Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.mft
File: rzrc42ZL8Of2iP9BIlUXNMTRR1Y.mft (raw, json)
Hash identifier: aSTsWiYGTvRmpD46+sIhYWlwRooQt6XOHQHBzKrdpT8=
Subject key identifier: B4:96:CA:4C:4B:28:45:CC:44:68:84:83:3C:45:46:4D:91:17:DD:C1
Authority key identifier: AF:3A:DC:E3:66:4B:F0:E7:F6:88:FF:41:22:55:17:34:C4:D1:47:56
Certificate issuer: /CN=af3adce3664bf0e7f688ff4122551734c4d14756
Certificate serial: 019F84FB08C038D07644C74296E9494F90FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.mft
Manifest number: 03F6
Signing time: Tue 21 Jul 2026 14:01:12 +0000
Manifest this update: Tue 21 Jul 2026 14:01:12 +0000
Manifest next update: Wed 22 Jul 2026 14:01:12 +0000
Files and hashes: 1: hJZnvXC0-UgTlF_AH76uiPfGV7c.asa (hash: p2cFMytFL5OC6zEHyn7h+6EUDN+jaMNyN9xu55GAgrQ=)
2: rzrc42ZL8Of2iP9BIlUXNMTRR1Y.crl (hash: RTTm05BcPJF7N8qO2ojPWt9sJ2TVyF+vdNNi493kTyo=)
3: ymjEj-AVl-jhoYqun7KK_jww1EY.roa (hash: Lravz6mXezUcFlH14r837C4PlhGpAXXPBKh9Ost0iM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:fb:08:c0:38:d0:76:44:c7:42:96:e9:49:4f:90:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af3adce3664bf0e7f688ff4122551734c4d14756
Validity
Not Before: Jul 21 14:01:12 2026 GMT
Not After : Jul 22 14:01:12 2026 GMT
Subject: CN=b496ca4c4b2845cc446884833c45464d9117ddc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:bb:35:ff:d7:b6:cd:e6:71:d2:61:81:b5:75:
b8:3d:6d:49:30:56:98:2f:18:0a:b7:ee:b6:6d:28:
56:b9:67:4d:93:0f:f9:9e:b9:8a:4d:bc:c0:b0:3a:
81:50:16:b0:72:04:61:55:da:91:43:95:52:35:28:
d4:f5:38:17:8e:67:45:03:0b:9f:50:2b:84:4b:ce:
d9:5d:8a:63:5c:ab:35:62:2c:e4:e4:67:8e:14:bc:
29:97:2f:ad:f2:57:ec:8a:b3:c1:22:b9:dd:a4:17:
73:13:c4:25:1c:64:42:24:35:62:4b:3c:a7:e1:73:
86:29:5c:aa:a6:b1:7d:b6:b4:d3:3d:5f:52:73:0b:
10:fc:2b:96:ea:6f:d4:7f:f6:83:de:6f:d7:91:9e:
40:73:ba:74:f8:2b:ec:7e:35:fe:e9:64:9f:59:89:
4e:7e:91:04:84:1c:82:21:f1:38:0c:0f:d9:09:97:
6f:90:d5:41:b2:6a:9a:08:ac:7f:a0:79:8c:2b:1b:
0f:14:c2:a9:45:3b:d5:09:c6:43:cf:fb:2d:47:26:
48:2c:b6:f5:2f:cb:f7:75:bd:69:b4:3e:9c:10:9f:
ed:67:ec:44:9f:2f:f4:b2:26:02:58:7c:f1:b8:a8:
af:7c:80:d5:5a:7f:7c:4d:3a:b9:f3:86:83:f2:7d:
3c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:96:CA:4C:4B:28:45:CC:44:68:84:83:3C:45:46:4D:91:17:DD:C1
X509v3 Authority Key Identifier:
keyid:AF:3A:DC:E3:66:4B:F0:E7:F6:88:FF:41:22:55:17:34:C4:D1:47:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:97:17:66:fe:d1:ee:f7:34:8c:54:2e:5f:ce:69:64:77:78:
30:3a:19:d8:ed:82:fe:b3:31:de:de:2c:a2:d8:9b:40:5f:e7:
59:9c:a3:90:7c:38:f3:4c:e3:cb:fe:7b:d6:40:6a:b4:cc:44:
8a:9d:4a:4e:90:80:e2:46:8b:74:9a:04:d7:e0:d5:64:fe:be:
39:d8:8b:51:c5:21:3e:22:dc:d0:ee:25:c3:d0:ab:66:59:fc:
7e:12:2a:f7:80:7d:01:fb:94:83:e6:83:83:ac:a2:fd:18:b9:
40:cf:0f:31:e6:46:14:b1:22:b3:23:b2:e5:ed:d6:4a:e0:98:
1d:0a:ec:c0:43:1e:fd:14:78:32:2e:e0:71:9d:a7:a9:5f:a6:
8b:50:91:67:ac:a7:3c:97:d3:18:3d:db:60:a2:91:ce:12:c0:
ae:0f:c4:82:16:e3:51:3a:5a:f6:13:f5:d3:f5:90:9d:39:77:
b8:7d:67:2a:39:84:fc:7c:e0:af:c5:f6:aa:b7:06:52:da:f9:
dc:66:27:f8:ae:26:28:15:e1:87:b5:7b:b7:b0:4b:bc:6a:2a:
d6:ce:64:86:5a:33:2a:c1:78:d4:ba:dd:7e:76:a2:79:4b:e8:
ea:bf:59:80:0f:58:d5:14:61:5e:ab:7b:d2:c6:a3:d8:52:bb:
c1:43:14:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:16:41 2026 by rpki-client