Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/19fa4a-f41d-4baf-b9ea-ec9b75521297/1/Z-HO3-CCbw-Xdb36jpQlMAvenxM.mft
File: Z-HO3-CCbw-Xdb36jpQlMAvenxM.mft (raw, json)
Hash identifier: V/i1eRlzZhdMkZpmgNXYMspuVqOUKWovw+41e+Wcy9s=
Subject key identifier: 10:79:6B:7E:3A:0D:07:DF:B2:51:E9:70:50:AF:65:B1:F9:75:C0:3E
Authority key identifier: 67:E1:CE:DF:E0:82:6F:0F:97:75:BD:FA:8E:94:25:30:0B:DE:9F:13
Certificate issuer: /CN=67e1cedfe0826f0f9775bdfa8e9425300bde9f13
Certificate serial: 019FA0A85C981E90FA246FE21AEC3BE3F6D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z-HO3-CCbw-Xdb36jpQlMAvenxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/19fa4a-f41d-4baf-b9ea-ec9b75521297/1/Z-HO3-CCbw-Xdb36jpQlMAvenxM.mft
Manifest number: 0FE3
Signing time: Sun 26 Jul 2026 23:00:16 +0000
Manifest this update: Sun 26 Jul 2026 23:00:16 +0000
Manifest next update: Mon 27 Jul 2026 23:00:16 +0000
Files and hashes: 1: Nl9enAQ5fxiyA3bgN-Zg8I6GiQM.roa (hash: A7OWUX4yXC7G/EYKNd9MidD+EY701iJQatSHjQ+zADU=)
2: Z-HO3-CCbw-Xdb36jpQlMAvenxM.crl (hash: NWtyav5PxnYl1mj7ZT+BElsfcZy3T00iDGhWUjXXmNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/19fa4a-f41d-4baf-b9ea-ec9b75521297/1/Z-HO3-CCbw-Xdb36jpQlMAvenxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/19fa4a-f41d-4baf-b9ea-ec9b75521297/1/Z-HO3-CCbw-Xdb36jpQlMAvenxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z-HO3-CCbw-Xdb36jpQlMAvenxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:a8:5c:98:1e:90:fa:24:6f:e2:1a:ec:3b:e3:f6:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67e1cedfe0826f0f9775bdfa8e9425300bde9f13
Validity
Not Before: Jul 26 23:00:16 2026 GMT
Not After : Jul 27 23:00:16 2026 GMT
Subject: CN=10796b7e3a0d07dfb251e97050af65b1f975c03e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ec:d2:92:f3:45:57:77:59:1c:dd:5e:52:ca:
a9:e1:43:bb:88:cd:30:c1:63:6c:69:68:7e:1f:2e:
0a:b7:2b:16:91:45:85:5b:ea:14:76:22:08:7b:57:
24:e2:fa:a1:3a:f8:9e:5c:3e:42:6b:cd:0c:c4:c0:
5d:11:28:8f:cd:5f:18:13:d8:4c:f7:1a:39:ff:bd:
fd:9b:65:72:01:17:39:04:43:ea:2c:84:ce:03:86:
8a:22:f5:c0:8f:96:cb:da:d7:e3:8f:fd:5e:7e:bb:
7d:4d:54:2a:0d:6a:61:27:c0:22:33:97:71:cb:cf:
29:15:b1:4a:60:6c:60:57:58:70:7b:d2:b9:75:82:
ec:0b:dd:3b:fa:57:bc:e8:2c:72:81:56:9d:d2:9d:
18:3c:0f:bf:b7:b5:5a:29:cd:bb:7c:21:ef:c7:dd:
8b:f1:92:c6:ca:58:88:85:f4:39:9d:9e:ee:4e:1e:
a0:7c:4a:6e:1a:a4:e3:d8:a8:94:47:61:27:1f:84:
46:f2:9c:41:3c:19:2c:f1:18:8a:b4:f7:58:a9:e9:
45:f1:ab:ba:66:b9:57:0a:3c:95:d0:9d:58:fb:af:
39:b6:9f:6b:03:61:0a:00:6e:b1:66:80:9b:a8:2e:
f7:b2:a3:e8:88:bd:6c:4c:a2:19:65:30:ee:b3:ed:
da:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:79:6B:7E:3A:0D:07:DF:B2:51:E9:70:50:AF:65:B1:F9:75:C0:3E
X509v3 Authority Key Identifier:
keyid:67:E1:CE:DF:E0:82:6F:0F:97:75:BD:FA:8E:94:25:30:0B:DE:9F:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-HO3-CCbw-Xdb36jpQlMAvenxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/19fa4a-f41d-4baf-b9ea-ec9b75521297/1/Z-HO3-CCbw-Xdb36jpQlMAvenxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/19fa4a-f41d-4baf-b9ea-ec9b75521297/1/Z-HO3-CCbw-Xdb36jpQlMAvenxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:fd:bb:79:02:64:2e:88:46:e9:e6:d9:7d:01:d5:74:26:0e:
64:bd:b3:21:dc:28:bb:61:8f:ae:9e:f1:9d:07:45:57:f8:60:
4b:42:a1:f7:82:6b:91:f1:3d:c3:8f:4b:66:43:d3:16:08:f5:
7f:bb:98:1b:b4:e6:34:e2:d6:24:c0:d2:d4:f3:7f:f3:d1:a2:
bf:26:46:7c:b7:62:c9:74:16:ac:c3:88:6f:9f:16:83:b7:fc:
96:10:62:9b:78:6e:b7:0b:9a:47:00:4c:69:fc:7a:b1:19:5c:
57:2d:b6:75:e9:f1:d7:89:cf:2f:bb:29:28:cb:9b:e8:e4:37:
74:1e:e3:c7:35:5d:9d:57:1f:0a:a0:33:35:f5:9b:6f:eb:20:
a6:1e:2b:95:ce:92:b8:ef:02:c5:08:62:1a:59:5d:07:7b:0b:
a7:ac:44:0b:e2:43:19:8d:ed:35:e1:2b:44:d6:3d:da:3c:e2:
41:f6:24:01:09:e5:e0:b4:b5:84:b6:0f:63:84:37:37:38:ca:
35:7e:4f:e2:69:27:95:75:ab:fe:c0:92:53:1a:c9:c7:5d:b8:
68:2f:fb:58:52:3b:dd:22:62:39:5b:d5:18:2d:61:c4:25:54:
6b:a5:c8:25:bc:04:a8:5d:49:e5:95:53:37:5c:09:a7:60:5f:
e2:72:c2:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 06:48:59 2026 by rpki-client