Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/439cb7-4a36-425e-a084-dcf8ae924993/1/0ZFVeiDTKZYTxwLpmT6dWcObRwg.mft
File: 0ZFVeiDTKZYTxwLpmT6dWcObRwg.mft (raw, json)
Hash identifier: qpn6GiRXZaxdSGNkLXzHZhazNl6RFvq98RepOZldoCo=
Subject key identifier: 4A:F6:E9:24:A1:B6:D4:5F:CB:0F:D9:C0:4D:80:09:11:1C:7B:28:6E
Authority key identifier: D1:91:55:7A:20:D3:29:96:13:C7:02:E9:99:3E:9D:59:C3:9B:47:08
Certificate issuer: /CN=d191557a20d3299613c702e9993e9d59c39b4708
Certificate serial: 019F84C3A9077429457D9A1742405C76FE2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ZFVeiDTKZYTxwLpmT6dWcObRwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/439cb7-4a36-425e-a084-dcf8ae924993/1/0ZFVeiDTKZYTxwLpmT6dWcObRwg.mft
Manifest number: 2B
Signing time: Tue 21 Jul 2026 13:00:42 +0000
Manifest this update: Tue 21 Jul 2026 13:00:42 +0000
Manifest next update: Wed 22 Jul 2026 13:00:42 +0000
Files and hashes: 1: 0ZFVeiDTKZYTxwLpmT6dWcObRwg.crl (hash: 3gKeuYbIzqo3L6NLHmNxNgMH0eibGh1g1B4fYer+6ck=)
2: sxcdm8hMPFs7hwfFtctneyGAbtY.roa (hash: qSfMKSLLYHXoos50NdW6B+8JG0v//N7ZW2DTOD6cmAA=)
3: zKunQbH1Pi1kuPKcXi66B2kK2GE.roa (hash: IW2iL6xlGt6vOJU5K2L4rfi0KiuOBllyiIH+ctseSa0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/439cb7-4a36-425e-a084-dcf8ae924993/1/0ZFVeiDTKZYTxwLpmT6dWcObRwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/439cb7-4a36-425e-a084-dcf8ae924993/1/0ZFVeiDTKZYTxwLpmT6dWcObRwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0ZFVeiDTKZYTxwLpmT6dWcObRwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 13:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:c3:a9:07:74:29:45:7d:9a:17:42:40:5c:76:fe:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d191557a20d3299613c702e9993e9d59c39b4708
Validity
Not Before: Jul 21 13:00:42 2026 GMT
Not After : Jul 22 13:00:42 2026 GMT
Subject: CN=4af6e924a1b6d45fcb0fd9c04d8009111c7b286e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:69:4a:85:36:3b:96:2a:61:66:30:9f:9f:ec:
c9:4d:e7:ab:01:56:95:3a:40:b8:35:4c:80:da:a8:
55:22:5b:7a:9e:2a:34:92:49:83:96:ad:88:a0:99:
e8:98:a9:be:b2:62:bb:bd:9d:9b:87:a8:3c:10:a8:
74:52:8c:6a:3c:d1:ab:4a:29:17:d1:84:17:19:3e:
7f:bd:0b:64:0a:84:6d:64:d4:7e:a6:56:5f:f4:d2:
6a:70:ce:ee:ae:eb:74:9e:bc:0b:e0:2b:57:ba:72:
c9:32:0f:b9:e0:d6:49:6f:62:84:e7:d2:b5:35:fd:
9d:1d:67:eb:ae:6a:12:bc:f8:4d:76:0c:c5:7f:c6:
4f:25:58:f0:b7:46:58:c7:b6:8d:f7:11:c5:61:60:
71:74:58:38:ed:17:23:dc:58:91:f3:6f:57:3a:e8:
03:f0:9e:ae:24:d9:11:2e:16:b3:34:0a:6f:2f:a7:
6a:b6:e3:ce:6f:87:cc:5d:40:55:f8:23:d5:fe:50:
0c:f3:91:80:61:8e:39:49:34:6d:2a:af:53:19:f1:
22:8c:53:80:d1:c3:fb:44:88:0d:de:64:83:c1:6e:
61:94:27:1e:4b:80:03:c3:29:17:b1:f5:a6:84:8b:
10:88:86:10:96:66:a9:92:7e:ad:a1:02:7f:13:f0:
b3:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:F6:E9:24:A1:B6:D4:5F:CB:0F:D9:C0:4D:80:09:11:1C:7B:28:6E
X509v3 Authority Key Identifier:
keyid:D1:91:55:7A:20:D3:29:96:13:C7:02:E9:99:3E:9D:59:C3:9B:47:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ZFVeiDTKZYTxwLpmT6dWcObRwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/439cb7-4a36-425e-a084-dcf8ae924993/1/0ZFVeiDTKZYTxwLpmT6dWcObRwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/439cb7-4a36-425e-a084-dcf8ae924993/1/0ZFVeiDTKZYTxwLpmT6dWcObRwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:e2:87:6f:71:5b:0a:52:98:cc:d3:92:7a:1b:4d:81:94:23:
27:79:4b:27:e4:17:14:88:1c:c1:2a:25:5e:6f:e3:9a:42:d2:
8f:58:2b:45:b7:2f:cf:f4:3f:1e:60:0f:51:bb:15:1c:74:e8:
6d:40:f2:3f:ab:58:ca:70:fe:3f:13:94:1d:15:f4:b0:f5:b8:
d5:00:2c:0e:c4:18:34:8f:46:39:58:1a:bf:e6:dc:f5:8b:83:
8b:f8:56:81:19:47:d0:17:7f:ed:73:2d:55:ae:39:cf:b8:93:
7b:1a:11:25:4a:6e:94:1e:7d:7c:b7:bd:7a:fe:28:2f:bb:ba:
96:4e:25:f8:b8:54:05:ed:fc:3d:67:ca:cf:a7:fc:e3:39:5f:
65:79:13:07:ce:58:ce:ee:38:af:fd:1f:04:f0:cf:c6:0b:01:
98:fc:98:71:e1:0c:41:42:50:bc:1b:b3:69:a9:4e:24:4a:32:
71:93:40:df:b6:4f:1a:4d:8a:b3:ac:b9:3d:be:b6:54:62:54:
cc:b1:06:e5:11:35:55:09:97:61:d1:6b:97:82:23:e0:4e:68:
69:18:3d:4d:e0:43:19:e7:1b:e4:2c:af:d2:9c:69:28:2e:f2:
83:8f:5e:24:1a:48:21:a2:31:3d:ce:a6:16:65:ac:f9:a9:98:
0e:c0:3a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:36:56 2026 by rpki-client