Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/8d6f1a-d334-418f-b726-6f5d8a74a0e4/1/ZKemzVg4FNOTvuJjW1RVdMx1Ygw.mft
File: ZKemzVg4FNOTvuJjW1RVdMx1Ygw.mft (raw, json)
Hash identifier: 3nYruIEbySMJQ3y1t8uNvos5hR72qmna56lSybXbFoU=
Subject key identifier: 60:93:79:00:D9:ED:95:ED:19:E0:E1:6B:35:68:7B:49:03:70:09:6E
Authority key identifier: 64:A7:A6:CD:58:38:14:D3:93:BE:E2:63:5B:54:55:74:CC:75:62:0C
Certificate issuer: /CN=64a7a6cd583814d393bee2635b545574cc75620c
Certificate serial: 019F859FB8268CB3D80506747C8923F2C9D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZKemzVg4FNOTvuJjW1RVdMx1Ygw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/8d6f1a-d334-418f-b726-6f5d8a74a0e4/1/ZKemzVg4FNOTvuJjW1RVdMx1Ygw.mft
Manifest number: 15F3
Signing time: Tue 21 Jul 2026 17:01:04 +0000
Manifest this update: Tue 21 Jul 2026 17:01:04 +0000
Manifest next update: Wed 22 Jul 2026 17:01:04 +0000
Files and hashes: 1: EsvahZdQZVhluZsLSr98J_sMDK4.roa (hash: DNS5SQ17LOTRnwWYUw1eb+IWwNLBZu1qV/4r+8SuduY=)
2: ZKemzVg4FNOTvuJjW1RVdMx1Ygw.crl (hash: 9hYc8xKfjKGnPvc3NnZkHMt2VnWWLhzWHjEa5FFdAzY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/8d6f1a-d334-418f-b726-6f5d8a74a0e4/1/ZKemzVg4FNOTvuJjW1RVdMx1Ygw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/8d6f1a-d334-418f-b726-6f5d8a74a0e4/1/ZKemzVg4FNOTvuJjW1RVdMx1Ygw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZKemzVg4FNOTvuJjW1RVdMx1Ygw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:9f:b8:26:8c:b3:d8:05:06:74:7c:89:23:f2:c9:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64a7a6cd583814d393bee2635b545574cc75620c
Validity
Not Before: Jul 21 17:01:04 2026 GMT
Not After : Jul 22 17:01:04 2026 GMT
Subject: CN=60937900d9ed95ed19e0e16b35687b490370096e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d5:04:d1:b3:15:c6:25:59:ee:c5:af:78:91:
20:3f:ee:5f:dc:75:9c:fe:60:f0:f2:1a:e4:4a:a0:
41:ac:d4:0c:83:97:34:8e:16:4c:4b:ce:fd:28:9e:
3d:95:a9:cb:ef:fa:29:8f:19:56:1f:6a:29:f5:b7:
1f:bc:ef:64:93:14:a0:fa:10:7e:00:c0:2a:18:94:
1e:48:90:68:ce:3b:c8:31:7b:29:70:88:e7:1d:5f:
58:d5:6d:fd:06:2a:18:de:93:2b:ec:1d:4d:0e:d3:
30:79:e7:6a:97:bd:c3:ec:c8:5b:37:db:3a:77:2d:
20:96:ea:12:c4:3a:49:fa:1a:d6:fd:48:5b:15:8f:
de:ad:cd:3e:f9:9b:8f:18:a1:82:d7:13:6b:60:dc:
c8:ea:06:b0:62:d2:ca:90:54:3b:23:6d:d7:c7:b6:
fb:18:34:3f:ed:63:a0:d8:ae:02:46:ac:4c:89:7f:
72:01:e4:16:93:2e:81:bc:a4:9f:04:03:47:86:01:
69:db:b7:90:0c:76:74:ad:39:72:82:97:2e:10:17:
9d:99:fa:8b:75:fb:ef:38:49:51:3b:bd:4e:34:6a:
b6:31:54:d1:43:4c:ad:47:2d:bd:3a:4d:28:31:4e:
68:82:d3:8f:d2:77:9d:ed:33:0a:8c:0b:8b:1a:fb:
23:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:93:79:00:D9:ED:95:ED:19:E0:E1:6B:35:68:7B:49:03:70:09:6E
X509v3 Authority Key Identifier:
keyid:64:A7:A6:CD:58:38:14:D3:93:BE:E2:63:5B:54:55:74:CC:75:62:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZKemzVg4FNOTvuJjW1RVdMx1Ygw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/8d6f1a-d334-418f-b726-6f5d8a74a0e4/1/ZKemzVg4FNOTvuJjW1RVdMx1Ygw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/8d6f1a-d334-418f-b726-6f5d8a74a0e4/1/ZKemzVg4FNOTvuJjW1RVdMx1Ygw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:eb:6e:8c:76:46:d8:25:79:a3:93:c7:4c:bb:08:d5:2b:5f:
4a:c7:9c:0f:8b:79:0d:d0:c7:c0:88:53:03:8e:eb:96:1e:3f:
01:dc:14:a5:c5:b2:02:37:ba:75:1b:35:5b:8b:d4:5a:11:0a:
5c:8e:ff:54:a1:34:d7:3c:a7:0c:25:b0:f2:8a:1c:8d:e2:16:
64:1e:bc:02:0b:2e:60:5e:3f:35:d9:04:a8:19:82:53:77:a2:
3e:f8:b8:4d:85:8b:9f:b0:b3:46:88:4f:f1:41:d8:7a:dc:83:
b2:03:b4:a0:a3:f1:11:aa:50:76:d5:8c:50:e2:c9:35:05:bc:
9a:b2:77:58:ca:68:8b:8a:fa:21:07:f9:bd:f7:c9:f8:b6:1c:
b8:1c:bb:f7:d6:df:7e:8e:60:50:d7:d2:aa:6b:4f:be:8f:d0:
c9:ee:48:17:4f:fa:bc:53:8b:59:9f:0b:06:1f:9f:b7:83:e7:
33:47:83:46:6e:75:3d:66:29:be:15:ea:56:76:0e:a1:43:80:
68:8f:f0:ab:12:35:60:63:49:5d:eb:e2:a6:b8:be:32:b7:a6:
80:6b:2b:fb:1f:1f:3c:f7:0b:72:c0:36:1c:c7:18:d2:3d:11:
4a:57:d9:7c:fe:13:d9:be:84:55:8a:56:f8:f7:09:cc:25:68:
e1:28:20:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:32:10 2026 by rpki-client