Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/208623-268c-4bf6-b947-f459235d987b/1/zPae-KVIMMWntjeJH8PJCrEsung.mft
File: zPae-KVIMMWntjeJH8PJCrEsung.mft (raw, json)
Hash identifier: YKmiyVVUvImXq/RrSEQn8NuQDZznrw9tECw0/8qMxk4=
Subject key identifier: 87:3A:D5:11:64:6B:77:D7:2B:21:5C:E9:7B:FE:DA:3E:35:16:C5:EB
Authority key identifier: CC:F6:9E:F8:A5:48:30:C5:A7:B6:37:89:1F:C3:C9:0A:B1:2C:BA:78
Certificate issuer: /CN=ccf69ef8a54830c5a7b637891fc3c90ab12cba78
Certificate serial: 019FA1BBC52F23CA2CAD2AFB46D419CB5F8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zPae-KVIMMWntjeJH8PJCrEsung.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/208623-268c-4bf6-b947-f459235d987b/1/zPae-KVIMMWntjeJH8PJCrEsung.mft
Manifest number: 03FD
Signing time: Mon 27 Jul 2026 04:01:04 +0000
Manifest this update: Mon 27 Jul 2026 04:01:04 +0000
Manifest next update: Tue 28 Jul 2026 04:01:04 +0000
Files and hashes: 1: SMSEOT3Bw8BdVDxGYRzfDIZdEU0.roa (hash: Q+jvQC3Cp7YojEH0cGPSd1xy7T9E3c9+3+jfE13JjeY=)
2: g8Z517-jOmVF6Xu2Nxp8NTAxGx4.roa (hash: OXnUsbk5vh8et8vrHb0/ntkeJcO9A+ORppXS73LPvXg=)
3: zPae-KVIMMWntjeJH8PJCrEsung.crl (hash: fLZv+vzZyRaY+c/8bNF2eA7AiyO7b38D7wxG+wuEPZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/208623-268c-4bf6-b947-f459235d987b/1/zPae-KVIMMWntjeJH8PJCrEsung.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/208623-268c-4bf6-b947-f459235d987b/1/zPae-KVIMMWntjeJH8PJCrEsung.mft
rsync://rpki.ripe.net/repository/DEFAULT/zPae-KVIMMWntjeJH8PJCrEsung.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 04:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:bb:c5:2f:23:ca:2c:ad:2a:fb:46:d4:19:cb:5f:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccf69ef8a54830c5a7b637891fc3c90ab12cba78
Validity
Not Before: Jul 27 04:01:04 2026 GMT
Not After : Jul 28 04:01:04 2026 GMT
Subject: CN=873ad511646b77d72b215ce97bfeda3e3516c5eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fb:78:e6:80:a4:eb:07:5f:5e:c8:fd:6d:44:
41:7a:42:b7:c9:59:8a:8b:a6:20:12:24:ad:8c:f9:
79:37:ac:86:4d:00:1c:e6:51:ab:bb:6e:58:cc:84:
8f:4a:26:bd:aa:a3:9a:0c:d3:71:24:bc:3c:30:13:
9c:b5:b8:8e:d5:bb:70:5d:dd:8c:47:ed:96:db:dc:
03:a5:6b:0b:b4:98:53:d0:69:e5:29:f9:3f:49:d8:
1c:f8:28:7b:5f:f7:26:8d:ce:2e:b7:16:81:27:78:
f5:62:ab:ff:5b:09:47:db:f8:18:fd:b7:c6:98:79:
39:43:3a:11:41:0b:78:32:37:34:f3:b8:66:e6:3f:
fd:ee:a6:ed:20:5d:19:ed:e9:9e:bc:0d:00:aa:cb:
cf:36:18:15:d0:be:b3:64:52:df:44:6f:e3:60:3a:
26:e3:1f:84:3b:35:b0:4a:fe:51:c9:43:e9:11:36:
4e:6c:df:b0:7b:77:fe:6b:05:5f:58:d3:4c:1f:13:
8a:ef:bd:8a:05:b3:8e:0a:a2:81:79:9f:59:38:ee:
f6:62:a2:ed:b1:28:dc:01:13:f0:99:ca:16:58:15:
4d:ed:dd:f2:15:7a:28:b3:31:b2:42:56:5a:0e:81:
ec:18:46:cf:c8:f1:7a:15:ca:1a:58:20:47:f3:c9:
95:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:3A:D5:11:64:6B:77:D7:2B:21:5C:E9:7B:FE:DA:3E:35:16:C5:EB
X509v3 Authority Key Identifier:
keyid:CC:F6:9E:F8:A5:48:30:C5:A7:B6:37:89:1F:C3:C9:0A:B1:2C:BA:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPae-KVIMMWntjeJH8PJCrEsung.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/208623-268c-4bf6-b947-f459235d987b/1/zPae-KVIMMWntjeJH8PJCrEsung.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/208623-268c-4bf6-b947-f459235d987b/1/zPae-KVIMMWntjeJH8PJCrEsung.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:84:f4:19:6b:21:98:86:b4:6e:e7:f6:01:1c:2c:47:52:e0:
56:6f:5a:69:b6:34:da:bb:93:54:ae:96:4b:64:5a:05:92:d5:
5b:fc:5e:96:8e:c2:e4:9a:40:00:69:32:65:b8:36:9d:c6:19:
6b:53:9b:2e:f8:cc:6d:d1:e3:3f:17:eb:6d:87:60:ba:5f:fb:
ef:5b:bd:4e:06:f8:e8:97:95:64:aa:3a:d8:e8:f6:5f:a7:7b:
53:03:ea:75:3c:1e:e3:e7:90:53:bf:f9:98:56:40:00:ce:7c:
ff:fd:1c:76:ac:a0:a3:eb:d4:56:a8:e2:02:5c:c1:3a:9a:5d:
d2:46:8b:e7:12:31:ff:23:1a:7b:69:be:b0:f4:3a:85:3e:bb:
8a:3e:3c:64:ee:4c:e2:73:f4:5c:b5:fa:fe:d7:22:58:59:d4:
3e:83:dc:fe:26:27:41:78:2c:dd:84:4b:83:ae:57:98:09:d9:
b2:ce:dd:49:44:83:dd:7e:ce:8d:eb:bb:8f:99:6d:90:a2:22:
4c:17:31:e9:f7:48:5e:5d:76:71:65:58:66:88:1a:a1:06:48:
73:df:f3:a1:4c:f0:3b:67:47:9d:13:b6:54:57:bd:70:ac:3a:
2a:c8:62:77:5e:d7:1f:29:47:49:62:9c:d0:a7:01:6d:36:22:
4b:0f:e6:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 11:50:35 2026 by rpki-client