Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/ce69f0-b6e1-4ba6-b9e0-4eb2695a868d/1/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.mft
File: zx1_8Bb_9dA5qWiaQ8k-hP5F28g.mft (raw, json)
Hash identifier: V7WXlMwbz0V9UhyD0Jhqiaei/t92ERpPzcm+jJ46tpg=
Subject key identifier: B2:6E:B7:9D:A6:CA:07:53:83:37:21:61:1E:7B:4F:87:00:45:92:39
Authority key identifier: CF:1D:7F:F0:16:FF:F5:D0:39:A9:68:9A:43:C9:3E:84:FE:45:DB:C8
Certificate issuer: /CN=cf1d7ff016fff5d039a9689a43c93e84fe45dbc8
Certificate serial: 019FA2CE04F6DCFE80F9A1C1D679A9D72677
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/ce69f0-b6e1-4ba6-b9e0-4eb2695a868d/1/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.mft
Manifest number: 173D
Signing time: Mon 27 Jul 2026 09:00:38 +0000
Manifest this update: Mon 27 Jul 2026 09:00:38 +0000
Manifest next update: Tue 28 Jul 2026 09:00:38 +0000
Files and hashes: 1: PAK2KvwTG30-jUzj7sYacw3L9ic.roa (hash: Lb1okikdPiNmYkmLldNkAdsJr1dPWTMaZXm3lhpA5to=)
2: zx1_8Bb_9dA5qWiaQ8k-hP5F28g.crl (hash: tIxVbgXf4tIix6r0mFbkYdeOvnWLXAMeviy/H4YPMTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/ce69f0-b6e1-4ba6-b9e0-4eb2695a868d/1/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/ce69f0-b6e1-4ba6-b9e0-4eb2695a868d/1/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.mft
rsync://rpki.ripe.net/repository/DEFAULT/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:ce:04:f6:dc:fe:80:f9:a1:c1:d6:79:a9:d7:26:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf1d7ff016fff5d039a9689a43c93e84fe45dbc8
Validity
Not Before: Jul 27 09:00:38 2026 GMT
Not After : Jul 28 09:00:38 2026 GMT
Subject: CN=b26eb79da6ca0753833721611e7b4f8700459239
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:49:50:8b:a8:bb:fd:6d:d4:50:ec:d2:bc:54:
51:cf:12:fe:f8:46:50:2e:6a:f8:8a:5b:92:77:84:
54:04:35:cc:ca:2a:cb:27:29:29:f6:c2:af:b6:78:
ea:16:39:3c:e2:5a:85:30:ed:01:05:cf:4e:1b:99:
82:07:8d:fe:f8:5e:91:23:95:6a:57:c4:94:10:31:
71:6a:e6:bd:4f:fd:d6:8a:c3:83:07:9c:f8:9e:4d:
a3:61:10:ac:c5:33:0e:cc:fb:90:10:8f:e5:96:67:
83:f0:a4:c3:6b:72:a9:1c:f0:7b:11:af:00:f8:c3:
06:fb:a2:3c:85:77:c6:a1:87:67:04:1d:a9:da:57:
bb:1b:3b:ed:5b:be:71:c6:3f:72:4b:5c:9d:0a:7d:
9b:ff:9f:1f:4e:0c:53:60:3b:c3:cd:00:60:2b:a9:
17:f3:29:e9:30:50:0c:93:a2:16:23:d7:cc:85:25:
34:44:a5:9c:e4:3a:77:ae:98:86:81:c7:d9:0b:ee:
64:6d:58:56:1c:16:21:5d:d1:e3:5a:52:f4:dd:b1:
21:64:05:8a:09:d8:9e:09:c9:36:51:cf:7c:20:eb:
a3:26:89:d5:1a:27:0d:d8:e1:84:d1:a5:6d:c0:56:
bf:5f:d8:c6:d5:e3:89:a3:18:9f:af:b2:6e:dc:f0:
a4:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:6E:B7:9D:A6:CA:07:53:83:37:21:61:1E:7B:4F:87:00:45:92:39
X509v3 Authority Key Identifier:
keyid:CF:1D:7F:F0:16:FF:F5:D0:39:A9:68:9A:43:C9:3E:84:FE:45:DB:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ce69f0-b6e1-4ba6-b9e0-4eb2695a868d/1/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ce69f0-b6e1-4ba6-b9e0-4eb2695a868d/1/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:e2:da:97:1a:f3:21:35:ed:be:05:4e:ca:78:60:6d:c1:aa:
70:dd:92:08:1b:ba:63:9c:86:8e:e1:2b:68:57:fb:10:aa:6a:
f7:f1:b2:1a:bd:36:82:2e:c5:57:d6:64:13:18:7b:20:9f:67:
3a:ee:fc:4c:b7:8b:a9:c2:ec:f7:e7:26:33:81:77:c1:f1:7b:
5b:be:6d:e2:6e:cc:51:77:a1:0c:46:93:75:ef:2c:8c:a4:ae:
69:ae:0f:18:ab:92:49:53:07:50:a1:65:e3:29:f2:9e:80:10:
2f:c3:da:c6:ee:1f:3a:20:59:7c:e6:57:4f:55:f8:94:fe:2a:
cc:ca:49:be:9e:2e:7b:4c:da:ae:cc:ad:02:dc:16:c3:8c:00:
b2:64:81:63:10:21:ba:48:b8:fb:c0:30:9f:f8:7e:72:05:49:
31:cb:db:b9:5a:1d:62:4e:ca:f8:d5:46:4e:09:a8:d1:29:c2:
6f:c6:c4:5c:86:df:5f:6d:ab:85:a1:ed:a0:e0:73:db:84:c5:
48:54:29:af:5b:6f:2d:3e:09:d2:48:3e:72:65:7d:f3:bf:b5:
54:5e:68:43:7d:39:a9:a1:de:22:4b:39:f8:54:d8:0a:c0:50:
bf:3f:ac:66:d4:56:1e:00:15:3c:55:ca:3f:7c:ca:f6:fc:79:
20:c8:79:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:52:50 2026 by rpki-client