Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d4dded-c510-477c-8fad-f616f0094b14/1/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.mft
File: zrWSk2Hh0N4WC4cfKb3VpAQMoRE.mft (raw, json)
Hash identifier: dqWE7d2IKTf6GEhSPH7oGQE8cnyZO2Kl2jX4yPFZPNQ=
Subject key identifier: 29:1E:A7:57:D2:C0:DD:B4:D0:95:14:D3:99:D4:0F:FC:59:BE:83:6E
Authority key identifier: CE:B5:92:93:61:E1:D0:DE:16:0B:87:1F:29:BD:D5:A4:04:0C:A1:11
Certificate issuer: /CN=ceb5929361e1d0de160b871f29bdd5a4040ca111
Certificate serial: 019FA0E0C6391E9768E29207BE913ECD4B49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d4dded-c510-477c-8fad-f616f0094b14/1/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.mft
Manifest number: 1961
Signing time: Mon 27 Jul 2026 00:01:53 +0000
Manifest this update: Mon 27 Jul 2026 00:01:53 +0000
Manifest next update: Tue 28 Jul 2026 00:01:53 +0000
Files and hashes: 1: dZjxO1t1y7iTrJ-KRqPRE_p1jMA.roa (hash: B1GSi5keg2Ocppx2D4kG/XL7mz409lb5KLKl79R0HCE=)
2: zrWSk2Hh0N4WC4cfKb3VpAQMoRE.crl (hash: JbHRfPpGic6cR49U6s/7iwCcasyLJvFHOADJef7MZjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/d4dded-c510-477c-8fad-f616f0094b14/1/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/d4dded-c510-477c-8fad-f616f0094b14/1/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:e0:c6:39:1e:97:68:e2:92:07:be:91:3e:cd:4b:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ceb5929361e1d0de160b871f29bdd5a4040ca111
Validity
Not Before: Jul 27 00:01:53 2026 GMT
Not After : Jul 28 00:01:53 2026 GMT
Subject: CN=291ea757d2c0ddb4d09514d399d40ffc59be836e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:2f:52:47:58:7c:bd:93:79:1b:c0:3c:dd:72:
ec:67:e3:26:48:ae:a3:db:41:ed:3b:00:84:a1:9c:
c8:57:6e:29:a2:51:3c:92:d7:e0:e9:fc:b1:bd:26:
55:8b:af:c2:67:38:20:dc:6f:19:5c:8c:6a:68:82:
54:14:b5:01:ed:28:86:52:94:33:30:18:1f:6e:1b:
19:0c:c7:0f:45:b6:50:bc:98:95:13:20:95:49:c6:
e3:7b:50:d5:b9:63:51:ed:08:8c:06:8b:b2:71:6b:
a8:3f:3f:2e:60:13:86:82:df:10:58:40:3e:fb:44:
5f:1b:14:e1:09:e8:1d:9f:b9:ae:15:2d:7b:1f:9e:
e2:15:3c:5e:5a:c9:33:50:05:f0:31:85:c9:28:32:
77:b2:1e:ae:97:9c:25:86:57:58:86:49:a4:d5:1f:
aa:1d:4c:94:df:3a:2c:d1:4d:9e:e3:09:12:1d:63:
89:74:3a:3c:d7:bd:c8:72:7a:11:6f:7e:39:4d:93:
a4:78:3e:6a:3f:aa:57:67:37:a9:a1:3c:a8:e5:d3:
10:92:1a:01:9e:16:f3:94:d4:62:15:13:cc:51:23:
f9:c1:53:eb:af:e6:3f:55:49:dd:f1:1f:41:94:dd:
62:f0:7c:fb:28:bd:eb:7c:b7:b4:2c:10:13:1d:1f:
c4:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:1E:A7:57:D2:C0:DD:B4:D0:95:14:D3:99:D4:0F:FC:59:BE:83:6E
X509v3 Authority Key Identifier:
keyid:CE:B5:92:93:61:E1:D0:DE:16:0B:87:1F:29:BD:D5:A4:04:0C:A1:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d4dded-c510-477c-8fad-f616f0094b14/1/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d4dded-c510-477c-8fad-f616f0094b14/1/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:8a:7f:7b:bb:97:1f:df:07:fa:36:ff:e3:4b:37:6e:60:85:
0d:b6:38:5b:a2:28:2f:02:19:cf:9f:2f:7b:ed:c9:c9:ee:63:
0e:3b:41:d5:51:85:8c:4f:aa:98:8e:cd:43:b6:00:57:35:10:
e3:5f:18:a6:23:ac:45:5f:bc:0a:eb:e6:ef:ed:47:3b:03:c5:
56:9f:6d:c6:fa:e2:05:0e:8e:95:1f:5a:df:8a:b8:a6:d5:c1:
e8:cf:3d:bd:2a:0e:2a:c6:83:4f:23:f9:52:80:bd:df:86:ea:
e0:60:dd:13:88:cd:b2:e9:b2:d4:f2:5f:a3:df:08:09:db:87:
04:81:6c:32:e2:d9:3a:6d:13:c3:fa:27:19:f8:7f:1b:17:b0:
73:ac:34:00:37:96:a0:2a:2f:44:ec:89:70:f6:24:49:92:1e:
a2:a4:3b:dd:96:21:af:ad:fd:b4:8d:b1:34:85:f4:c9:e1:69:
b1:9c:f9:40:26:8d:28:3d:cd:60:29:b9:2d:0d:ed:7d:3c:25:
73:d1:91:61:0b:92:07:d9:a0:df:51:14:ed:76:c4:96:db:05:
8c:82:dc:3f:08:59:cc:06:d9:3d:9e:50:47:93:af:34:61:b6:
cb:48:f4:3e:8c:5c:75:61:5b:e6:f2:29:c6:a0:6a:c1:99:a1:
40:34:a6:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 08:30:27 2026 by rpki-client