Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.mft
File: zTlHV-FBYgKkAilW2_SNcHRYUgw.mft (raw, json)
Hash identifier: aIE6McZMNuo1NH8qVqs+cN2vI8M2pU3DLuH9ZcgC034=
Subject key identifier: B4:96:81:EF:87:41:D4:79:12:4D:FD:89:8A:EC:A6:68:72:21:2D:DE
Authority key identifier: CD:39:47:57:E1:41:62:02:A4:02:29:56:DB:F4:8D:70:74:58:52:0C
Certificate issuer: /CN=cd394757e1416202a4022956dbf48d707458520c
Certificate serial: 01A0208C0659338C85FFBA269EF50DDDD7B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zTlHV-FBYgKkAilW2_SNcHRYUgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.mft
Manifest number: 12BB
Signing time: Thu 20 Aug 2026 19:00:42 +0000
Manifest this update: Thu 20 Aug 2026 19:00:42 +0000
Manifest next update: Fri 21 Aug 2026 19:00:42 +0000
Files and hashes: 1: 5GenFMQsSYDx9FcfiAXgf9Uomdw.roa (hash: 4H+3cPhJ7oDZNP6D43X5l+hl9KT5PURFIDgzFceABtg=)
2: 5Zndcb8EJc7nslqP_7KqvtkxJPw.roa (hash: ogNnDwO6cHFOhG9TbGz5GUJ2wMKx53CTMIlKdOAYy7U=)
3: zTlHV-FBYgKkAilW2_SNcHRYUgw.crl (hash: 0/ML78HdsIEdH1AW6ymbm/FzSFSKwBd6rIUFoctM4CI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/zTlHV-FBYgKkAilW2_SNcHRYUgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 13:32:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:20:8c:06:59:33:8c:85:ff:ba:26:9e:f5:0d:dd:d7:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd394757e1416202a4022956dbf48d707458520c
Validity
Not Before: Aug 20 19:00:42 2026 GMT
Not After : Aug 21 19:00:42 2026 GMT
Subject: CN=b49681ef8741d479124dfd898aeca66872212dde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:97:56:94:0f:d4:a8:0a:fd:85:7a:60:ee:72:
2c:23:7a:37:2b:2d:ed:5c:13:52:04:f3:05:9a:73:
aa:f9:2f:0f:ad:79:3d:98:a1:c3:7c:8c:bd:0f:f8:
62:b0:0e:a9:67:b5:0a:f8:8b:f2:4c:96:ac:00:f7:
57:d1:cf:41:46:f6:69:25:d5:7f:a4:95:0f:f8:50:
e3:db:f1:67:c8:07:8b:3a:db:e9:a3:84:bc:e4:52:
13:16:e8:19:36:d2:3e:ff:c3:cb:59:3e:07:b7:63:
50:df:8a:b3:38:40:41:d9:9e:06:a9:4e:ec:ff:73:
f8:0a:66:d1:64:9c:fe:56:85:9f:3a:78:f0:10:2d:
95:9c:3c:33:19:20:6c:99:48:2b:3a:f7:c2:cc:c3:
b1:13:80:6a:5b:58:17:1d:b7:0e:96:ea:ac:0c:76:
bf:b3:a5:fa:b0:44:24:9b:35:48:e3:d4:e5:6f:26:
ca:c2:cb:45:98:f0:9a:7d:3e:44:ec:ea:49:d9:19:
be:1d:15:76:57:a6:2b:d5:57:5a:f2:71:c2:ff:61:
88:a1:4b:ba:01:53:48:bf:79:28:91:1d:d5:fb:db:
5e:0e:53:cf:ba:ed:00:ab:63:be:1b:65:21:74:08:
d9:0f:86:7c:a6:d6:7f:81:8c:c2:0c:bb:94:83:1d:
1e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:96:81:EF:87:41:D4:79:12:4D:FD:89:8A:EC:A6:68:72:21:2D:DE
X509v3 Authority Key Identifier:
keyid:CD:39:47:57:E1:41:62:02:A4:02:29:56:DB:F4:8D:70:74:58:52:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zTlHV-FBYgKkAilW2_SNcHRYUgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:61:11:32:bd:00:70:91:9e:2d:97:d2:f8:c5:5c:5a:a5:34:
55:fd:4c:37:31:7f:83:d7:dc:c3:ab:93:fc:b4:be:f5:e1:4d:
6e:a3:ff:0c:85:4f:87:76:d1:dc:64:99:42:97:5e:cb:93:b7:
27:ae:66:11:8d:57:fb:a2:c7:7f:74:77:75:37:d7:8f:e4:f0:
8b:c3:a3:80:95:52:56:c9:01:e2:03:2f:c3:13:e5:1a:66:35:
e0:1a:96:0a:dd:b4:15:ed:ac:40:1d:f7:fc:0d:86:1f:2b:2b:
1a:89:8e:53:f8:b9:48:48:76:d3:b6:1c:f6:6f:e4:39:d7:0a:
76:ae:9a:e5:53:87:7c:75:6c:90:00:81:ba:a1:58:55:8d:97:
41:be:9e:c7:65:0c:f7:ee:a5:86:c0:5a:b4:e0:7d:fa:85:3c:
7a:74:85:83:a9:b1:ad:69:5b:b5:6b:bf:9e:9c:a0:2c:04:55:
8b:93:0b:03:17:43:dc:67:2e:66:33:5d:3a:cf:26:23:89:f7:
be:ad:22:3b:4a:28:f0:87:02:eb:bb:34:0b:b4:52:2f:07:82:
78:5d:4c:3a:ae:8f:83:0b:90:88:af:b5:cc:3f:fe:08:0b:dd:
03:df:73:a5:9c:f1:2d:d8:6a:84:3a:20:a8:80:c2:57:b1:3e:
e2:12:64:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 22:54:59 2026 by rpki-client