Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/7370c4-e4cd-4db3-9b86-e359ae0a6838/1/Zs01lGjIuqmPw8ou8tkFg6aeABY.mft
File: Zs01lGjIuqmPw8ou8tkFg6aeABY.mft (raw, json)
Hash identifier: hENjg6Ae7EESubzKmRHPlP/KVykvtJvbw8fbHPN/8rE=
Subject key identifier: 4E:49:7E:0D:E1:38:B4:4A:B4:BE:4A:CE:51:8F:C6:D1:28:EF:63:A5
Authority key identifier: 66:CD:35:94:68:C8:BA:A9:8F:C3:CA:2E:F2:D9:05:83:A6:9E:00:16
Certificate issuer: /CN=66cd359468c8baa98fc3ca2ef2d90583a69e0016
Certificate serial: 019FA3E0D9E6E00B82C16753380B48D2DC46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zs01lGjIuqmPw8ou8tkFg6aeABY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/7370c4-e4cd-4db3-9b86-e359ae0a6838/1/Zs01lGjIuqmPw8ou8tkFg6aeABY.mft
Manifest number: 0253
Signing time: Mon 27 Jul 2026 14:00:49 +0000
Manifest this update: Mon 27 Jul 2026 14:00:49 +0000
Manifest next update: Tue 28 Jul 2026 14:00:49 +0000
Files and hashes: 1: Zs01lGjIuqmPw8ou8tkFg6aeABY.crl (hash: rRaeCKfhqz13jkbyS3MA5kYdJwqDn55jm2JkfYH2MG0=)
2: rqJldLN-S-H8DV7_BXB9c6fFRDg.roa (hash: 8ct3OMMYCUQEAyF1g7DbkXYuvpJT+cTHy+wjPP6qYuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/7370c4-e4cd-4db3-9b86-e359ae0a6838/1/Zs01lGjIuqmPw8ou8tkFg6aeABY.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/7370c4-e4cd-4db3-9b86-e359ae0a6838/1/Zs01lGjIuqmPw8ou8tkFg6aeABY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zs01lGjIuqmPw8ou8tkFg6aeABY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 13:48:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:e0:d9:e6:e0:0b:82:c1:67:53:38:0b:48:d2:dc:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66cd359468c8baa98fc3ca2ef2d90583a69e0016
Validity
Not Before: Jul 27 14:00:49 2026 GMT
Not After : Jul 28 14:00:49 2026 GMT
Subject: CN=4e497e0de138b44ab4be4ace518fc6d128ef63a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:fe:92:1f:ee:b9:9b:09:d1:90:e7:e3:4d:36:
6d:84:03:c4:7e:75:39:47:f3:e0:a5:f0:17:75:9a:
b8:fe:9c:8b:a0:06:2f:d6:61:7c:43:80:97:79:b1:
49:98:8c:35:40:ff:72:36:6a:21:93:5b:c9:ca:33:
d9:5b:a0:c8:30:93:27:2f:c0:af:62:ac:f4:35:b8:
3f:9d:85:1f:5d:0a:46:81:9a:89:c7:54:e9:97:f7:
66:62:12:8c:bd:2c:22:5a:25:bb:96:cc:48:ed:54:
f6:9d:d8:10:6e:68:8b:49:a4:6c:0f:2a:fb:14:a3:
e0:d4:f7:60:9e:69:d0:4d:9f:df:f7:86:d5:66:2e:
82:26:94:f3:ad:aa:81:f9:20:48:96:9a:72:36:93:
c9:e8:f5:55:6a:ae:5c:b4:f4:ab:3f:09:d3:04:d8:
c7:e2:39:d7:c7:75:a0:0c:47:89:d3:38:9f:9c:85:
86:a5:98:a1:f8:3e:ed:a9:b7:82:2c:51:41:b1:0c:
f7:3f:72:fa:a9:f4:fc:43:43:b7:d0:1a:a3:57:8f:
27:81:ef:03:5b:34:d9:70:a7:5c:32:ef:ee:60:96:
cf:5a:da:a0:92:a0:c0:0e:66:28:99:9c:dd:64:0e:
b3:78:5e:c8:38:fa:05:d4:00:c6:86:10:fc:2f:94:
0e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:49:7E:0D:E1:38:B4:4A:B4:BE:4A:CE:51:8F:C6:D1:28:EF:63:A5
X509v3 Authority Key Identifier:
keyid:66:CD:35:94:68:C8:BA:A9:8F:C3:CA:2E:F2:D9:05:83:A6:9E:00:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zs01lGjIuqmPw8ou8tkFg6aeABY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/7370c4-e4cd-4db3-9b86-e359ae0a6838/1/Zs01lGjIuqmPw8ou8tkFg6aeABY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/7370c4-e4cd-4db3-9b86-e359ae0a6838/1/Zs01lGjIuqmPw8ou8tkFg6aeABY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:ce:71:6b:4f:8d:f7:e4:6d:17:7c:30:a6:6e:db:16:d5:cc:
7a:66:8b:13:60:2e:64:70:da:e7:18:c4:b5:34:21:77:82:2b:
6e:a5:9d:40:83:9b:f8:cf:69:22:f8:24:17:47:dc:19:f2:12:
13:77:ec:e2:55:0d:5b:96:d2:7e:e5:6e:65:0f:b7:c9:f6:d5:
9e:4e:ab:e3:c0:81:6a:87:ad:0c:e6:3d:d3:e6:b8:36:77:21:
6d:44:88:9d:0d:f3:fd:0e:13:1b:65:0b:de:c6:f8:d7:49:08:
77:fc:e1:bf:50:cf:12:53:69:ad:0e:6f:eb:9c:40:0b:6d:e5:
22:4f:93:aa:ba:db:97:3c:f7:99:53:07:40:44:ee:b4:ad:8d:
98:83:19:6e:ea:e8:9a:b4:c1:21:fa:13:5c:6f:9a:58:fd:e5:
e4:90:ed:72:51:02:c4:45:37:5e:3a:49:84:6e:46:40:58:76:
19:55:f1:7e:5e:29:e0:24:3e:a4:2d:24:9d:ec:ed:d9:8c:85:
89:01:c4:47:5b:d5:41:91:8f:bc:9e:fa:80:60:df:e0:02:14:
cc:b9:81:51:07:4c:a4:42:f7:75:bc:5d:a4:01:b7:0a:92:cf:
cd:4e:dc:23:66:8f:ca:b9:09:38:c0:81:43:05:e9:fc:a0:d5:
5f:ea:d9:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 16:43:38 2026 by rpki-client