Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.mft
File: zJd-nVKvvEd5nTl1_O6KxRygz2o.mft (raw, json)
Hash identifier: l1laVAHao83xNuJXuW1fvk2T3r+uFwLvufz7NxL2h8w=
Subject key identifier: B4:13:7A:3F:EE:EF:B1:05:30:19:DD:69:98:57:7F:F4:FE:6B:5C:8C
Authority key identifier: CC:97:7E:9D:52:AF:BC:47:79:9D:39:75:FC:EE:8A:C5:1C:A0:CF:6A
Certificate issuer: /CN=cc977e9d52afbc47799d3975fcee8ac51ca0cf6a
Certificate serial: 019F416452D386DDE7E737C78D438331C277
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zJd-nVKvvEd5nTl1_O6KxRygz2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.mft
Manifest number: 1870
Signing time: Wed 08 Jul 2026 11:02:01 +0000
Manifest this update: Wed 08 Jul 2026 11:02:01 +0000
Manifest next update: Thu 09 Jul 2026 11:02:01 +0000
Files and hashes: 1: Sq1CvQy8o0B9tgh2Xu1eMwRJZtk.roa (hash: HdfFsuae+bs6Px2O/nXidzw9nHeIbmVY360ACfcO/uA=)
2: apKWJZAqjwjRd0dehHbbTa9ZY3A.roa (hash: nVaIovGi66UncedynfpwyGBTPpXsXon+jV7FMQbYQEg=)
3: zJd-nVKvvEd5nTl1_O6KxRygz2o.crl (hash: brSJ8VweN7ui27djnQ5BNwav5qSgadhQO5XmtolClp4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/zJd-nVKvvEd5nTl1_O6KxRygz2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 11:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:41:64:52:d3:86:dd:e7:e7:37:c7:8d:43:83:31:c2:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc977e9d52afbc47799d3975fcee8ac51ca0cf6a
Validity
Not Before: Jul 8 11:02:01 2026 GMT
Not After : Jul 9 11:02:01 2026 GMT
Subject: CN=b4137a3feeefb1053019dd6998577ff4fe6b5c8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:bb:bd:6b:8c:77:ec:f5:02:db:b1:bc:16:60:
26:9c:d8:b7:02:17:85:66:73:30:73:67:b4:dc:e0:
79:07:89:e2:56:65:92:f4:cb:52:43:09:cb:1a:4c:
08:12:4b:d0:79:0e:31:24:ff:4d:26:8d:73:27:95:
be:2f:84:af:b3:62:ad:be:fd:b5:b0:51:c3:47:a0:
e7:1c:f4:7d:52:a3:cc:23:df:6d:92:18:a2:c2:20:
6d:e9:55:4a:ab:f9:14:15:6c:96:33:2b:64:96:54:
19:3d:fe:f6:ad:67:fd:10:0b:b8:7b:1a:0e:d3:20:
46:c5:4a:96:da:84:3a:21:b6:31:6a:94:e8:15:a3:
4d:97:79:de:6f:9c:f0:67:3a:9c:58:37:3f:94:c4:
09:e5:0d:dc:43:c4:7c:76:9e:33:b5:5f:02:ff:28:
52:cd:b5:c7:e3:1e:84:14:09:3c:0b:25:99:1b:c5:
43:8c:1e:ef:2e:d0:19:2b:ae:fe:1f:3f:8e:35:b8:
73:15:47:18:9f:03:eb:92:3b:1c:58:7f:d0:fd:2d:
c5:19:32:b3:a9:d1:1f:b2:1a:d1:d4:ec:ac:88:10:
7d:83:9f:4e:36:ac:b5:c2:d2:05:e7:32:ae:fe:8a:
bd:f5:61:5a:3e:65:29:14:8d:94:b6:56:7c:48:f4:
a6:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:13:7A:3F:EE:EF:B1:05:30:19:DD:69:98:57:7F:F4:FE:6B:5C:8C
X509v3 Authority Key Identifier:
keyid:CC:97:7E:9D:52:AF:BC:47:79:9D:39:75:FC:EE:8A:C5:1C:A0:CF:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zJd-nVKvvEd5nTl1_O6KxRygz2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:ad:99:30:c3:f4:1c:32:00:7f:a2:16:db:3e:e6:f2:b5:08:
8e:b9:71:93:bd:27:20:0d:bf:82:01:fc:47:0e:54:7e:6f:cc:
fa:f8:fb:a8:60:3d:ee:9f:4a:6c:9e:96:ba:f2:ce:a5:37:3b:
a8:31:1a:42:06:de:b5:67:97:60:2a:3a:94:80:a7:05:ae:9e:
cb:28:2c:b5:04:9e:d2:64:22:cc:08:87:c9:ed:f0:85:6b:4a:
8f:ed:d3:d4:5d:e7:95:8d:fa:40:25:c6:a5:58:31:fb:84:7f:
83:e9:9f:82:78:3e:f2:60:68:ad:52:be:3d:2c:34:14:8f:5e:
6a:c1:15:2c:d9:ca:74:4d:e4:57:7b:81:5f:81:cf:c2:fc:11:
85:06:01:ea:69:b6:0b:ba:42:24:da:e9:41:86:50:3f:3b:3a:
ff:e1:29:35:c4:e1:87:2c:71:60:a1:04:7c:98:9e:d8:3d:d9:
ca:8e:a5:d7:f2:d6:c0:cf:aa:23:db:88:0d:73:24:c4:77:3e:
01:97:c4:9e:20:ed:d1:fb:31:d8:cf:de:c7:37:ba:0d:c8:9e:
75:9a:43:04:e3:48:97:a4:c9:f2:d8:fe:32:ae:0f:8e:d3:58:
84:34:bb:d3:5f:a5:01:4e:6c:d5:b5:e6:d2:7a:35:a1:79:3d:
b3:c3:98:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 18:31:32 2026 by rpki-client