Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/59e9da-9c2c-40cb-9a65-3d7965539bc7/1/zheeiaqi1Z7uS9aFj65bs_2nSWE.mft
File: zheeiaqi1Z7uS9aFj65bs_2nSWE.mft (raw, json)
Hash identifier: fyKUPFtQ3OGTYwuW8ryCeHrHP9tIRNJK1xir3/9OslY=
Subject key identifier: 3B:E3:C1:F7:F4:9E:EF:43:21:0A:55:1D:D8:92:B6:AC:73:E1:19:83
Authority key identifier: CE:17:9E:89:AA:A2:D5:9E:EE:4B:D6:85:8F:AE:5B:B3:FD:A7:49:61
Certificate issuer: /CN=ce179e89aaa2d59eee4bd6858fae5bb3fda74961
Certificate serial: 019FA1BB6E96A1EDDE1827ACEB8B8A662F56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zheeiaqi1Z7uS9aFj65bs_2nSWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/59e9da-9c2c-40cb-9a65-3d7965539bc7/1/zheeiaqi1Z7uS9aFj65bs_2nSWE.mft
Manifest number: 0975
Signing time: Mon 27 Jul 2026 04:00:43 +0000
Manifest this update: Mon 27 Jul 2026 04:00:43 +0000
Manifest next update: Tue 28 Jul 2026 04:00:43 +0000
Files and hashes: 1: zheeiaqi1Z7uS9aFj65bs_2nSWE.crl (hash: uuxyP1uofdOpRmmezWO7Jr0Inkqtcj8mjJWvxeIAfDI=)
2: zyPqIwgvyXC9lIUoG61mB6n09UU.roa (hash: vO04NStXDDqi7y92fry/H4qNWdoUZgsfcjDUmEnQqDM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/59e9da-9c2c-40cb-9a65-3d7965539bc7/1/zheeiaqi1Z7uS9aFj65bs_2nSWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/59e9da-9c2c-40cb-9a65-3d7965539bc7/1/zheeiaqi1Z7uS9aFj65bs_2nSWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zheeiaqi1Z7uS9aFj65bs_2nSWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 04:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:bb:6e:96:a1:ed:de:18:27:ac:eb:8b:8a:66:2f:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce179e89aaa2d59eee4bd6858fae5bb3fda74961
Validity
Not Before: Jul 27 04:00:43 2026 GMT
Not After : Jul 28 04:00:43 2026 GMT
Subject: CN=3be3c1f7f49eef43210a551dd892b6ac73e11983
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:75:19:44:b1:cc:02:41:1d:4e:57:6c:cf:c8:
11:bc:c9:46:91:34:80:a5:18:e9:38:f2:0d:57:59:
cc:f8:47:19:0a:2a:5c:0c:2f:d8:8b:82:8e:d1:50:
bc:d7:6c:50:1f:fb:91:1f:0d:a3:4c:63:d5:b6:bd:
6a:bb:7b:f2:bc:83:1e:96:14:e6:e2:ee:84:00:f0:
44:1e:02:82:37:05:81:09:16:17:18:88:7a:1a:14:
6e:38:b1:d6:9b:28:53:03:2e:e4:2f:f1:32:8f:fd:
fd:70:a1:d6:48:c2:fa:0a:7c:24:61:bd:6e:51:9f:
cb:7a:ec:f0:97:ed:2d:94:a8:8a:95:27:9e:88:ff:
5f:6d:bd:86:6c:9c:fd:64:23:f8:a4:21:c0:ae:9d:
42:3e:99:d3:ca:da:6f:ae:3d:15:5c:f2:ae:0c:96:
ab:9c:13:38:7e:2e:04:af:13:c9:7a:cc:46:a1:e7:
90:7a:9d:1e:c2:bc:60:44:6c:35:d8:c7:5c:7a:f2:
27:6a:c3:4c:b2:88:14:8f:84:28:55:c0:00:4a:c3:
36:b7:bc:00:c1:5c:f0:0f:48:eb:1e:8e:f5:a9:65:
8b:f2:ab:55:c5:7b:3c:95:26:a6:de:fd:04:66:35:
1a:71:12:3b:ae:55:d5:03:1c:b6:5d:4b:da:35:76:
05:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:E3:C1:F7:F4:9E:EF:43:21:0A:55:1D:D8:92:B6:AC:73:E1:19:83
X509v3 Authority Key Identifier:
keyid:CE:17:9E:89:AA:A2:D5:9E:EE:4B:D6:85:8F:AE:5B:B3:FD:A7:49:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zheeiaqi1Z7uS9aFj65bs_2nSWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/59e9da-9c2c-40cb-9a65-3d7965539bc7/1/zheeiaqi1Z7uS9aFj65bs_2nSWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/59e9da-9c2c-40cb-9a65-3d7965539bc7/1/zheeiaqi1Z7uS9aFj65bs_2nSWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:2b:1e:32:e3:bb:6d:18:57:44:a0:c8:81:99:a2:05:e4:32:
27:22:41:4d:1b:21:d9:e8:e6:21:33:ad:44:11:b8:17:b1:f5:
f6:49:1e:02:90:a9:cd:22:f2:a4:a8:a6:a4:0a:ff:36:20:4f:
16:8c:c5:01:fa:18:36:3a:d7:f8:79:70:d1:ff:3e:ee:f3:75:
9e:ca:46:48:17:55:52:6d:1d:2d:21:d7:95:c4:51:2b:09:08:
e1:b5:15:5f:59:2c:60:24:b9:5d:a9:33:67:e5:64:e6:64:be:
2c:9c:3c:29:fd:c1:dc:bb:87:31:67:a5:60:74:3d:72:03:b2:
df:e5:7c:d0:04:95:8f:af:7b:00:5b:53:a0:97:6e:6c:eb:21:
4b:7a:98:bd:15:92:62:0a:14:1e:0d:3a:6e:19:cc:b4:73:cd:
51:a8:30:b2:e0:cc:d0:95:97:dc:28:be:eb:b6:69:5a:dc:bd:
4e:0d:5e:cf:25:47:12:87:6e:db:d2:0a:cb:74:0e:5b:f6:a3:
16:d3:38:97:54:c4:27:83:40:b4:75:be:01:e3:bc:3e:e8:3f:
d7:a9:b2:4d:1a:02:a4:78:c0:67:81:8f:01:34:6b:d7:ec:4c:
b6:03:1f:94:09:48:c7:92:3a:53:fa:15:1e:cf:94:2d:41:63:
a0:9b:d8:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 09:16:11 2026 by rpki-client