00:
5a:9d:f7:b8:2e:60:1a:38:a1:37:17:83:ec:62:87:
86:a1:09:22:c5:70:aa:3b:23:6b:f9:5d:0f:62:da:
6e:83:a3:c4:87:e7:27:7b:f9:b5:39:af:ab:40:21:
cb:84:a3:f2:51:2d:be:cd:0c:ce:e6:e5:81:5c:76:
7a:bb:0e:84:62:a1:ad:e6:2c:80:6d:42:ec:f1:6b:
3a:0f:94:73:07:81:7f:3c:9a:b2:0e:b6:7e:f6:73:
d2:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:74:01:86:43:FF:A0:27:99:1A:F3:3F:75:60:61:53:68:B7:05:ED
X509v3 Authority Key Identifier:
keyid:99:92:B5:34:26:FB:61:4D:9A:5A:6D:83:F4:00:56:6A:66:0C:9D:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZK1NCb7YU2aWm2D9ABWamYMndI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/mZK1NCb7YU2aWm2D9ABWamYMndI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/mZK1NCb7YU2aWm2D9ABWamYMndI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:2a:ee:9d:af:07:98:2d:38:fe:09:96:98:7f:73:c3:92:f7:
04:78:f2:f6:c3:07:5f:b6:63:6e:7e:c4:cf:34:6e:50:ad:54:
cd:02:13:bd:65:61:65:ac:60:61:24:4b:3e:6f:3d:db:a4:7d:
fd:9a:fe:90:7b:68:e4:a2:03:4a:44:cd:cd:f4:0c:6b:8f:13:
58:e2:aa:f2:87:23:41:8b:b8:20:3f:35:f3:3b:82:46:b0:e6:
3e:3a:f4:b7:3f:f7:7c:b0:c3:46:df:5b:ac:79:90:e1:3d:b1:
8e:af:c4:95:f5:5d:18:f5:62:c4:ff:cb:53:42:a8:25:14:36:
96:e8:71:0c:6c:93:04:47:09:10:a0:a2:bb:d6:19:f0:57:df:
a9:03:ea:1f:25:0d:89:12:39:99:53:90:66:e0:75:c4:27:3b:
6e:1b:3b:65:e9:ba:74:a9:2f:97:6d:1d:d6:1d:08:54:84:90:
36:e2:5e:cc:35:8d:03:f5:4e:76:59:e9:f2:58:2a:b7:a1:ef:
c6:5f:6b:89:12:e7:f0:14:01:f1:35:af:98:82:60:7d:e8:b6:
80:1b:17:98:7f:c3:e4:71:19:bc:cd:b9:a7:d8:b1:4e:7a:fe:
bc:63:a3:a8:d6:64:a9:13:ee:98:8b:af:37:da:1e:26:42:f2:
ce:88:8c:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 01:04:44 2026 by rpki-client