Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft
File: ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft (raw, json)
Hash identifier: yrTXpco3dxEA806xgAjsYmBrCWh8w8EnBL5kYzxtfU4=
Subject key identifier: FB:C5:3C:7F:5C:D6:0E:84:84:33:0B:0D:A0:1B:0F:B1:49:66:25:D1
Authority key identifier: 64:39:5D:6A:1A:28:88:D9:C3:56:EE:D3:27:89:E6:27:D2:3D:51:6E
Certificate issuer: /CN=64395d6a1a2888d9c356eed32789e627d23d516e
Certificate serial: 019FA2608BB8EC2A23AB0BC273B070BA6970
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZDldahooiNnDVu7TJ4nmJ9I9UW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft
Manifest number: 19CF
Signing time: Mon 27 Jul 2026 07:01:03 +0000
Manifest this update: Mon 27 Jul 2026 07:01:03 +0000
Manifest next update: Tue 28 Jul 2026 07:01:03 +0000
Files and hashes: 1: ZDldahooiNnDVu7TJ4nmJ9I9UW4.crl (hash: NxltDylhXvlmP9XBrGXl90xF1IlLhesoknKv8szQDQg=)
2: ftUP8AhWyKSCfDygp2EvHTO8Boo.roa (hash: ewSYxaolal/Z6l87pd6PUdDa+voxm7gfdPqRbZdlcCk=)
3: h7hfu83GdfBNM7Zx2PElKBPYyGY.roa (hash: HsgzFT58UTHg7xZoI81l8ngXvJujr6TYdyM2zeg4nXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZDldahooiNnDVu7TJ4nmJ9I9UW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:60:8b:b8:ec:2a:23:ab:0b:c2:73:b0:70:ba:69:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64395d6a1a2888d9c356eed32789e627d23d516e
Validity
Not Before: Jul 27 07:01:03 2026 GMT
Not After : Jul 28 07:01:03 2026 GMT
Subject: CN=fbc53c7f5cd60e8484330b0da01b0fb1496625d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:91:e0:4f:ce:d2:11:18:d3:d7:c4:2b:03:0a:
25:71:93:ce:3e:ee:d7:d4:db:94:cc:64:19:0f:be:
5c:23:11:95:32:64:1e:df:06:47:5b:a5:31:85:1b:
b9:d9:f5:0d:a1:85:1a:9f:48:54:50:4d:ed:46:4c:
d5:ae:a3:b0:11:0c:ea:0c:e0:20:e9:f2:58:a9:eb:
b6:3c:52:8e:8d:de:95:b5:46:7b:88:f7:25:44:f2:
f5:06:2c:5b:62:a2:d9:de:2d:35:93:62:be:20:bc:
29:38:2c:3e:97:45:07:7b:86:44:69:c9:79:10:53:
8a:67:4a:67:f4:dd:0d:89:5c:34:2b:75:37:c9:9e:
b3:10:17:13:ce:3d:ff:c9:64:6f:a3:89:e8:23:3b:
b6:0a:cc:d6:bb:68:5d:f9:84:11:79:32:c2:8e:13:
44:80:e7:72:0d:08:e8:83:b5:e9:f6:c0:3a:4d:12:
85:54:5d:35:ea:a9:3a:61:91:e9:81:bd:0b:af:95:
68:c8:14:e9:dd:25:c7:67:b2:1e:9a:f5:73:01:c0:
0c:5b:52:7f:a4:b5:26:d6:a8:93:26:e2:1b:de:76:
8b:6c:18:75:09:64:a8:8a:8d:12:b3:3a:34:b8:c4:
9b:16:64:1e:30:5e:cc:98:04:1e:24:58:af:0e:15:
5d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:C5:3C:7F:5C:D6:0E:84:84:33:0B:0D:A0:1B:0F:B1:49:66:25:D1
X509v3 Authority Key Identifier:
keyid:64:39:5D:6A:1A:28:88:D9:C3:56:EE:D3:27:89:E6:27:D2:3D:51:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZDldahooiNnDVu7TJ4nmJ9I9UW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:f9:46:a3:a7:7f:d1:bc:48:0c:28:37:24:23:bd:19:15:eb:
79:86:da:0a:bc:d5:fc:46:38:c4:bb:da:29:bc:79:a1:8c:1b:
61:64:2b:00:6b:c1:43:86:40:e4:c8:a7:21:62:7f:a3:13:8b:
63:d9:69:db:a5:07:a6:b7:38:70:13:3e:17:f4:86:05:7c:fc:
77:d8:e6:d3:3f:86:27:ad:f1:4f:c1:d4:70:68:db:dc:cc:c8:
55:25:ea:47:db:14:56:d0:82:c3:b3:33:5d:d3:cd:2e:47:17:
11:ca:31:b4:95:67:b8:f1:35:bd:9e:ea:36:f8:6f:b2:a2:c0:
a7:b5:7f:0e:18:3e:93:7d:4f:28:e1:54:43:ee:85:bc:b3:e5:
20:53:f1:59:63:fb:3c:8e:2d:61:12:3c:07:91:67:ea:9a:2c:
e8:12:f6:5a:9e:38:c4:6f:22:a3:c3:84:30:f3:5c:75:23:53:
a2:92:40:9a:61:d5:c6:09:6a:13:a1:f4:9d:c1:af:e9:a9:7f:
30:0a:7a:4f:8b:4f:f8:98:1e:e6:e5:cf:f4:7d:95:92:e2:22:
7d:c6:d1:3a:db:27:b7:31:9d:79:07:1c:2d:0c:d6:9b:f1:68:
0a:d1:de:e8:f0:27:18:65:72:a4:fc:d2:91:a5:f6:9c:47:4a:
d6:73:82:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 08:19:46 2026 by rpki-client