Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.mft
File: zBWcih5k_GT_ZmvZIZ3OF0NzyvI.mft (raw, json)
Hash identifier: 6QCYXn3NsBN40H2tgcieK2LFx4XDuxipr1kFOZnsvGo=
Subject key identifier: E3:F8:D3:BF:38:73:BE:BE:88:D0:A1:6F:52:CE:BE:03:4E:A1:C0:A0
Authority key identifier: CC:15:9C:8A:1E:64:FC:64:FF:66:6B:D9:21:9D:CE:17:43:73:CA:F2
Certificate issuer: /CN=cc159c8a1e64fc64ff666bd9219dce174373caf2
Certificate serial: 019F19B208315D7EA1AC99FB5E8DBEB0B097
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.mft
Manifest number: 1650
Signing time: Tue 30 Jun 2026 18:02:05 +0000
Manifest this update: Tue 30 Jun 2026 18:02:05 +0000
Manifest next update: Wed 01 Jul 2026 18:02:05 +0000
Files and hashes: 1: CuEyheF-29dttpD6VLLaExCFGAA.roa (hash: R6vjhi7yIbFl0joD76O7Kh49JYPbEdB6dMSlf59XV7s=)
2: tSwu_rs-_T3OD9Pp5HQg9a8f-F0.roa (hash: OkFsnGmy75UDy40lQIElr+ClgPv+0wuI2ecBN6Kx84o=)
3: zBWcih5k_GT_ZmvZIZ3OF0NzyvI.crl (hash: ZkCXEFFkbaVTIohCY5NmXiSQuo9bdql/pA/uDv5KKCs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 18:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:b2:08:31:5d:7e:a1:ac:99:fb:5e:8d:be:b0:b0:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc159c8a1e64fc64ff666bd9219dce174373caf2
Validity
Not Before: Jun 30 18:02:05 2026 GMT
Not After : Jul 1 18:02:05 2026 GMT
Subject: CN=e3f8d3bf3873bebe88d0a16f52cebe034ea1c0a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:94:16:c8:88:fc:64:c5:4a:d0:59:7b:cb:56:
74:65:16:52:63:0a:77:93:0b:53:99:8e:30:e0:00:
9d:a0:f0:61:04:63:29:78:ee:0e:c9:c4:2c:e5:79:
4b:bd:f8:ab:ef:a7:ea:c7:6b:c2:93:c9:b5:3f:5f:
7a:3f:f3:cb:4a:d6:4d:65:01:12:ae:1a:42:5e:b5:
4f:c2:20:2d:f1:6e:3f:a3:8f:33:47:53:2f:03:0b:
f2:3d:81:77:f6:22:73:07:24:20:7c:bc:e5:e4:96:
da:ae:bb:9f:bf:2c:ef:cb:e0:45:cd:82:df:17:53:
25:98:a7:e3:4b:3b:21:13:94:ee:62:4f:47:14:92:
6e:2b:f9:dc:3b:a7:ef:aa:a7:ef:40:05:c0:7f:dd:
a4:5a:79:8d:2b:44:c0:d4:98:30:16:d8:cf:2e:a5:
d6:72:f4:e4:74:79:eb:2a:7b:ba:83:f1:53:2f:0c:
57:13:95:bb:e5:b0:a1:a4:0c:35:27:43:02:ba:ec:
78:94:19:84:3c:4b:32:9f:a0:89:1a:95:32:48:83:
94:8f:15:a9:70:c2:b7:01:9c:c1:c0:c5:58:5c:08:
ce:cc:4d:b6:af:d0:d6:5a:e9:0e:ad:41:3e:50:e1:
97:24:8c:9e:58:ee:f1:7d:65:14:f0:88:63:c5:11:
2f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:F8:D3:BF:38:73:BE:BE:88:D0:A1:6F:52:CE:BE:03:4E:A1:C0:A0
X509v3 Authority Key Identifier:
keyid:CC:15:9C:8A:1E:64:FC:64:FF:66:6B:D9:21:9D:CE:17:43:73:CA:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:0b:d4:77:b4:57:bf:d8:07:01:13:82:19:e2:c3:e3:4b:64:
6a:6e:ea:45:29:2c:61:af:70:8f:e6:ef:c4:2a:f1:2c:df:7d:
1d:28:aa:b9:b9:3d:0a:37:7b:e0:ca:4b:42:40:a4:af:89:be:
90:7a:51:1b:98:6b:f0:3b:17:f7:40:b0:0c:a0:55:50:50:1d:
b1:ec:38:99:2e:24:9c:ef:77:38:e3:68:45:39:8f:1e:d2:77:
af:45:2b:c8:92:ff:da:d9:a6:c0:87:41:a0:4c:05:09:59:4e:
56:41:6e:41:2f:e3:81:9c:ef:18:86:f9:51:52:e2:96:d1:5f:
d8:43:c1:0e:f8:f9:ae:5a:9e:75:16:a5:f7:39:24:e3:0c:2d:
ef:c7:e3:e9:d1:14:7a:61:20:e1:65:33:90:34:b8:cf:17:23:
51:35:9e:9f:8f:f5:21:af:90:79:39:72:bf:57:3d:01:d6:93:
83:a5:03:c7:1b:68:49:ea:09:12:54:70:35:1c:63:60:6b:d5:
6b:dc:38:16:48:94:80:72:05:f3:90:b2:78:10:52:22:a0:30:
4a:8f:42:7d:61:4c:16:1b:6a:76:25:53:48:58:77:99:24:f5:
8f:38:59:38:43:63:d9:3a:90:d0:f7:fb:98:de:79:a6:60:67:
a4:b7:f2:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 03:19:42 2026 by rpki-client