Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/5bf30d-69eb-41a4-a90d-21b9f12d22f3/1/ZpT1sPq1_tLflTXiqcAp8YfVVAQ.mft
File: ZpT1sPq1_tLflTXiqcAp8YfVVAQ.mft (raw, json)
Hash identifier: WVtcf922qYyAU67mlvalHVPAdq/cdisgD6CMqqhxigE=
Subject key identifier: 23:DC:C5:C2:6B:0E:22:5E:B7:DC:E1:30:E5:21:09:CE:1A:1A:AA:CC
Authority key identifier: 66:94:F5:B0:FA:B5:FE:D2:DF:95:35:E2:A9:C0:29:F1:87:D5:54:04
Certificate issuer: /CN=6694f5b0fab5fed2df9535e2a9c029f187d55404
Certificate serial: 01A002B91FF851395864476C2CFD4C1602D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZpT1sPq1_tLflTXiqcAp8YfVVAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/5bf30d-69eb-41a4-a90d-21b9f12d22f3/1/ZpT1sPq1_tLflTXiqcAp8YfVVAQ.mft
Manifest number: 0B21
Signing time: Sat 15 Aug 2026 00:01:21 +0000
Manifest this update: Sat 15 Aug 2026 00:01:21 +0000
Manifest next update: Sun 16 Aug 2026 00:01:21 +0000
Files and hashes: 1: PKBAlxhxjbQl3V5bDnuBzljib9Q.roa (hash: eWzoIIDioxxQX7PyiTO6rBCtAXhu7H8TtLvFoqesiBg=)
2: ZpT1sPq1_tLflTXiqcAp8YfVVAQ.crl (hash: eaBTQY923wL60mYywr7jRYncFcHvyBJA2fG2jBpcikE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/5bf30d-69eb-41a4-a90d-21b9f12d22f3/1/ZpT1sPq1_tLflTXiqcAp8YfVVAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/5bf30d-69eb-41a4-a90d-21b9f12d22f3/1/ZpT1sPq1_tLflTXiqcAp8YfVVAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZpT1sPq1_tLflTXiqcAp8YfVVAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:b9:1f:f8:51:39:58:64:47:6c:2c:fd:4c:16:02:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6694f5b0fab5fed2df9535e2a9c029f187d55404
Validity
Not Before: Aug 15 00:01:21 2026 GMT
Not After : Aug 16 00:01:21 2026 GMT
Subject: CN=23dcc5c26b0e225eb7dce130e52109ce1a1aaacc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5a:01:eb:64:99:d9:64:78:aa:52:64:d7:0f:
59:db:f8:6d:cc:96:e4:e6:f3:30:15:d2:94:a7:5f:
9b:71:ac:af:56:07:0d:cc:ad:14:e2:d7:51:07:c9:
7b:1d:71:73:80:3e:b7:24:3a:c0:7b:71:e6:78:82:
94:d1:5d:95:50:09:56:69:22:93:45:56:c3:41:5a:
b1:62:f5:2d:84:ff:ed:3c:ba:ab:e3:2e:15:2a:eb:
83:79:3b:e5:05:24:04:78:2d:30:fc:3b:68:da:ef:
59:76:21:3d:5c:aa:f6:62:fc:17:52:eb:c7:98:17:
bc:47:66:ce:67:13:50:c8:80:fb:0b:72:f9:52:9c:
72:31:c5:86:3a:16:0e:56:e3:75:37:13:a9:34:4b:
f3:ac:dd:66:47:de:a1:4c:b3:0c:c0:57:6e:ee:0f:
84:e8:27:3d:a5:3e:2b:9b:88:8a:9e:d6:02:44:cc:
b9:ab:c0:1d:46:9b:a8:2a:55:bc:cc:52:b6:76:a0:
0d:18:03:57:d7:fd:e7:a8:f0:20:9c:21:c8:b4:e6:
bf:71:82:bf:50:73:54:4a:ad:8f:a4:20:62:72:3e:
25:b6:08:57:e3:46:33:bf:df:7b:71:68:eb:cf:4a:
2f:cc:41:3b:66:3b:04:0c:21:cf:bc:4a:34:f6:20:
87:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:DC:C5:C2:6B:0E:22:5E:B7:DC:E1:30:E5:21:09:CE:1A:1A:AA:CC
X509v3 Authority Key Identifier:
keyid:66:94:F5:B0:FA:B5:FE:D2:DF:95:35:E2:A9:C0:29:F1:87:D5:54:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZpT1sPq1_tLflTXiqcAp8YfVVAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/5bf30d-69eb-41a4-a90d-21b9f12d22f3/1/ZpT1sPq1_tLflTXiqcAp8YfVVAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/5bf30d-69eb-41a4-a90d-21b9f12d22f3/1/ZpT1sPq1_tLflTXiqcAp8YfVVAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:73:19:39:45:03:96:72:04:75:42:bd:cb:98:28:ed:71:56:
5b:c4:eb:17:11:71:47:27:27:ef:30:28:e0:83:b6:21:21:f5:
7a:90:b3:75:71:95:5e:70:59:67:e7:65:13:1d:cd:4c:56:41:
00:85:08:a1:b1:c3:f8:c1:33:91:1e:96:30:31:0b:60:f5:d5:
88:a0:b2:25:b8:0c:e3:9b:5a:d9:c2:f9:e8:40:b0:30:b9:d7:
f2:99:4a:89:93:54:6f:90:8a:3e:70:b9:d9:7a:e6:70:ed:7e:
46:17:ab:b0:5b:8a:66:7c:b0:26:f5:6d:e3:c0:4d:1f:44:6a:
6a:e2:fe:49:6a:23:67:d1:d5:e8:bd:82:64:3c:2d:f6:1f:4e:
72:1c:cc:90:c9:06:84:48:9d:27:2e:39:38:5c:d6:c6:ed:74:
30:30:81:6a:c2:d4:c7:ac:95:57:db:02:ff:a2:39:2a:63:e2:
ed:a9:3b:aa:b5:7f:c8:16:9a:a6:8e:c8:50:6e:fc:f8:a4:be:
ca:0a:a9:95:b1:0f:fd:09:d1:e1:c9:f1:28:b9:a1:93:72:7f:
bc:18:29:f3:09:e7:5c:9a:48:15:56:2e:08:91:b4:03:1e:95:
de:cc:3f:1b:81:0b:c6:7c:5f:60:56:98:db:9a:f2:bc:1a:f8:
81:d2:f5:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:29:19 2026 by rpki-client