Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft
File: Zw5gd5881NA9XlB4QPX6KjGmq40.mft (raw, json)
Hash identifier: TZOaY3P7k2za+lTg3SrWgtVOn8f18phOEBp7B036dpg=
Subject key identifier: A2:51:DD:C2:AD:E9:1B:A9:43:CD:43:D9:E8:35:65:4E:1B:8B:13:9B
Authority key identifier: 67:0E:60:77:9F:3C:D4:D0:3D:5E:50:78:40:F5:FA:2A:31:A6:AB:8D
Certificate issuer: /CN=670e60779f3cd4d03d5e507840f5fa2a31a6ab8d
Certificate serial: 019F3CE2E64E01DFF46B398B360C0F95A600
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zw5gd5881NA9XlB4QPX6KjGmq40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft
Manifest number: 07FA
Signing time: Tue 07 Jul 2026 14:02:10 +0000
Manifest this update: Tue 07 Jul 2026 14:02:10 +0000
Manifest next update: Wed 08 Jul 2026 14:02:10 +0000
Files and hashes: 1: 99ql3Nj_XXqdJBUKyH1zSjprsmk.roa (hash: 8Q5g46XQnTAlgbAY9G1RdWl4ij89rLN6KeETKWp4UX4=)
2: UKvSxhXp6UeN9PA2d7zmzONW8dI.roa (hash: U2Kl3dxAuyKIqhwNvATcE57d94w+8GaKrGRAFwd2pQQ=)
3: Zw5gd5881NA9XlB4QPX6KjGmq40.crl (hash: 9h1c62yMWvlP0emlMwYKl97PASVVli+vnqfq+pYOe3g=)
4: yGnTUZ-K5iZvv_QJlyjyr1Vifo0.roa (hash: 3NvMCRIYGPgbO9Y+3R7bmJF+C6D6NUF59+RrT9ZBe2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zw5gd5881NA9XlB4QPX6KjGmq40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 14:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3c:e2:e6:4e:01:df:f4:6b:39:8b:36:0c:0f:95:a6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=670e60779f3cd4d03d5e507840f5fa2a31a6ab8d
Validity
Not Before: Jul 7 14:02:10 2026 GMT
Not After : Jul 8 14:02:10 2026 GMT
Subject: CN=a251ddc2ade91ba943cd43d9e835654e1b8b139b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:15:64:df:c0:8d:00:28:ff:61:35:1d:a3:64:
81:27:df:68:16:ae:33:15:6c:a0:0e:c2:ee:49:36:
d2:bb:e3:6d:ca:50:44:3d:64:65:c6:b3:a0:af:e4:
7d:33:fe:63:40:92:63:62:b1:68:fe:1e:90:20:82:
dd:c8:32:aa:77:cb:6d:52:43:2c:24:1d:37:2d:28:
d2:04:a0:4f:3a:08:5d:e8:38:d7:4e:7f:5f:a4:2a:
a6:cd:7d:20:01:7d:59:3a:4c:96:3c:92:8e:ee:0b:
6c:d3:23:63:e0:ca:aa:28:66:58:c1:11:98:1d:b0:
42:90:af:f6:8c:f4:63:40:9d:34:eb:49:79:97:ef:
5f:95:98:38:c5:dd:6f:1e:b0:26:a0:f9:1f:0d:67:
dd:74:a5:01:5c:93:b5:42:95:5c:66:75:e0:66:63:
56:2f:af:06:ef:bc:e7:d1:b9:14:78:40:de:e2:95:
87:89:0b:cc:23:cd:4d:ba:d7:cc:0f:87:3b:6b:e5:
47:dc:51:96:64:41:41:2e:97:94:81:84:4a:76:87:
88:e9:7d:25:c2:1b:57:35:1a:f1:67:22:c4:09:b6:
2d:f5:b7:c2:7f:a3:f5:76:4c:02:e8:62:64:a7:ad:
54:b9:75:22:bf:de:cf:46:8f:49:63:01:85:8b:a4:
75:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:51:DD:C2:AD:E9:1B:A9:43:CD:43:D9:E8:35:65:4E:1B:8B:13:9B
X509v3 Authority Key Identifier:
keyid:67:0E:60:77:9F:3C:D4:D0:3D:5E:50:78:40:F5:FA:2A:31:A6:AB:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zw5gd5881NA9XlB4QPX6KjGmq40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:06:85:91:18:44:b1:8e:d8:44:46:ac:82:51:20:5a:4b:a0:
2a:04:6e:ad:40:50:b5:c2:69:96:7f:a4:28:32:24:da:2b:38:
17:0c:1a:ac:a0:89:9a:7e:3b:cf:76:e6:15:61:c5:f8:10:f4:
54:a1:94:6d:23:2f:9e:22:44:1f:b9:47:a0:ff:ce:ae:b7:74:
98:e1:62:d1:7d:fc:ce:17:49:98:6c:3b:8b:90:d2:fa:11:4b:
19:31:0b:89:a2:5c:16:99:aa:f3:bf:69:f0:0b:c4:b2:5e:5f:
ae:50:da:69:16:ca:09:00:b8:9a:ab:7c:05:bc:3a:6f:61:b3:
49:a6:ae:21:65:08:67:00:4f:21:7f:89:ce:59:d6:43:6a:09:
13:4c:e7:cd:59:86:a9:01:2b:90:5c:fb:49:46:2c:89:a6:3f:
9f:60:c8:28:db:29:63:4a:07:52:dd:33:8d:ca:60:d1:c3:1c:
fc:23:d9:60:91:14:bc:44:c5:b6:e9:b0:45:7a:23:44:f0:61:
d6:98:0d:e7:1e:b6:b5:c1:53:83:77:88:0c:58:1a:62:40:1e:
44:a7:cc:eb:de:e2:1f:43:ba:a1:fd:f8:19:de:be:d6:76:a7:
d0:38:cf:66:5d:be:c0:b0:cf:09:63:9c:11:81:50:49:c9:dc:
93:40:37:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 15:44:22 2026 by rpki-client