Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft
File: ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft (raw, json)
Hash identifier: Bkx3r3zC32s1+F9exqi8Av48iB2fSAvbuGYbVQCKPJk=
Subject key identifier: 7D:36:CE:49:39:3F:14:F3:DA:A1:B5:F4:A4:54:B0:74:1E:16:DC:17
Authority key identifier: 65:4D:96:67:2A:59:EC:38:95:FC:15:84:7A:CA:1B:29:DB:79:12:44
Certificate issuer: /CN=654d96672a59ec3895fc15847aca1b29db791244
Certificate serial: 019F6727B49CC8E8F8F280633B4E8174C019
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZU2WZypZ7DiV_BWEesobKdt5EkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft
Manifest number: 0933
Signing time: Wed 15 Jul 2026 19:01:23 +0000
Manifest this update: Wed 15 Jul 2026 19:01:23 +0000
Manifest next update: Thu 16 Jul 2026 19:01:23 +0000
Files and hashes: 1: Utc_slWR8yHDk290AryGYchTlYA.roa (hash: NUCfh9s0WjqwyOFskJUWEakWr/HjDtF3kDLbwsne7Ro=)
2: ZU2WZypZ7DiV_BWEesobKdt5EkQ.crl (hash: jcQBGMPxTNbn0k+ivn0TN458QSXDhw3P1AT5OKc5rcw=)
3: zynEh3pPdQY3KJQVgvhOsaYxciw.roa (hash: rOMrg3wVXzNicfVb9K/t1LGxhcGrIWejZTOsjk80vqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZU2WZypZ7DiV_BWEesobKdt5EkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 Jul 2026 19:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:67:27:b4:9c:c8:e8:f8:f2:80:63:3b:4e:81:74:c0:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=654d96672a59ec3895fc15847aca1b29db791244
Validity
Not Before: Jul 15 19:01:23 2026 GMT
Not After : Jul 16 19:01:23 2026 GMT
Subject: CN=7d36ce49393f14f3daa1b5f4a454b0741e16dc17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:2b:a9:71:76:f4:75:78:0a:ad:02:cf:c1:0c:
7d:5a:a2:e2:50:d0:f1:c2:d9:bc:28:9f:9a:cb:db:
f2:99:3f:68:db:1c:a2:1b:7b:c3:7e:c0:c6:7b:d5:
2a:44:56:39:f9:aa:53:22:63:19:88:74:94:1f:f3:
c0:ca:d0:79:88:5d:e0:83:f2:f1:4e:1d:a7:81:f6:
35:26:b2:0e:9b:f3:fb:0e:1c:e9:67:aa:a2:77:80:
4d:ac:31:33:43:06:85:0e:32:0e:f3:09:0f:0f:74:
03:cc:47:68:56:f9:28:d6:63:74:97:dd:c4:a3:d4:
b8:7c:98:a6:1a:f6:ad:31:e2:f5:0f:fa:5c:f3:12:
c1:f2:fc:f6:08:9f:aa:c4:4e:b6:ab:ca:09:43:95:
5b:6d:16:50:4e:fd:25:da:43:ac:93:15:f9:38:bd:
d8:05:c6:99:ac:02:95:29:78:e4:a1:bd:d5:2b:2a:
b9:af:c4:71:fe:79:5f:01:79:3c:01:db:8c:86:fc:
ff:30:17:ed:77:f7:6b:c9:d3:f7:36:2f:fb:c8:9d:
6f:94:d6:52:2c:33:e0:89:ed:2d:68:72:c7:0a:b3:
10:71:84:8f:d8:42:b2:59:d5:ce:5c:54:2c:ba:61:
09:a9:b9:16:0e:19:e2:af:81:46:b1:6d:fd:dd:19:
c5:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:36:CE:49:39:3F:14:F3:DA:A1:B5:F4:A4:54:B0:74:1E:16:DC:17
X509v3 Authority Key Identifier:
keyid:65:4D:96:67:2A:59:EC:38:95:FC:15:84:7A:CA:1B:29:DB:79:12:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZU2WZypZ7DiV_BWEesobKdt5EkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:87:69:9e:69:6f:76:17:41:33:56:9a:dc:2f:98:79:2b:c1:
b9:0e:1e:f7:ab:85:82:cc:74:3d:d0:85:b9:50:26:d3:e7:12:
7d:68:5b:36:91:62:7f:f5:e6:29:cb:5a:34:ef:1e:1f:51:74:
68:75:6e:37:1c:ad:99:7c:82:76:41:7c:04:ce:f0:b2:29:fe:
63:5e:18:be:8a:c8:2c:f3:7e:ab:fe:e8:94:8c:34:4d:e4:ef:
69:af:45:75:e0:62:48:92:e9:5f:59:fb:a8:9a:d8:30:f9:51:
4f:67:8f:ab:7a:c9:5c:82:0a:e2:5b:46:23:27:60:fe:33:78:
10:9c:a3:ce:8a:4a:ef:61:d7:82:cc:a3:8d:da:6b:78:9d:d8:
2f:97:81:bf:29:c4:d4:8a:bc:c6:88:61:1f:48:7b:c3:1d:4e:
ce:ed:1c:49:14:3f:af:9a:a6:4e:c3:11:db:aa:ce:b7:27:00:
60:57:bc:e1:79:9a:b8:e7:22:7e:9e:96:d6:ed:73:4a:41:09:
35:b1:a5:08:b6:a2:1c:9d:5e:86:74:39:3f:39:6c:2c:86:e4:
8b:e8:5e:48:ac:ac:33:d3:a0:91:a2:79:af:b5:6d:67:a5:68:
e8:d7:27:d2:05:3a:e4:7f:e5:0f:49:30:cb:12:50:33:c5:76:
ea:71:92:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 16 01:06:00 2026 by rpki-client