Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/999647-1e7f-499b-9d48-f950327f88d3/1/zvUB0tBSGF1PZWkhjCi_NYWQAPw.mft
File: zvUB0tBSGF1PZWkhjCi_NYWQAPw.mft (raw, json)
Hash identifier: Fzmyh8K0appix9uZiHaNYOaPtIVcVejQaxI7bFBsRJs=
Subject key identifier: 35:0B:43:2C:F4:1C:5D:21:45:19:69:DA:C2:51:3B:81:E6:DB:F5:62
Authority key identifier: CE:F5:01:D2:D0:52:18:5D:4F:65:69:21:8C:28:BF:35:85:90:00:FC
Certificate issuer: /CN=cef501d2d052185d4f6569218c28bf35859000fc
Certificate serial: 019FD1288343BABB4EDDBBC9180C4992FFE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvUB0tBSGF1PZWkhjCi_NYWQAPw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/999647-1e7f-499b-9d48-f950327f88d3/1/zvUB0tBSGF1PZWkhjCi_NYWQAPw.mft
Manifest number: 0299
Signing time: Wed 05 Aug 2026 09:02:00 +0000
Manifest this update: Wed 05 Aug 2026 09:02:00 +0000
Manifest next update: Thu 06 Aug 2026 09:02:00 +0000
Files and hashes: 1: VtiYaN97FHtpr9nyOV9FFG85g5o.roa (hash: YRi8yVEk1+9sLs2A+db3vBfa8pzorD5js8IjbX492Nk=)
2: gIvmrtP4qhP-p_HNvQknynsugUc.roa (hash: T7F6BSJaNt+yN8P1agGWT43ZlvcgWoTw7wuq3mofmEI=)
3: zvUB0tBSGF1PZWkhjCi_NYWQAPw.crl (hash: AeJCYdxQcJFQDSER89Z6elXWW9XRUUQmM1Og72tddJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/999647-1e7f-499b-9d48-f950327f88d3/1/zvUB0tBSGF1PZWkhjCi_NYWQAPw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/999647-1e7f-499b-9d48-f950327f88d3/1/zvUB0tBSGF1PZWkhjCi_NYWQAPw.mft
rsync://rpki.ripe.net/repository/DEFAULT/zvUB0tBSGF1PZWkhjCi_NYWQAPw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Aug 2026 09:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d1:28:83:43:ba:bb:4e:dd:bb:c9:18:0c:49:92:ff:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cef501d2d052185d4f6569218c28bf35859000fc
Validity
Not Before: Aug 5 09:02:00 2026 GMT
Not After : Aug 6 09:02:00 2026 GMT
Subject: CN=350b432cf41c5d21451969dac2513b81e6dbf562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:0e:5a:05:cd:79:e9:e4:e0:b8:8d:a6:43:a1:
ef:9c:bc:60:9e:36:b5:14:8c:4b:b8:88:93:fa:d5:
6d:c6:9a:0d:95:6a:b6:70:76:5a:1c:f2:6e:b5:d1:
99:41:6d:a7:f2:66:77:7d:e2:15:4b:90:cb:ea:8d:
8c:72:89:a6:95:c8:38:b4:7e:6a:8f:dc:86:9c:d3:
8a:53:70:39:ee:f9:91:d5:31:f4:5b:5e:8e:4f:fd:
6e:01:dc:1d:81:21:21:9c:6d:51:b3:ac:96:ad:44:
20:d5:30:dc:e7:f2:50:9f:00:a6:fc:96:c6:f1:e4:
0c:0a:7d:5c:89:bf:e5:ae:94:a6:d1:ab:df:0b:f2:
45:1b:5a:72:3a:92:9d:7c:c9:e5:54:39:21:b0:73:
2e:2c:72:8e:f5:10:7b:36:ce:05:a7:e1:84:86:20:
ef:58:1d:b6:7b:83:9f:91:a6:50:87:c7:14:cf:e2:
7e:be:7b:77:dc:f2:dd:b6:9c:cf:1b:28:28:06:18:
85:11:15:9b:5e:3e:3b:5b:b5:71:ab:75:b8:f6:6b:
5b:aa:2c:d5:12:1a:d2:c5:20:54:f4:ed:4e:59:03:
4b:d4:9d:7a:9e:c7:9b:ab:95:9d:f3:63:42:ff:08:
9b:d2:d8:dc:33:3e:82:80:b2:d6:84:bc:ab:9f:8f:
1b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:0B:43:2C:F4:1C:5D:21:45:19:69:DA:C2:51:3B:81:E6:DB:F5:62
X509v3 Authority Key Identifier:
keyid:CE:F5:01:D2:D0:52:18:5D:4F:65:69:21:8C:28:BF:35:85:90:00:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvUB0tBSGF1PZWkhjCi_NYWQAPw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/999647-1e7f-499b-9d48-f950327f88d3/1/zvUB0tBSGF1PZWkhjCi_NYWQAPw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/999647-1e7f-499b-9d48-f950327f88d3/1/zvUB0tBSGF1PZWkhjCi_NYWQAPw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:b0:fe:6e:5c:89:07:ff:31:6b:db:7b:c0:56:74:80:2c:47:
52:25:35:0d:1f:83:64:17:1e:b7:58:f2:34:78:13:96:bc:85:
a3:be:6d:fb:b9:8c:9c:ec:6e:0e:07:ad:57:6a:5e:9b:90:78:
f8:18:66:5a:69:43:b8:e6:49:89:7a:35:dc:4d:ff:23:2c:de:
cd:d9:a0:0c:e5:09:65:78:85:1e:18:49:d4:4f:08:b3:8f:5b:
b6:f2:ee:f5:df:b9:4c:9b:c1:f4:79:43:b9:85:3f:47:06:a9:
3c:83:04:e1:58:0d:52:f6:d7:7d:9b:da:41:41:fc:9c:36:a0:
95:d2:5d:8d:d2:eb:a5:b0:4e:28:8e:3f:e4:84:15:01:27:8f:
a5:10:45:81:c2:d7:e2:80:73:20:84:b2:e7:bc:3b:37:b8:24:
25:33:ac:c2:be:25:a5:8b:fa:83:c1:3a:84:92:18:c7:00:7c:
73:2e:80:13:dc:28:55:08:7d:46:9d:cd:1f:34:23:4e:3d:63:
92:ed:e3:5c:65:fd:74:ec:3a:3d:08:48:b1:cd:40:7a:74:ac:
fe:88:96:4a:7d:7d:fb:d9:86:91:7d:d7:c6:73:fc:4b:b0:3c:
d5:73:39:0c:da:ca:2a:12:c2:64:4d:06:b5:f3:04:7e:e6:ed:
04:28:91:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 5 15:05:25 2026 by rpki-client