Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.mft
File: zpTDHhXfS3pg5dQN86rBhS6Np0s.mft (raw, json)
Hash identifier: K1aZZeBAoyvWvbJSorx7fQDfbZ/UbSvWvNCmkNf/2nc=
Subject key identifier: 01:42:8E:FC:40:39:21:91:0B:C7:4B:CC:AF:9B:6A:2B:C5:36:DB:2F
Authority key identifier: CE:94:C3:1E:15:DF:4B:7A:60:E5:D4:0D:F3:AA:C1:85:2E:8D:A7:4B
Certificate issuer: /CN=ce94c31e15df4b7a60e5d40df3aac1852e8da74b
Certificate serial: 019F1A8CAD23012430C5E4616D00BB3B1A17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zpTDHhXfS3pg5dQN86rBhS6Np0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.mft
Manifest number: 0B86
Signing time: Tue 30 Jun 2026 22:00:54 +0000
Manifest this update: Tue 30 Jun 2026 22:00:54 +0000
Manifest next update: Wed 01 Jul 2026 22:00:54 +0000
Files and hashes: 1: 2asX8qOaxpLjyUU4myYKc0Ej3nA.roa (hash: xKHvXSgALDQpoGTmF3KkZGpVCQ/XwWuRiWZZZUlqzJ0=)
2: zpTDHhXfS3pg5dQN86rBhS6Np0s.crl (hash: nfVe+BL2W7yuUXU9u84d4QEy7cH39ipeN2Uq0uGmNwI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/zpTDHhXfS3pg5dQN86rBhS6Np0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 20:30:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1a:8c:ad:23:01:24:30:c5:e4:61:6d:00:bb:3b:1a:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce94c31e15df4b7a60e5d40df3aac1852e8da74b
Validity
Not Before: Jun 30 22:00:54 2026 GMT
Not After : Jul 1 22:00:54 2026 GMT
Subject: CN=01428efc403921910bc74bccaf9b6a2bc536db2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d7:cf:73:aa:c3:a7:82:31:93:6c:d0:f4:12:
f1:3f:a9:9d:a5:59:ed:ef:90:02:a9:2a:cd:17:c2:
d4:0b:dc:e4:f6:81:aa:6d:07:33:e3:75:38:5f:9f:
40:d5:e5:ce:11:95:b5:bb:43:51:f2:61:ca:07:e8:
8e:f0:c3:94:47:7b:23:09:0d:4d:4e:09:68:20:26:
5a:57:17:2a:2c:cf:40:9f:4c:50:66:43:9c:a4:00:
3c:09:4f:1f:7a:6a:e9:95:e0:71:de:82:ff:e0:67:
a4:ed:a9:ec:9e:7d:b5:ef:6d:42:8f:85:37:9a:28:
fa:45:53:b5:d5:73:b3:fc:0f:2b:16:5d:3c:27:87:
2e:bc:cd:14:36:33:d8:eb:c3:95:83:03:f4:56:f0:
07:1d:27:a4:ff:a8:6f:fa:b5:94:38:8e:4f:fa:2f:
9e:c2:76:f5:17:b7:60:66:4c:dc:a9:12:e5:19:28:
ea:92:1b:9b:62:c4:fa:42:ed:1b:ac:b7:bc:42:2b:
9c:2d:e2:e1:20:fe:c1:51:9d:e8:ee:28:35:09:56:
ce:de:bd:8b:4f:3f:0e:cd:be:16:e0:56:d7:99:84:
e2:b1:54:08:c4:12:0a:90:cf:66:48:a8:97:ff:18:
21:19:83:8f:f9:df:2f:89:6e:3f:ff:de:5a:bf:ff:
49:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:42:8E:FC:40:39:21:91:0B:C7:4B:CC:AF:9B:6A:2B:C5:36:DB:2F
X509v3 Authority Key Identifier:
keyid:CE:94:C3:1E:15:DF:4B:7A:60:E5:D4:0D:F3:AA:C1:85:2E:8D:A7:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zpTDHhXfS3pg5dQN86rBhS6Np0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:9b:d9:12:52:8e:52:7c:4c:84:5b:c9:3d:47:f3:ff:1a:21:
56:25:a9:8e:b1:6c:e3:0f:9a:49:01:8a:58:da:1b:fe:de:6a:
2c:b9:0f:39:a1:6b:8a:0c:b1:dd:48:ce:02:53:ac:d8:ac:51:
b6:a1:46:35:4c:d6:1c:91:d1:f8:af:30:08:85:42:86:74:c1:
c2:d5:73:c4:78:49:b8:6b:05:74:28:17:48:8e:d4:b9:fe:f1:
ef:19:f4:f9:84:88:8e:c7:8b:d5:65:af:ad:da:14:74:43:0f:
85:9d:cc:9f:6b:f3:ab:79:23:18:bc:d2:12:92:b1:d5:0c:3c:
20:77:e0:dc:3e:aa:7f:2a:d5:84:f1:9b:70:46:98:7f:db:17:
cc:7e:19:e3:3a:d8:1f:86:b2:c9:9a:64:7e:2d:a0:7b:d9:78:
fd:8f:89:2c:93:19:88:94:16:2a:8d:d0:65:c6:f2:8c:47:c7:
bf:eb:15:59:90:7f:49:65:4e:d8:d1:75:e4:a1:2c:7f:b4:99:
9e:0e:51:cc:a1:e5:ba:11:e5:9b:90:cf:fc:bf:b3:18:10:d8:
af:de:4a:82:92:94:b9:a6:36:1d:6b:84:80:c5:ba:98:5d:e2:
69:e8:d1:87:7b:bb:4d:b8:ec:43:ba:8e:bf:88:dd:47:e0:94:
32:17:ba:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 03:31:54 2026 by rpki-client