Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/081b84-4ece-4005-b28d-9f293172bb6b/1/Z_0-GfWDNh_l2QpBKxKA98_7gB8.mft
File: Z_0-GfWDNh_l2QpBKxKA98_7gB8.mft (raw, json)
Hash identifier: RL5GYeXr8VzTd41YgIJnd6DKbUkeUO2f96jTYnIev9U=
Subject key identifier: AA:7C:52:37:2E:C6:8F:69:CD:5D:05:FA:B6:F6:C0:C0:F5:0B:85:EB
Authority key identifier: 67:FD:3E:19:F5:83:36:1F:E5:D9:0A:41:2B:12:80:F7:CF:FB:80:1F
Certificate issuer: /CN=67fd3e19f583361fe5d90a412b1280f7cffb801f
Certificate serial: 019FA372D207AFCAD8E47D4D4198855592C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_0-GfWDNh_l2QpBKxKA98_7gB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/081b84-4ece-4005-b28d-9f293172bb6b/1/Z_0-GfWDNh_l2QpBKxKA98_7gB8.mft
Manifest number: 1963
Signing time: Mon 27 Jul 2026 12:00:38 +0000
Manifest this update: Mon 27 Jul 2026 12:00:38 +0000
Manifest next update: Tue 28 Jul 2026 12:00:38 +0000
Files and hashes: 1: EO1xuq0TyBN7jL2nsBNR6LuDlQo.roa (hash: 0YddX8lcftncrD+VCEJL3eDzYZ6fCFEVTyRED0oHXFA=)
2: Z_0-GfWDNh_l2QpBKxKA98_7gB8.crl (hash: EyVsO+JHuWJrmPJUZM0PehskXOxa9qCkfNhCFBbbRoc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/081b84-4ece-4005-b28d-9f293172bb6b/1/Z_0-GfWDNh_l2QpBKxKA98_7gB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/081b84-4ece-4005-b28d-9f293172bb6b/1/Z_0-GfWDNh_l2QpBKxKA98_7gB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z_0-GfWDNh_l2QpBKxKA98_7gB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:72:d2:07:af:ca:d8:e4:7d:4d:41:98:85:55:92:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67fd3e19f583361fe5d90a412b1280f7cffb801f
Validity
Not Before: Jul 27 12:00:38 2026 GMT
Not After : Jul 28 12:00:38 2026 GMT
Subject: CN=aa7c52372ec68f69cd5d05fab6f6c0c0f50b85eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:62:89:19:82:0e:c9:e6:fd:4a:2a:7c:63:9a:
f3:10:b6:a5:03:79:02:ec:7f:3f:48:f3:0d:4d:99:
2f:2f:f7:62:f1:b0:a7:e2:55:47:9f:08:f1:c8:35:
9f:24:a1:5b:03:30:3f:7c:ac:02:a6:ad:13:7b:3b:
e5:90:34:88:dc:ac:88:25:0b:a3:5c:b5:e9:d6:67:
bc:8c:49:08:2e:76:48:17:bf:f1:47:ae:93:1b:dc:
13:61:1f:42:ca:b1:cf:01:91:89:0f:8f:cb:d5:4d:
a9:42:e6:65:1c:92:0c:ac:83:45:62:05:7f:cd:d7:
ae:59:0e:cb:3e:4d:9b:c9:61:7b:30:55:b6:9f:d8:
e5:1c:52:9a:ef:eb:77:82:75:f9:84:d4:ac:71:b0:
ab:09:28:aa:ab:15:44:a9:19:18:ce:cf:64:28:fd:
38:3f:44:45:33:c3:1e:9b:fb:76:df:68:a0:07:77:
db:25:88:cf:60:b5:78:7f:9f:f5:76:1f:b8:d7:80:
68:97:69:42:3d:58:8c:bc:d5:40:49:f1:8f:30:2a:
45:48:ad:0a:a6:86:e3:44:f2:3c:e2:97:05:a0:b0:
17:79:cd:38:04:ac:4d:a5:18:3a:73:1d:ba:7d:12:
1c:ba:cd:00:9a:ed:97:f7:37:7b:8d:37:c9:b8:07:
69:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:7C:52:37:2E:C6:8F:69:CD:5D:05:FA:B6:F6:C0:C0:F5:0B:85:EB
X509v3 Authority Key Identifier:
keyid:67:FD:3E:19:F5:83:36:1F:E5:D9:0A:41:2B:12:80:F7:CF:FB:80:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_0-GfWDNh_l2QpBKxKA98_7gB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/081b84-4ece-4005-b28d-9f293172bb6b/1/Z_0-GfWDNh_l2QpBKxKA98_7gB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/081b84-4ece-4005-b28d-9f293172bb6b/1/Z_0-GfWDNh_l2QpBKxKA98_7gB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:3d:d9:01:0f:87:db:50:a1:b6:62:52:7b:58:53:43:7d:b8:
e6:10:2e:18:78:ec:36:8e:5c:39:02:59:02:56:e2:bc:a4:22:
75:f5:25:c3:ca:c6:18:86:fa:0c:a0:70:00:ab:5b:c3:27:64:
c5:bf:50:34:1f:5a:03:54:da:94:72:08:5f:5d:09:ba:85:cd:
d3:d0:9e:1b:36:c7:34:18:13:32:6e:63:5b:60:80:37:09:d5:
ed:b3:2a:52:1e:f9:bb:40:07:8d:0a:74:ad:42:76:21:cb:a8:
7d:24:a2:a6:db:a3:9e:4c:c3:d9:d5:b5:7a:e4:5b:0a:11:83:
33:92:99:96:66:d2:96:d7:12:c3:0b:d0:35:79:25:28:d4:18:
91:f0:c3:74:36:42:16:7a:c1:03:2c:6d:20:a5:b1:dd:bb:3a:
95:0a:e2:45:de:a6:69:b4:3e:71:71:e5:99:9d:82:83:e7:ac:
6d:c8:8c:5f:84:e6:c1:7a:63:69:65:fa:5d:b7:c0:fa:17:58:
3a:b3:a9:f6:4d:39:6d:5b:47:a8:1b:48:5e:1f:c8:7d:df:20:
b7:b6:32:bc:bd:a9:06:80:f9:b2:5c:8f:3d:03:18:56:71:2f:
88:0d:fa:50:6f:b5:17:fe:af:26:b0:48:f0:49:f7:43:f4:6c:
8b:b5:35:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 14:20:08 2026 by rpki-client