Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.mft
File: zEDZYkKwgu_ltPIliCCzBZOWGY0.mft (raw, json)
Hash identifier: gRH2IzA0D1onOWNK75JrgEX8LLSgUF8y1qjq3skk58Q=
Subject key identifier: 29:FF:8B:5B:1F:49:0C:30:FB:CC:DF:12:00:EE:21:D7:D2:F1:B2:98
Authority key identifier: CC:40:D9:62:42:B0:82:EF:E5:B4:F2:25:88:20:B3:05:93:96:19:8D
Certificate issuer: /CN=cc40d96242b082efe5b4f2258820b3059396198d
Certificate serial: 019F1152DD1DC341253ED86D2DA53F632F68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zEDZYkKwgu_ltPIliCCzBZOWGY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.mft
Manifest number: 1985
Signing time: Mon 29 Jun 2026 03:01:10 +0000
Manifest this update: Mon 29 Jun 2026 03:01:10 +0000
Manifest next update: Tue 30 Jun 2026 03:01:10 +0000
Files and hashes: 1: 98fyEBb-PIBiroCj51bzkd-V_i4.roa (hash: 2RN0v3XP/euGb82/ECdLfjWteqkCXDXBbJynvO0cBWE=)
2: y97Q2cCIA4p_jfA1RbOfelZQKOo.roa (hash: oRmoVnYM94QBjpHDaFRFV+BA4jZYdHdlmrs4oEppUqA=)
3: zEDZYkKwgu_ltPIliCCzBZOWGY0.crl (hash: mL7kpBPFeK7euVKh6nknNnETsLxPu4LX7GQVRb5J7ls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/zEDZYkKwgu_ltPIliCCzBZOWGY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:52:dd:1d:c3:41:25:3e:d8:6d:2d:a5:3f:63:2f:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc40d96242b082efe5b4f2258820b3059396198d
Validity
Not Before: Jun 29 03:01:10 2026 GMT
Not After : Jun 30 03:01:10 2026 GMT
Subject: CN=29ff8b5b1f490c30fbccdf1200ee21d7d2f1b298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:69:b0:b5:90:18:cc:dc:56:5b:76:84:77:b1:
41:46:66:27:15:9c:4d:92:4f:44:62:73:a0:03:bc:
37:d5:55:f4:e6:c9:e0:f8:4f:51:7a:25:a6:ef:fe:
03:12:79:96:01:b2:58:ce:64:f4:f7:91:69:65:94:
67:36:b8:a9:8a:32:d2:69:b7:f3:c0:43:57:e0:85:
47:cb:c1:6c:4a:27:41:e3:94:0e:ee:67:69:78:c4:
0d:d1:43:5f:6c:0e:a6:59:9d:01:5e:25:80:c3:5c:
80:31:38:93:6f:75:91:f4:99:77:c1:26:46:4e:5f:
3f:08:31:1c:21:81:cc:d4:fe:6b:f6:c1:ce:e5:73:
56:ef:30:4c:21:74:44:8a:b2:f4:ef:92:31:f2:0c:
1a:41:d1:fc:17:5f:3b:3a:91:7b:e9:32:e2:39:78:
a5:f5:bd:22:c6:c7:d5:9a:80:48:4d:b7:98:0a:01:
6a:e2:91:2b:16:e0:74:e3:7d:e6:0c:2f:dd:2d:7c:
89:86:22:a3:86:6a:ba:7c:61:38:a9:c2:bb:a4:6d:
bf:3b:f2:a5:c2:07:50:91:d4:b1:16:27:41:ac:6f:
7d:4a:88:0e:a8:72:6a:25:b7:a5:ae:48:97:51:d4:
a9:de:dc:31:92:74:56:ef:66:14:84:2f:04:5b:da:
c2:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:FF:8B:5B:1F:49:0C:30:FB:CC:DF:12:00:EE:21:D7:D2:F1:B2:98
X509v3 Authority Key Identifier:
keyid:CC:40:D9:62:42:B0:82:EF:E5:B4:F2:25:88:20:B3:05:93:96:19:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEDZYkKwgu_ltPIliCCzBZOWGY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:fe:66:df:50:0a:0a:41:bd:39:1c:9f:98:67:0e:83:c8:e5:
0b:49:15:6b:8d:d1:8d:0c:e1:10:b2:05:ef:75:2c:99:a3:d6:
67:6f:8f:12:36:d1:91:9d:e5:97:bb:6c:48:17:05:c6:3d:21:
df:8c:12:7b:76:1b:4b:d6:bf:19:53:0b:26:76:f2:2b:2d:a1:
ab:f3:a8:30:dc:49:84:54:d6:2d:11:a4:85:c1:f7:74:6e:ee:
09:29:cf:27:d1:be:ea:e0:96:e5:ac:9a:6a:6d:78:15:77:ce:
32:bd:57:2a:72:cc:4b:fb:7d:40:ca:fd:53:05:d0:51:29:ea:
62:0b:97:0a:cd:b5:fa:d9:46:04:41:5b:9d:1d:b7:be:eb:b3:
09:3e:ef:5c:c7:04:cc:1b:c7:9e:f4:78:10:45:a1:18:b7:cd:
69:2b:d2:57:79:23:3c:68:36:2d:99:d7:40:3d:dc:dd:96:cc:
4d:7d:89:ca:07:77:e6:67:a5:91:bf:72:ae:15:d3:50:57:d4:
34:4d:4f:76:9c:74:b4:fd:57:f0:5a:e8:60:4e:af:b3:d7:6d:
4a:b7:42:17:92:5f:97:14:d8:1b:15:d2:08:16:b7:1a:1e:e2:
1e:84:96:10:17:7a:c1:2a:e2:a7:de:28:42:b9:86:5d:98:45:
ae:1a:5a:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:35:38 2026 by rpki-client