Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/zB58Rrgd2rJ0QnDFutmGr4bfT2A.mft
File: zB58Rrgd2rJ0QnDFutmGr4bfT2A.mft (raw, json)
Hash identifier: BghQXNWI7mx4wE5zgI4fSgv5sJHFp4B1Iw3tAh4vwM4=
Subject key identifier: AA:91:2B:63:5C:B3:C8:00:E2:6E:D1:ED:50:1F:E2:56:5C:E8:04:F8
Authority key identifier: CC:1E:7C:46:B8:1D:DA:B2:74:42:70:C5:BA:D9:86:AF:86:DF:4F:60
Certificate issuer: /CN=cc1e7c46b81ddab2744270c5bad986af86df4f60
Certificate serial: 01A020FA5DE2A199AE0357880E1714029BD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zB58Rrgd2rJ0QnDFutmGr4bfT2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/zB58Rrgd2rJ0QnDFutmGr4bfT2A.mft
Manifest number: 0E76
Signing time: Thu 20 Aug 2026 21:01:13 +0000
Manifest this update: Thu 20 Aug 2026 21:01:13 +0000
Manifest next update: Fri 21 Aug 2026 21:01:13 +0000
Files and hashes: 1: aE-igOYVXwkygfdsftmlck44E1U.roa (hash: Zm5SKhsISbz1FGue4q9TwJE5ZIQbj5Gs5h02565RFb0=)
2: tsSIuAhpfPkyoEWlotiPKzX6w8I.roa (hash: DsopP3SuV9qAYq1FNnHh/jlHBAIogzYm66PAey2rdvM=)
3: zB58Rrgd2rJ0QnDFutmGr4bfT2A.crl (hash: VJl6qqeBhIuVviPwCfhpMJX8V7SSeX+wRS7D+NvTnBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/zB58Rrgd2rJ0QnDFutmGr4bfT2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/zB58Rrgd2rJ0QnDFutmGr4bfT2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/zB58Rrgd2rJ0QnDFutmGr4bfT2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:20:fa:5d:e2:a1:99:ae:03:57:88:0e:17:14:02:9b:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc1e7c46b81ddab2744270c5bad986af86df4f60
Validity
Not Before: Aug 20 21:01:13 2026 GMT
Not After : Aug 21 21:01:13 2026 GMT
Subject: CN=aa912b635cb3c800e26ed1ed501fe2565ce804f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:08:b8:f9:c5:24:45:de:b7:c0:35:3c:c8:1d:
c0:3c:dd:e4:d0:9d:fa:2a:c8:00:b1:1f:ba:06:13:
3f:23:10:60:66:15:37:ff:a0:e2:f7:54:a0:65:f3:
ea:2c:83:6a:d1:55:80:ba:1d:a4:e6:25:53:f3:9b:
4c:e5:66:b3:2a:7c:55:13:64:91:d7:be:05:d0:c0:
bb:7d:20:e3:52:0b:ae:07:36:33:39:0d:4f:0e:d8:
38:b4:8d:c3:43:2a:4d:15:b1:97:a4:95:63:80:fe:
00:0c:47:13:d4:78:8e:7e:40:8f:37:67:b2:18:bc:
fc:b3:63:19:37:44:ea:a9:9e:fd:09:3b:2f:ab:fc:
5d:76:c9:c7:29:35:1c:04:b8:3e:8f:ee:2c:93:24:
e7:58:d2:0e:6a:36:f9:c3:01:be:7f:8e:69:55:37:
a5:79:a8:58:26:68:2a:9b:65:7e:3b:fc:bc:51:49:
e5:28:34:f7:ff:b2:dc:b4:72:16:ea:b7:38:6f:3f:
fc:15:3e:7b:c4:b7:86:a0:4f:55:72:92:ab:8b:95:
52:58:10:da:1f:54:b4:a8:30:f7:fb:9f:72:55:15:
7c:ef:be:4c:d7:ba:e4:c3:db:d3:76:66:a7:da:82:
0d:77:fb:33:64:44:99:9a:1d:17:0e:b6:71:87:2b:
5f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:91:2B:63:5C:B3:C8:00:E2:6E:D1:ED:50:1F:E2:56:5C:E8:04:F8
X509v3 Authority Key Identifier:
keyid:CC:1E:7C:46:B8:1D:DA:B2:74:42:70:C5:BA:D9:86:AF:86:DF:4F:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zB58Rrgd2rJ0QnDFutmGr4bfT2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/zB58Rrgd2rJ0QnDFutmGr4bfT2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/zB58Rrgd2rJ0QnDFutmGr4bfT2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:6d:4a:5f:6f:b0:8e:1a:d6:c6:79:59:d3:92:83:a1:7b:29:
29:f6:9b:e8:78:35:70:3a:3f:51:ab:1e:d2:cd:55:80:e5:96:
b9:38:50:03:26:66:45:17:e7:a2:e6:44:74:a8:45:93:61:41:
76:56:b4:21:da:b1:84:69:41:46:e7:60:aa:09:5f:70:5f:e2:
04:3c:8f:4b:2e:a2:dc:c0:03:99:c6:d7:67:b3:29:38:29:5a:
dc:88:57:c0:9c:65:1c:71:7f:c7:a4:6a:62:4e:fd:2a:55:36:
81:e3:9d:1f:5a:b3:30:88:21:1a:64:2f:e2:e7:e3:f5:d3:6d:
94:f9:b0:72:4a:65:04:12:2a:bb:93:26:77:43:df:50:d0:3a:
67:71:e1:05:3c:f1:c2:6f:75:d6:0a:90:3f:88:84:94:9e:6c:
d9:a2:67:f0:c3:42:f7:ce:41:89:81:26:f1:c3:ee:bd:f2:50:
39:af:46:ad:c8:dc:b6:52:00:fa:43:aa:69:4d:87:56:c8:81:
5f:03:db:b4:d1:6f:71:01:54:ff:bb:70:07:b9:2f:f9:c5:d5:
ee:28:1e:d7:84:97:03:15:15:bd:c2:23:79:c0:9d:e6:2f:d1:
00:cc:2e:7e:95:b5:c6:14:97:09:71:3a:b6:49:71:f4:aa:fe:
33:c9:7d:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:09:44 2026 by rpki-client