Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.mft
File: zX-HiUkBBwl7IM-m49RZ8TYnS6Q.mft (raw, json)
Hash identifier: yZL9XpNPVI0RXhq3m7DearxLO0qz2LuPEk6YPFz/4Pw=
Subject key identifier: 2F:82:F5:76:C4:E0:02:2F:5B:BC:81:AC:8E:E4:73:5E:D4:68:EB:AE
Authority key identifier: CD:7F:87:89:49:01:07:09:7B:20:CF:A6:E3:D4:59:F1:36:27:4B:A4
Certificate issuer: /CN=cd7f8789490107097b20cfa6e3d459f136274ba4
Certificate serial: 019FAF08F861FB5AF56062DC1D92CE8B8C3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.mft
Manifest number: 19D7
Signing time: Wed 29 Jul 2026 18:00:28 +0000
Manifest this update: Wed 29 Jul 2026 18:00:28 +0000
Manifest next update: Thu 30 Jul 2026 18:00:28 +0000
Files and hashes: 1: 0Nhd8HDX6sg6Ga0qO0frLY4tJgo.roa (hash: SiLri2/+BqWzCqbvv2/gkd1DlEwX13aVYQvZZuSlTWA=)
2: ujsDjvc8O_UMPKpybYL3m05dxkQ.roa (hash: l2pAahFC+BLRkn5FZkCd0AQgZA8lDYBz+/BDHXLPl0o=)
3: zX-HiUkBBwl7IM-m49RZ8TYnS6Q.crl (hash: BLnqSQ1S3Qrc8gxzoyrLpLpXZKgjDFrZj6lFpAVj/8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 18:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:af:08:f8:61:fb:5a:f5:60:62:dc:1d:92:ce:8b:8c:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd7f8789490107097b20cfa6e3d459f136274ba4
Validity
Not Before: Jul 29 18:00:28 2026 GMT
Not After : Jul 30 18:00:28 2026 GMT
Subject: CN=2f82f576c4e0022f5bbc81ac8ee4735ed468ebae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:90:8d:6a:ed:8c:dc:27:8a:76:1b:af:3f:00:
4b:44:3e:ad:f9:9b:5d:82:67:09:e9:6d:e6:af:79:
37:0b:ca:3b:4d:ed:b5:0e:9f:38:3e:d7:2a:17:12:
d2:cf:45:59:96:44:fe:f4:8a:e5:dc:d4:a1:ba:1d:
93:83:93:53:12:56:c0:d2:97:0a:a4:29:93:9f:25:
37:a2:86:93:7d:68:a8:af:4e:29:52:77:02:b5:b5:
76:a1:28:9f:24:5d:d2:8c:ed:76:ca:0a:b5:63:d2:
f5:93:8e:ec:8b:45:75:42:a8:4a:09:ce:4d:70:4d:
b6:31:71:9b:f4:27:59:94:84:5d:3d:43:d9:31:79:
aa:35:0a:6f:ca:ac:52:aa:b9:dc:e6:02:69:9b:fe:
84:ac:86:51:52:ba:bc:38:0b:b6:67:66:f5:07:2f:
c4:19:7b:36:ca:2a:5d:dc:57:d5:67:c0:d2:46:3c:
3c:ff:00:f8:ba:a0:5f:10:bb:92:cb:1c:c7:cf:da:
2b:99:7e:5a:40:3c:35:d5:c5:63:05:0f:43:02:16:
7d:44:ae:78:24:2f:b6:3f:39:12:e1:46:de:6e:65:
35:6c:9d:0f:cf:80:91:8c:9e:a7:d2:ff:f0:ca:69:
c4:6c:6f:3f:7d:d9:e9:7e:81:24:a6:8e:e0:2c:80:
20:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:82:F5:76:C4:E0:02:2F:5B:BC:81:AC:8E:E4:73:5E:D4:68:EB:AE
X509v3 Authority Key Identifier:
keyid:CD:7F:87:89:49:01:07:09:7B:20:CF:A6:E3:D4:59:F1:36:27:4B:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:03:d3:99:57:90:12:69:4e:93:28:19:de:51:4c:4c:e6:63:
ed:32:72:6d:f8:c6:cc:5d:ff:77:fb:ba:7e:0a:3f:e8:1e:c3:
15:8d:95:81:eb:f3:0b:56:c8:d8:61:37:99:dd:1f:40:6d:33:
b3:cc:26:e1:b8:01:76:e7:82:ec:2c:c0:66:9c:a0:7c:d5:69:
15:58:5a:34:bc:c9:28:17:45:77:87:0c:a8:35:f9:60:ab:3d:
17:4d:03:53:a1:29:f8:f0:e4:a7:d5:2a:6a:a4:03:16:cd:f9:
62:06:41:d6:d8:9d:2f:ed:82:28:bd:c2:53:39:b3:40:f6:47:
4f:7d:94:8c:d3:51:82:40:3b:3a:58:ad:46:95:6f:92:48:18:
bc:c8:54:7a:bb:ef:96:a4:a4:24:e4:06:af:31:0b:b7:56:ec:
4d:3a:fd:96:3b:94:74:a1:3d:be:c7:f0:e4:e0:0c:d3:c8:fd:
cb:3c:4d:76:a0:db:af:dc:7d:b6:c5:97:85:12:38:4f:9a:18:
ac:52:58:df:e3:f0:d4:7d:a4:c9:e2:f7:6f:f8:12:0e:ed:77:
7f:5d:fc:f0:b4:c7:5b:3f:64:3f:f5:39:28:35:d9:54:44:9f:
21:d5:5b:d7:2b:0c:1a:2e:28:3d:1a:8b:c5:ce:96:f9:0d:f8:
4a:bc:c8:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 30 03:47:58 2026 by rpki-client