Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/zahD6BKxbexgu3CYykEzEX24R00.mft
File: zahD6BKxbexgu3CYykEzEX24R00.mft (raw, json)
Hash identifier: xb0SSZSRt357a/3oQttsp0tU9KbKY4RJ/AZHr8tSlXk=
Subject key identifier: 4F:43:9B:2D:AF:E3:43:A3:35:89:C5:CA:E1:66:C0:AF:93:CE:09:02
Authority key identifier: CD:A8:43:E8:12:B1:6D:EC:60:BB:70:98:CA:41:33:11:7D:B8:47:4D
Certificate issuer: /CN=cda843e812b16dec60bb7098ca4133117db8474d
Certificate serial: 019F83434A3711D45A20EACB8E368468731F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zahD6BKxbexgu3CYykEzEX24R00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/zahD6BKxbexgu3CYykEzEX24R00.mft
Manifest number: 19C0
Signing time: Tue 21 Jul 2026 06:00:52 +0000
Manifest this update: Tue 21 Jul 2026 06:00:52 +0000
Manifest next update: Wed 22 Jul 2026 06:00:52 +0000
Files and hashes: 1: xAJAqKl5Srwo2ARzZhLG6xPoMEY.roa (hash: zXin4xfG6I9ng2fyOSNQGYSR3toHXgB+MkkZOtI6MnY=)
2: zahD6BKxbexgu3CYykEzEX24R00.crl (hash: yETXYVRoPQh6ljAfAcWa1pmzlpYmyH+zbaLXw+fmXH4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/zahD6BKxbexgu3CYykEzEX24R00.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/zahD6BKxbexgu3CYykEzEX24R00.mft
rsync://rpki.ripe.net/repository/DEFAULT/zahD6BKxbexgu3CYykEzEX24R00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 06:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:83:43:4a:37:11:d4:5a:20:ea:cb:8e:36:84:68:73:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cda843e812b16dec60bb7098ca4133117db8474d
Validity
Not Before: Jul 21 06:00:52 2026 GMT
Not After : Jul 22 06:00:52 2026 GMT
Subject: CN=4f439b2dafe343a33589c5cae166c0af93ce0902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ae:63:31:eb:6b:aa:ee:c7:61:6a:92:71:f6:
f4:18:98:33:55:06:14:08:68:a1:93:60:4a:c0:de:
a9:9c:82:f3:81:95:78:63:75:a2:26:d3:30:9a:21:
f4:11:4b:de:11:1f:cf:c6:4e:51:ef:16:40:59:68:
03:1b:b3:10:94:f2:86:b7:2f:50:42:3e:22:d7:20:
e2:b0:6c:c0:4a:28:b7:03:8a:aa:2c:9f:a7:db:8c:
48:d4:00:82:d1:4c:55:fc:02:85:4d:79:89:85:6c:
c1:47:1f:08:3c:c4:65:55:ca:94:99:7c:dc:c4:d2:
08:d1:a2:d8:a3:db:0b:e3:7f:b8:2f:00:90:2f:f4:
9a:fa:f2:6d:2d:d4:b2:d1:29:27:d6:8c:89:ec:0a:
ff:ac:72:56:17:94:2f:15:a4:54:91:33:3c:82:4c:
24:22:42:b2:30:96:e7:b2:83:6b:21:b8:36:65:a5:
6e:c3:b2:2a:5c:b0:0e:8b:d1:1d:d2:ef:09:b5:ec:
3a:33:68:24:91:d6:27:64:a3:2a:78:58:74:ce:58:
db:3d:7c:71:69:b0:a0:f1:5a:72:e7:e5:77:37:46:
28:67:0d:28:d9:ac:8b:6e:76:0e:ad:93:02:87:14:
6e:13:8a:18:00:4a:57:0c:de:67:c8:e1:a8:6c:f8:
c7:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:43:9B:2D:AF:E3:43:A3:35:89:C5:CA:E1:66:C0:AF:93:CE:09:02
X509v3 Authority Key Identifier:
keyid:CD:A8:43:E8:12:B1:6D:EC:60:BB:70:98:CA:41:33:11:7D:B8:47:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zahD6BKxbexgu3CYykEzEX24R00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/zahD6BKxbexgu3CYykEzEX24R00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/zahD6BKxbexgu3CYykEzEX24R00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:51:de:cf:ba:e7:f9:11:79:e1:e4:21:04:e7:16:9e:79:61:
ec:44:e6:cb:2e:1b:49:ab:b2:58:cf:53:00:3c:26:5f:b7:24:
f3:42:cd:74:c6:6d:97:22:46:7b:81:fb:77:6f:22:07:4f:35:
6b:74:2c:db:ee:69:77:28:bf:c4:58:27:87:3f:54:74:fb:ae:
aa:86:4a:78:64:f6:d0:3d:97:da:31:54:8a:6c:fd:dd:2a:b3:
05:c8:c4:ae:ae:7e:8d:e1:b1:d2:b9:59:38:3d:66:8b:f9:d1:
91:6f:21:30:d2:53:90:4e:af:e8:fe:94:7f:cd:0e:5b:74:aa:
02:6d:75:6c:fc:31:38:73:14:79:09:90:e8:51:7e:26:45:b6:
6c:ae:d8:50:ff:a7:b7:ea:37:82:92:12:3b:d8:30:dc:c3:7e:
5b:92:5e:14:71:9b:79:08:a3:d6:e7:88:f1:20:5b:3f:8c:e4:
2a:50:97:40:19:72:90:ef:2b:f6:6f:3d:cb:2f:21:30:37:46:
62:6a:c1:86:52:22:94:c7:cd:86:98:8e:33:a6:24:54:bf:5b:
34:21:09:fd:1b:6b:7b:10:e8:97:f8:74:18:8a:52:fe:02:86:
b5:5a:ce:df:14:2c:dc:4a:fe:4e:7a:f8:6d:ba:11:4c:df:60:
07:80:58:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 10:04:44 2026 by rpki-client