
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft
File: sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft (raw, json)
Hash identifier: ajuK2JUohJwD/FnHRd2xXKFe0pgUAt5Qhslp85FABy4=
Subject key identifier: 6B:F9:01:5C:14:66:63:48:19:B6:CD:74:AF:CE:7E:A2:F9:3C:5B:88
Authority key identifier: B1:94:F0:30:4E:ED:D3:63:C6:62:2F:D9:1C:59:B1:08:71:AA:30:44
Certificate issuer: /CN=b194f0304eedd363c6622fd91c59b10871aa3044
Certificate serial: 019FA184AEA3BC6266B514492F66CF368C9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sZTwME7t02PGYi_ZHFmxCHGqMEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft
Manifest number: 19D3
Signing time: Mon 27 Jul 2026 03:00:54 +0000
Manifest this update: Mon 27 Jul 2026 03:00:54 +0000
Manifest next update: Tue 28 Jul 2026 03:00:54 +0000
Files and hashes: 1: 1OKJSf7t7_lAiooOLlq2_b408jY.asa (hash: TVW+nVerXDEgPaaDUGrcKWYX2YALjhxpnf1JfzADSvU=)
2: B9HNNW3Bz7oID9G3-lfUfNqxyrY.roa (hash: tzCu3LyuSxup7J333i9m+mIRLj60qx1pJbahNRpyJGA=)
3: MUOyRWPN46PNKkdduP0g7nQfNok.roa (hash: fGl9qQgDH816kxRklhwGBTJ3WAbYJUjNKNT/W0cEqrc=)
4: sZTwME7t02PGYi_ZHFmxCHGqMEQ.crl (hash: 8NNkLFMfWh53lEgDubfvYo7orc2Nfn6LGf9kllQncXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sZTwME7t02PGYi_ZHFmxCHGqMEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 03:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:84:ae:a3:bc:62:66:b5:14:49:2f:66:cf:36:8c:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b194f0304eedd363c6622fd91c59b10871aa3044
Validity
Not Before: Jul 27 03:00:54 2026 GMT
Not After : Jul 28 03:00:54 2026 GMT
Subject: CN=6bf9015c1466634819b6cd74afce7ea2f93c5b88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d2:01:4f:a8:8b:74:81:17:74:d8:35:43:24:
25:c7:be:3e:eb:18:29:db:79:2d:56:8f:26:55:4d:
6a:d1:80:e9:47:00:f1:21:10:78:24:eb:33:f8:e7:
66:a5:c0:b0:e8:f6:c3:5a:0f:17:4f:7d:45:ae:2d:
8c:d3:f2:95:aa:63:8c:25:95:e7:55:0d:8d:4a:1f:
42:c2:ec:76:29:2f:1f:c5:09:0b:a2:1c:8f:bc:c5:
66:b7:68:fe:40:cb:88:6d:73:18:1b:7b:2b:60:b8:
c7:5a:b5:a4:0e:a7:8d:9f:3c:d9:a7:28:67:3b:db:
5a:92:a5:bc:4e:5f:fc:bf:dc:a1:06:c2:00:fb:fc:
c4:11:47:57:a0:cc:00:bf:da:05:cb:ad:7d:ee:8c:
ee:e7:64:4d:ef:bb:24:17:90:aa:4a:21:e5:b4:3e:
95:35:78:7c:0d:7c:79:be:28:b3:cc:3b:9f:ca:4b:
3a:57:3e:27:54:e8:ab:b7:e8:9f:91:fd:6b:3f:fa:
be:77:7c:28:07:9b:7d:4a:a3:32:38:05:02:53:9e:
2a:00:6e:1a:7b:90:a5:45:fc:b0:be:5c:42:f4:f4:
54:a5:1f:18:fc:b4:9d:2f:63:eb:57:b8:b3:ba:ec:
1c:65:6f:0c:ab:91:54:8c:05:c2:4a:f6:4d:3f:f0:
ea:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:F9:01:5C:14:66:63:48:19:B6:CD:74:AF:CE:7E:A2:F9:3C:5B:88
X509v3 Authority Key Identifier:
keyid:B1:94:F0:30:4E:ED:D3:63:C6:62:2F:D9:1C:59:B1:08:71:AA:30:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZTwME7t02PGYi_ZHFmxCHGqMEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:0c:a8:b2:9b:6f:1e:b2:14:d4:d1:a2:11:31:43:99:e5:5e:
b5:7c:19:82:76:22:05:ca:ae:c4:3b:04:58:d0:2c:0b:08:6c:
16:e0:88:e3:b9:1d:d0:18:cf:3a:3f:00:7d:34:33:e3:8f:0d:
31:55:e3:a9:27:52:e3:61:87:cd:8a:07:fd:45:99:3f:1f:ef:
5d:84:2c:77:49:63:ce:a1:1f:33:c6:65:94:f2:10:23:e9:66:
c2:43:75:94:45:99:4c:04:72:31:e6:28:61:96:de:26:4b:14:
dd:ca:13:f3:c1:0f:31:30:20:af:cd:58:4b:36:08:eb:47:6e:
00:fb:d3:90:23:8b:d7:23:a9:3c:b6:72:92:b9:2b:5a:eb:06:
63:dd:c4:fb:63:55:0b:74:9f:49:45:21:51:51:58:d2:dc:4c:
af:fa:bd:06:fd:82:bd:8b:aa:50:88:87:f8:dd:4c:48:64:2c:
ff:cc:fa:6e:21:23:1f:cd:60:bd:7f:c9:d6:4b:f9:fd:6c:3f:
bc:9d:c1:23:09:4a:7e:e3:fa:11:4b:cf:7a:72:8b:82:7f:aa:
64:46:78:41:64:82:80:93:86:cf:6b:c8:6f:fe:be:43:e0:b7:
ae:08:5e:b3:16:6f:44:97:b2:5a:59:f8:22:22:2c:41:a3:57:
92:e2:85:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 11:25:39 2026 by rpki-client