Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/c424d1-27fd-4f47-bb71-73d218a4903e/1/Zw7FMGg5PZDbYB7CleQpCFJeEMI.mft
File: Zw7FMGg5PZDbYB7CleQpCFJeEMI.mft (raw, json)
Hash identifier: xiVAEV45ybAIiTSfzO2m2TF2c607ckTyJTB8z1kYvlk=
Subject key identifier: B3:88:68:DE:E3:B1:63:A7:BC:23:79:BE:32:9E:91:C5:37:A9:B9:F0
Authority key identifier: 67:0E:C5:30:68:39:3D:90:DB:60:1E:C2:95:E4:29:08:52:5E:10:C2
Certificate issuer: /CN=670ec53068393d90db601ec295e42908525e10c2
Certificate serial: 019FA1BC0AD6ECB19F99C21A0D0573AA5776
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zw7FMGg5PZDbYB7CleQpCFJeEMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/c424d1-27fd-4f47-bb71-73d218a4903e/1/Zw7FMGg5PZDbYB7CleQpCFJeEMI.mft
Manifest number: 10B9
Signing time: Mon 27 Jul 2026 04:01:22 +0000
Manifest this update: Mon 27 Jul 2026 04:01:22 +0000
Manifest next update: Tue 28 Jul 2026 04:01:22 +0000
Files and hashes: 1: Nh6TGiZWo0EOxhMqHLoTd_RYjgw.roa (hash: jvTmWCCcSLAGtI/9GquGJ7vRIPsivGfTGeyKsvphVGk=)
2: Zw7FMGg5PZDbYB7CleQpCFJeEMI.crl (hash: 8AuduoE0KCMO1ZidtFZncP9mCXm3LOmpfeMmYQ0m/Gs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/c424d1-27fd-4f47-bb71-73d218a4903e/1/Zw7FMGg5PZDbYB7CleQpCFJeEMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/c424d1-27fd-4f47-bb71-73d218a4903e/1/Zw7FMGg5PZDbYB7CleQpCFJeEMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zw7FMGg5PZDbYB7CleQpCFJeEMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:bc:0a:d6:ec:b1:9f:99:c2:1a:0d:05:73:aa:57:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=670ec53068393d90db601ec295e42908525e10c2
Validity
Not Before: Jul 27 04:01:22 2026 GMT
Not After : Jul 28 04:01:22 2026 GMT
Subject: CN=b38868dee3b163a7bc2379be329e91c537a9b9f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6f:28:b9:48:b1:ab:59:d2:bd:df:cb:37:19:
b5:ff:ab:e8:c2:e2:8c:e0:6c:fd:1e:39:16:34:f0:
00:4c:a4:61:4d:a3:cf:22:ff:68:22:10:36:4a:d6:
48:c2:b2:ae:57:ec:9e:27:59:0d:3e:a9:71:44:0f:
3c:f9:db:7d:16:8c:64:fd:a7:82:1c:33:ba:30:af:
c8:e0:0a:0e:6d:60:47:6e:45:7a:00:3e:2f:8d:9a:
87:20:10:fa:6a:7c:cb:f4:80:c6:7f:92:d5:31:9c:
fe:5d:d5:ac:d2:97:9a:14:80:ae:f2:12:f1:30:eb:
08:2c:50:69:cf:02:85:ac:8f:7f:18:71:94:30:d6:
8a:c5:37:1c:20:30:cb:37:ce:93:7d:c3:6a:8e:45:
04:48:0f:1f:5f:0b:1b:59:16:eb:2c:fb:ab:7b:44:
fa:e6:e6:22:47:e6:a4:69:8c:d5:e7:ec:60:a1:59:
b2:a8:4e:4b:94:c1:fc:a2:f4:32:7d:7e:3a:28:0f:
c3:fb:6b:ae:ad:33:93:3d:9b:6f:23:c5:ea:7f:80:
46:e6:a8:60:5c:f0:ea:fc:6b:29:75:01:dd:91:7e:
31:1f:01:1b:39:1f:bc:ee:b2:7b:7d:ee:32:61:7d:
33:c1:fe:d3:15:30:fa:99:fe:99:95:9e:d9:e1:03:
61:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:88:68:DE:E3:B1:63:A7:BC:23:79:BE:32:9E:91:C5:37:A9:B9:F0
X509v3 Authority Key Identifier:
keyid:67:0E:C5:30:68:39:3D:90:DB:60:1E:C2:95:E4:29:08:52:5E:10:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zw7FMGg5PZDbYB7CleQpCFJeEMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/c424d1-27fd-4f47-bb71-73d218a4903e/1/Zw7FMGg5PZDbYB7CleQpCFJeEMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/c424d1-27fd-4f47-bb71-73d218a4903e/1/Zw7FMGg5PZDbYB7CleQpCFJeEMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:97:47:d6:d9:aa:01:ed:60:2f:a1:52:84:ad:e9:dc:d5:ca:
d6:04:b3:37:00:d3:28:18:aa:88:a2:7a:ea:b6:6a:6c:49:be:
ce:b7:5d:e9:81:4e:28:1f:06:26:fa:51:98:d4:fd:d7:15:1d:
dd:5a:9f:b2:fc:3a:11:31:6e:69:72:96:90:44:30:60:15:f0:
dc:7a:e1:8e:49:4d:be:e2:da:8f:82:33:69:26:37:91:28:2c:
d6:5d:47:d0:c9:25:9c:4a:4b:b7:1b:b1:c9:4d:5b:59:78:08:
23:c0:78:96:b6:1c:74:03:95:1a:49:19:52:7c:c7:ff:81:52:
15:44:9a:f9:aa:7c:84:1c:9f:ed:e6:97:88:68:f1:66:25:cc:
87:16:18:20:54:66:ae:0a:d7:2c:0d:1b:24:aa:88:4b:58:e2:
e3:cd:5e:73:6a:06:ee:c2:bc:3e:2f:60:fa:39:0b:8a:32:a7:
ad:fc:eb:72:84:fe:14:06:06:0b:6f:25:cb:fc:0d:6e:01:b0:
19:d8:e4:87:6f:bd:b0:5f:af:28:49:6f:81:7d:4e:2c:93:18:
51:d3:c1:57:72:81:03:ff:bc:3c:11:21:6c:21:58:01:fc:b5:
ba:a8:ac:93:ed:88:59:8c:20:5b:f8:cc:0e:c5:bd:2e:e2:bb:
b0:af:fa:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 05:46:31 2026 by rpki-client