Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.mft
File: Z-MMF5zUKoZBWDI0UBsY7_JRVUk.mft (raw, json)
Hash identifier: SDchOV6kLQmJ0Lgg7a5+18nPzEjzKVH9GF5QSjD/zSk=
Subject key identifier: A7:A4:21:1F:CE:9C:14:50:4D:80:38:4C:2A:0F:74:FD:CF:1F:AA:77
Authority key identifier: 67:E3:0C:17:9C:D4:2A:86:41:58:32:34:50:1B:18:EF:F2:51:55:49
Certificate issuer: /CN=67e30c179cd42a8641583234501b18eff2515549
Certificate serial: 019FCBCAF4FE852EF706A44DA76B5D803C9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.mft
Manifest number: 0967
Signing time: Tue 04 Aug 2026 08:01:43 +0000
Manifest this update: Tue 04 Aug 2026 08:01:43 +0000
Manifest next update: Wed 05 Aug 2026 08:01:43 +0000
Files and hashes: 1: Z-MMF5zUKoZBWDI0UBsY7_JRVUk.crl (hash: L0BngJSu9ARYleUd0Hhz6qfYLvsoVjougPpO+FG6r14=)
2: dI0KgXxJI7glvO_mfsDPmIQ5NkA.roa (hash: F9yFe51qdVbE9AuCXASZZ90BbvMiZC4wn/OYeZyyhEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Aug 2026 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cb:ca:f4:fe:85:2e:f7:06:a4:4d:a7:6b:5d:80:3c:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67e30c179cd42a8641583234501b18eff2515549
Validity
Not Before: Aug 4 08:01:43 2026 GMT
Not After : Aug 5 08:01:43 2026 GMT
Subject: CN=a7a4211fce9c14504d80384c2a0f74fdcf1faa77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:57:83:ad:c7:83:45:2e:58:fe:2d:4c:36:d7:
2c:f1:73:9d:b6:28:09:94:70:46:26:9d:3f:a6:e3:
ce:00:ce:5a:78:94:32:b0:8c:1b:c9:da:1a:34:07:
bb:19:9f:25:2a:bf:92:d7:94:2a:15:e3:88:90:56:
3a:6a:9f:70:29:90:a8:7d:3e:5a:40:2f:c0:e4:a1:
62:22:3f:46:11:35:e5:05:50:48:6d:a9:c4:0f:bc:
a4:ec:e9:25:83:02:9d:f0:67:39:bf:1d:74:eb:c6:
da:b1:74:81:48:e2:7d:2c:d4:2e:d0:4f:44:13:a9:
cc:cf:62:20:fb:70:ae:89:08:88:a9:f5:30:85:92:
eb:2c:1a:5b:fe:1f:a9:c1:72:38:10:83:a9:0e:9c:
e9:57:fa:b3:e3:46:3a:20:5c:ed:98:29:3d:f4:bd:
82:cb:a5:07:e4:a7:ad:75:83:b4:0a:34:4b:41:89:
58:e3:51:3b:38:5e:e0:12:c4:6d:9e:48:7c:57:ac:
30:c3:01:21:db:4f:24:03:7d:f5:a8:20:28:b2:55:
5f:07:2d:b0:09:71:90:9e:24:50:82:6d:3a:74:a9:
8b:08:25:ca:95:d2:f8:2b:1e:e7:e5:77:16:c8:72:
1e:38:8c:cd:4b:33:b8:f9:39:77:a7:52:1f:a1:71:
dd:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:A4:21:1F:CE:9C:14:50:4D:80:38:4C:2A:0F:74:FD:CF:1F:AA:77
X509v3 Authority Key Identifier:
keyid:67:E3:0C:17:9C:D4:2A:86:41:58:32:34:50:1B:18:EF:F2:51:55:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:c0:46:f2:db:b5:81:f5:93:07:05:a8:cb:b5:6d:fc:fb:a9:
80:7c:f8:94:a1:4a:ac:e5:77:4a:2b:90:72:ff:c5:64:a9:34:
96:5c:55:7f:74:9b:53:27:ba:2c:4b:c8:53:19:63:17:92:0d:
5a:50:ca:fa:3c:e5:0f:b2:82:5f:2c:1f:94:34:a5:e3:6e:82:
c2:e9:6d:74:7f:b6:0b:96:2c:72:43:ec:bf:35:ea:2f:4e:61:
e7:1a:55:37:d9:1c:56:ac:43:4c:ce:97:94:c9:59:39:a6:9f:
91:1c:63:3c:d7:92:e5:1c:de:83:2a:bf:d9:d2:b3:03:09:33:
42:06:1f:c7:0e:d4:76:a9:7f:d6:50:37:fe:4e:35:82:54:c7:
55:7a:70:7b:29:16:ba:6e:ee:aa:7c:ef:e5:7e:a6:7c:02:2c:
d1:f9:3c:fb:e9:fb:8d:54:b3:18:54:46:cd:e3:94:1a:d3:89:
4c:77:aa:0f:e5:6f:6e:14:34:71:19:a5:9f:e4:59:09:27:2b:
27:bd:6d:df:7e:9b:e8:01:52:f5:b8:eb:4f:b7:3e:34:1d:fa:
65:db:e7:6f:6f:58:00:1f:49:09:b2:b9:01:a8:e6:d1:0f:70:
c5:df:d5:c0:3a:17:b7:19:c2:e7:d4:81:84:22:19:7f:0a:e6:
27:5a:c6:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 13:57:54 2026 by rpki-client