Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/8e23e5-db28-45ed-b67f-2add5e797c75/1/zdpbTOlfoL32BUFp53rvyCZd28Q.mft
File: zdpbTOlfoL32BUFp53rvyCZd28Q.mft (raw, json)
Hash identifier: cMMwAf/U5aL3ywLdd/yJLPeDq/A8LVgT4QQVePPXq/M=
Subject key identifier: 37:EC:1E:77:B3:2D:37:66:7F:65:AA:2E:2C:34:AC:21:99:77:DF:6B
Authority key identifier: CD:DA:5B:4C:E9:5F:A0:BD:F6:05:41:69:E7:7A:EF:C8:26:5D:DB:C4
Certificate issuer: /CN=cdda5b4ce95fa0bdf6054169e77aefc8265ddbc4
Certificate serial: 01A00326D93F3781D26B621F82A3AD66826A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zdpbTOlfoL32BUFp53rvyCZd28Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/8e23e5-db28-45ed-b67f-2add5e797c75/1/zdpbTOlfoL32BUFp53rvyCZd28Q.mft
Manifest number: 1994
Signing time: Sat 15 Aug 2026 02:01:12 +0000
Manifest this update: Sat 15 Aug 2026 02:01:12 +0000
Manifest next update: Sun 16 Aug 2026 02:01:12 +0000
Files and hashes: 1: _8ZFO9ocBpb_Ph-40yN6ACd4c-s.roa (hash: nv3UD4Bh28t9KPR31Vxom/hj2bFKQ3slvDA/BYva5PI=)
2: zdpbTOlfoL32BUFp53rvyCZd28Q.crl (hash: JAQa6/4AGoyld/ckg2cgX/jKJ3ebJLCLVu8Znh+h5ko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/8e23e5-db28-45ed-b67f-2add5e797c75/1/zdpbTOlfoL32BUFp53rvyCZd28Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/8e23e5-db28-45ed-b67f-2add5e797c75/1/zdpbTOlfoL32BUFp53rvyCZd28Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/zdpbTOlfoL32BUFp53rvyCZd28Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:03:26:d9:3f:37:81:d2:6b:62:1f:82:a3:ad:66:82:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdda5b4ce95fa0bdf6054169e77aefc8265ddbc4
Validity
Not Before: Aug 15 02:01:12 2026 GMT
Not After : Aug 16 02:01:12 2026 GMT
Subject: CN=37ec1e77b32d37667f65aa2e2c34ac219977df6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:eb:95:cf:f9:90:2e:96:bc:75:14:ee:25:1e:
77:83:86:6e:1f:7a:82:47:36:1e:0e:b7:74:4f:37:
4d:4c:e3:0c:3a:99:a5:0c:b2:4d:bd:4e:c4:b1:f9:
d8:9a:a1:0e:bc:16:f9:75:a7:34:3d:8a:de:3e:21:
0f:c7:55:52:0e:bd:f1:88:d5:1f:69:db:f8:0f:31:
25:8c:90:f8:16:30:86:09:07:dc:58:37:7b:73:56:
b0:f1:ef:c1:dc:ef:80:75:a0:12:57:1b:fe:d1:f2:
de:b1:d3:99:24:7a:d5:b0:63:01:55:98:3a:28:f6:
81:a7:67:1d:b3:c9:9e:d3:36:dd:e1:3c:56:8d:96:
37:13:98:1e:a2:97:08:e5:d5:ba:01:0c:54:05:33:
67:59:92:e7:9d:a5:7d:9f:87:c0:db:32:6a:44:f2:
24:0b:c3:05:90:a6:da:08:0a:47:1d:6a:cc:a5:bd:
66:c1:64:7d:1c:6d:d2:21:e3:2e:6b:35:2a:61:94:
a8:ad:f8:e3:46:eb:3e:a3:12:ae:e4:77:0b:9e:fc:
7e:5b:c2:2f:de:7d:de:23:ec:ea:a7:0f:3f:a5:be:
1a:a1:05:75:4d:1b:91:d1:e9:dc:4c:07:8f:a0:af:
8a:5b:a5:3a:e7:e8:20:4f:10:98:91:c5:65:24:00:
6f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:EC:1E:77:B3:2D:37:66:7F:65:AA:2E:2C:34:AC:21:99:77:DF:6B
X509v3 Authority Key Identifier:
keyid:CD:DA:5B:4C:E9:5F:A0:BD:F6:05:41:69:E7:7A:EF:C8:26:5D:DB:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zdpbTOlfoL32BUFp53rvyCZd28Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/8e23e5-db28-45ed-b67f-2add5e797c75/1/zdpbTOlfoL32BUFp53rvyCZd28Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/8e23e5-db28-45ed-b67f-2add5e797c75/1/zdpbTOlfoL32BUFp53rvyCZd28Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:b1:c2:6c:2d:ee:b8:e5:21:1d:73:35:4d:dd:50:36:90:3d:
ad:4e:7f:25:39:5e:80:21:22:aa:9a:43:13:24:70:ee:a7:91:
49:d6:e8:04:22:88:a6:cb:76:63:8f:08:bb:6d:b2:61:8f:b1:
48:86:ca:d0:ec:30:21:8f:fa:3d:9e:cd:8c:23:d6:a9:df:7a:
de:a6:eb:a9:4c:5b:ef:1f:99:b1:c5:ee:5f:3b:8f:4d:dd:48:
9e:01:3d:82:aa:11:15:a8:8e:ff:4f:60:1c:8b:61:a1:5c:1c:
77:cf:6d:dc:78:f1:22:86:1f:3d:7c:fd:8b:4a:b2:a2:96:71:
2e:b8:f2:ef:c4:cb:cf:27:e7:48:a3:39:22:09:30:7c:5a:47:
d3:79:93:f8:ab:29:17:21:23:85:69:be:a2:2f:7a:ee:af:fa:
7f:0a:9d:1e:99:ca:b0:6e:3c:13:f2:4c:9c:06:2d:61:74:2b:
28:e7:f2:89:9d:ff:9f:9f:65:dd:15:ab:90:eb:d8:37:97:b2:
6e:87:8c:65:eb:fd:e3:b2:89:bf:19:f6:9b:51:44:28:a0:9e:
21:ff:19:7d:95:57:88:50:5b:3a:d4:a5:65:c8:f6:1c:99:0a:
2e:eb:38:4e:f2:fa:81:07:2d:a2:17:c5:60:d1:1b:34:7c:af:
09:59:d1:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:54:11 2026 by rpki-client