Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.mft
File: ZRDCbzpPrHAKx7DjSQuPoXXwitg.mft (raw, json)
Hash identifier: 9hVdtQPR3XK7d9NfsZNMkd59NmX6rORdDMPZkX/C0hI=
Subject key identifier: 8B:28:EB:D7:13:1B:B0:54:3F:F1:92:7F:33:F4:DE:48:C3:6C:15:36
Authority key identifier: 65:10:C2:6F:3A:4F:AC:70:0A:C7:B0:E3:49:0B:8F:A1:75:F0:8A:D8
Certificate issuer: /CN=6510c26f3a4fac700ac7b0e3490b8fa175f08ad8
Certificate serial: 019FA485541CA78DCB0BD68F796CB54B7FA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZRDCbzpPrHAKx7DjSQuPoXXwitg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.mft
Manifest number: 19D5
Signing time: Mon 27 Jul 2026 17:00:28 +0000
Manifest this update: Mon 27 Jul 2026 17:00:28 +0000
Manifest next update: Tue 28 Jul 2026 17:00:28 +0000
Files and hashes: 1: ZRDCbzpPrHAKx7DjSQuPoXXwitg.crl (hash: qzjrv0PYRg86cznwJIGYG8RPB0Sy/140cD7HRQnUtfY=)
2: _6LzupxXASaoZ39swk7m_G9Thtg.roa (hash: xvwqWAO3JPwTFbg3Vo/ega941AhbF1rkG80Zci2/F8E=)
3: fjLqd8nX00J9fe0_2aJ2e9FwgbY.asa (hash: hHImG8Y2r794WFIY//Kga9NCrwxYUH3dsvX+/DPBAtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZRDCbzpPrHAKx7DjSQuPoXXwitg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 17:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a4:85:54:1c:a7:8d:cb:0b:d6:8f:79:6c:b5:4b:7f:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6510c26f3a4fac700ac7b0e3490b8fa175f08ad8
Validity
Not Before: Jul 27 17:00:28 2026 GMT
Not After : Jul 28 17:00:28 2026 GMT
Subject: CN=8b28ebd7131bb0543ff1927f33f4de48c36c1536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:20:c9:3c:fd:81:91:cb:dd:1e:85:fc:e6:32:
05:70:ef:1d:6d:7b:09:f8:b7:bf:53:e5:b1:d7:67:
26:8e:98:65:d0:3f:de:0b:ac:27:94:c3:70:b8:3a:
10:5c:50:78:ac:6d:48:fe:b4:f7:c9:d3:cf:6e:93:
27:2d:48:ca:e1:08:77:f4:01:53:34:7a:80:cb:0c:
49:7a:3f:14:9b:aa:64:1e:e3:5d:9f:c4:76:56:82:
e7:88:f6:e3:2b:9b:8d:87:5f:5a:bb:69:e6:40:c9:
6b:70:65:50:45:66:95:6a:a1:38:70:00:ca:49:fa:
3d:c7:18:98:97:c7:52:54:e5:e7:84:12:4c:08:f1:
be:1e:fd:31:e7:3d:7d:38:19:4f:9a:c9:28:5d:0b:
0c:fc:16:b1:63:a7:f3:70:f3:62:4d:6f:fa:66:d9:
7c:b3:77:45:fa:a9:4f:a7:2d:cc:dd:59:0d:a2:1c:
85:89:21:ba:30:ca:ea:b4:44:64:e2:f3:ce:7e:2f:
f4:38:03:ba:b2:d2:0c:1f:e1:07:08:f0:a2:ae:7c:
ac:29:94:e0:db:28:ed:ad:de:2e:13:85:8a:7d:d8:
f3:b1:3b:b6:ea:87:ee:63:3c:0a:cb:ed:76:26:91:
00:87:da:1b:fe:1d:c2:f6:cd:a8:db:9e:5c:7e:01:
14:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:28:EB:D7:13:1B:B0:54:3F:F1:92:7F:33:F4:DE:48:C3:6C:15:36
X509v3 Authority Key Identifier:
keyid:65:10:C2:6F:3A:4F:AC:70:0A:C7:B0:E3:49:0B:8F:A1:75:F0:8A:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRDCbzpPrHAKx7DjSQuPoXXwitg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:63:02:32:ef:2e:6b:f5:d6:a0:e6:2d:12:d9:42:e1:19:13:
04:36:10:e5:09:b4:04:b7:18:1e:6d:0f:02:86:d5:25:c5:6a:
65:b6:d5:70:ea:18:aa:b0:8a:27:d6:54:1b:e2:21:c7:e3:7b:
0f:34:95:3d:32:c8:76:cd:c0:55:71:99:a2:27:0c:60:22:7b:
a9:99:85:6e:21:21:ab:de:df:45:04:80:bc:11:05:66:3c:4d:
4c:7a:92:28:ee:d9:70:c7:3f:df:05:4a:5f:04:45:8f:f1:1a:
8a:e8:a8:7c:43:ac:35:8b:d8:c9:cc:7e:cf:b1:1a:ca:08:9b:
a5:89:5f:87:e3:70:13:cb:87:3a:48:e6:d8:d8:8d:38:ae:ca:
c9:06:97:06:44:0e:bd:fe:4f:70:51:c9:79:1e:15:43:57:2a:
99:29:6c:bd:05:3d:38:f1:f0:76:be:83:b2:a3:04:d8:20:8f:
12:bc:80:9f:33:6c:cc:e3:ff:28:51:76:18:9f:36:7f:0a:78:
76:a9:9e:cb:f0:c2:32:de:9d:08:b6:82:9f:ef:a6:89:a7:2f:
b8:50:a8:b1:dd:44:cc:38:26:54:38:ae:b9:47:c6:08:e2:7b:
bd:48:c3:47:ca:f9:4a:b1:cf:71:97:80:e7:d5:32:78:9f:13:
ca:00:f4:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 03:14:44 2026 by rpki-client