Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/sZPxphH_PZUKvZZlLNqgVaNR20U.mft
File: sZPxphH_PZUKvZZlLNqgVaNR20U.mft (raw, json)
Hash identifier: 1gjpDMh/vtsUiH+wa5h1bPTbvg8yOgKuduekonzdYmg=
Subject key identifier: 34:0E:AA:2F:EC:93:EF:AA:8C:E9:00:B9:51:50:5B:32:84:5F:7A:D9
Authority key identifier: B1:93:F1:A6:11:FF:3D:95:0A:BD:96:65:2C:DA:A0:55:A3:51:DB:45
Certificate issuer: /CN=b193f1a611ff3d950abd96652cdaa055a351db45
Certificate serial: 019FF9B6CB108C2063BF126EC1D85D14563B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sZPxphH_PZUKvZZlLNqgVaNR20U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/sZPxphH_PZUKvZZlLNqgVaNR20U.mft
Manifest number: 76
Signing time: Thu 13 Aug 2026 06:02:14 +0000
Manifest this update: Thu 13 Aug 2026 06:02:14 +0000
Manifest next update: Fri 14 Aug 2026 06:02:14 +0000
Files and hashes: 1: 0o1C4vwLrtJhxZJe2NWXXgCUrq8.roa (hash: 3Fe9Azb+RrHGaKENizsao17NNGxQe5yH/WD4Wqllrkg=)
2: sZPxphH_PZUKvZZlLNqgVaNR20U.crl (hash: lNPyS2gW5g2sVPaU651CN30H/X/B4d5q09lkhJiAUjU=)
3: zzpXRXiaaDaUNJgb8J2uf-9tibo.roa (hash: 6IAZNXyLJkKu4qRWV3DHkLx2sFZt0DSc2M4cQ6BsTRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/sZPxphH_PZUKvZZlLNqgVaNR20U.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/sZPxphH_PZUKvZZlLNqgVaNR20U.mft
rsync://rpki.ripe.net/repository/DEFAULT/sZPxphH_PZUKvZZlLNqgVaNR20U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 06:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f9:b6:cb:10:8c:20:63:bf:12:6e:c1:d8:5d:14:56:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b193f1a611ff3d950abd96652cdaa055a351db45
Validity
Not Before: Aug 13 06:02:14 2026 GMT
Not After : Aug 14 06:02:14 2026 GMT
Subject: CN=340eaa2fec93efaa8ce900b951505b32845f7ad9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:6b:7c:36:18:7c:6d:99:b6:8f:ab:32:c9:26:
fd:8b:81:7b:a1:05:75:49:04:23:39:35:9b:42:5f:
ed:64:c9:d3:d3:ed:69:c0:57:73:dd:78:f4:02:b3:
48:e7:39:8a:2c:ed:c7:2e:d9:e3:31:14:5c:46:9b:
f6:83:c7:50:a1:54:6a:4f:1e:66:71:3b:8c:9c:a2:
e0:66:bd:93:fb:60:63:ad:5b:5d:5a:e2:73:91:98:
5d:c0:b5:32:29:f1:9f:58:b2:dc:b4:5a:21:77:a8:
34:b8:35:ed:6f:67:f9:bd:8c:12:fc:f3:8f:21:7a:
d4:02:ff:0d:5b:bf:28:23:99:16:bf:4b:38:67:6a:
ce:1e:54:d5:6f:bc:60:83:c7:89:28:b2:b5:d1:38:
93:25:04:c1:3b:91:7b:e8:22:7a:d3:a4:2f:3d:51:
e5:3a:87:b9:fc:36:a7:21:0e:51:fd:2f:bd:59:93:
cf:15:3a:97:7d:5b:9e:f2:0c:ed:f6:1c:da:ac:ee:
15:2e:dc:d9:70:df:b6:15:e0:9e:2c:12:b6:98:52:
70:71:3b:c7:19:17:0b:cf:27:d1:62:ea:39:3f:7a:
72:c0:91:bc:99:0e:5a:55:34:b4:06:70:a3:25:91:
dd:d2:d6:92:48:f8:a1:ea:26:86:81:a6:9e:27:5d:
91:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:0E:AA:2F:EC:93:EF:AA:8C:E9:00:B9:51:50:5B:32:84:5F:7A:D9
X509v3 Authority Key Identifier:
keyid:B1:93:F1:A6:11:FF:3D:95:0A:BD:96:65:2C:DA:A0:55:A3:51:DB:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZPxphH_PZUKvZZlLNqgVaNR20U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/sZPxphH_PZUKvZZlLNqgVaNR20U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/sZPxphH_PZUKvZZlLNqgVaNR20U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:a0:67:f9:8e:b1:43:b9:3a:99:82:3c:50:85:05:54:a5:b0:
cc:f0:e1:0b:7e:7e:e4:20:c8:8b:8a:42:95:c6:de:54:45:16:
38:56:77:62:64:82:11:e2:05:f3:73:d1:5f:30:b2:c2:1b:1a:
81:18:f1:51:58:39:c5:1f:40:50:c4:f7:56:b1:a8:b8:9a:90:
98:6e:e8:a9:01:61:a1:d9:cd:4b:1e:54:7b:a8:6e:ca:33:18:
b7:8a:58:93:af:27:5a:94:56:54:f2:81:19:d9:b8:13:21:ce:
f0:08:7a:6a:08:8e:9f:f5:6e:09:f8:a1:18:7e:f1:a2:be:a7:
6b:6f:e6:8a:eb:c9:5b:9c:dd:9c:0a:db:bb:83:3d:fd:8f:6f:
3d:af:a8:ba:09:ff:68:6c:46:bd:4f:05:fd:32:0f:79:bd:ef:
86:34:0c:09:45:3d:da:f3:2d:9b:c7:9d:23:84:59:ad:b3:60:
b1:9b:67:c1:e0:e9:3b:8f:57:3a:cc:3c:2b:e5:1f:9f:48:9c:
0b:dc:84:52:8c:93:ba:f7:50:f4:65:d0:9a:40:c8:f0:d9:1f:
8b:c2:02:d1:92:22:7a:06:48:f1:cf:12:38:53:cc:38:42:8f:
7f:71:e4:09:a7:be:b9:43:18:06:54:0e:e5:8d:a2:07:db:47:
8a:34:a3:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 11:49:38 2026 by rpki-client