Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/sZPxphH_PZUKvZZlLNqgVaNR20U.mft
File: sZPxphH_PZUKvZZlLNqgVaNR20U.mft (raw, json)
Hash identifier: bEk2i5a18MsoInnfJEbv3zYSnEXHjKuiHTTd160xHNs=
Subject key identifier: 17:60:31:3F:62:CA:69:BE:4D:6C:73:8D:86:21:7B:92:F5:D5:1A:5D
Authority key identifier: B1:93:F1:A6:11:FF:3D:95:0A:BD:96:65:2C:DA:A0:55:A3:51:DB:45
Certificate issuer: /CN=b193f1a611ff3d950abd96652cdaa055a351db45
Certificate serial: 019F916D97D99311AD267F9A10283BC5A21F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sZPxphH_PZUKvZZlLNqgVaNR20U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/sZPxphH_PZUKvZZlLNqgVaNR20U.mft
Manifest number: 40
Signing time: Fri 24 Jul 2026 00:01:46 +0000
Manifest this update: Fri 24 Jul 2026 00:01:46 +0000
Manifest next update: Sat 25 Jul 2026 00:01:46 +0000
Files and hashes: 1: 0o1C4vwLrtJhxZJe2NWXXgCUrq8.roa (hash: 3Fe9Azb+RrHGaKENizsao17NNGxQe5yH/WD4Wqllrkg=)
2: sZPxphH_PZUKvZZlLNqgVaNR20U.crl (hash: OlxDoI/Ij8oekFK8i+xeexr5uDGkzVTfx7M5hC547JE=)
3: zzpXRXiaaDaUNJgb8J2uf-9tibo.roa (hash: 6IAZNXyLJkKu4qRWV3DHkLx2sFZt0DSc2M4cQ6BsTRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/sZPxphH_PZUKvZZlLNqgVaNR20U.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/sZPxphH_PZUKvZZlLNqgVaNR20U.mft
rsync://rpki.ripe.net/repository/DEFAULT/sZPxphH_PZUKvZZlLNqgVaNR20U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:97:d9:93:11:ad:26:7f:9a:10:28:3b:c5:a2:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b193f1a611ff3d950abd96652cdaa055a351db45
Validity
Not Before: Jul 24 00:01:46 2026 GMT
Not After : Jul 25 00:01:46 2026 GMT
Subject: CN=1760313f62ca69be4d6c738d86217b92f5d51a5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:79:29:2b:b3:ae:d3:1b:83:ec:aa:fb:d5:18:
80:8d:4d:da:f0:ac:e4:a9:e4:4c:e6:e2:00:f9:41:
05:2e:8c:f3:00:76:39:d9:0f:fc:19:42:a8:82:76:
8f:e5:08:3d:90:ae:6f:bf:f7:db:db:fc:90:06:2b:
81:dc:fb:97:ab:de:fe:22:86:db:bb:19:1b:2d:bc:
d1:69:f7:0e:59:0a:93:24:b4:ea:57:ff:47:eb:d8:
ac:a7:66:58:34:6b:80:b7:5a:28:92:96:08:47:c2:
38:14:7e:7a:65:de:53:21:16:2b:f5:cb:a2:e0:ff:
fd:6b:64:cf:68:34:e1:15:1b:ca:1d:0f:d2:9e:1d:
85:b4:25:62:70:0f:79:13:e4:6c:04:8a:ff:89:20:
9a:9d:fd:9a:3b:77:a2:fc:73:01:bc:2b:c4:c9:7e:
ad:2e:7c:29:00:66:9e:4b:a6:a1:a9:d3:ef:85:a2:
b5:fe:24:c5:23:53:43:9c:bd:c4:31:ea:99:6f:0b:
3b:65:df:96:da:4a:2e:20:48:05:c0:0a:34:c5:22:
c4:74:b1:16:0e:5f:dc:37:8f:9c:b9:14:38:d3:43:
c7:ba:3e:9a:79:6a:92:39:4f:90:a8:39:79:47:cb:
23:84:c5:27:71:45:92:41:80:1f:58:5e:b9:65:95:
1a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:60:31:3F:62:CA:69:BE:4D:6C:73:8D:86:21:7B:92:F5:D5:1A:5D
X509v3 Authority Key Identifier:
keyid:B1:93:F1:A6:11:FF:3D:95:0A:BD:96:65:2C:DA:A0:55:A3:51:DB:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZPxphH_PZUKvZZlLNqgVaNR20U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/sZPxphH_PZUKvZZlLNqgVaNR20U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/sZPxphH_PZUKvZZlLNqgVaNR20U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:9f:90:28:c4:ea:00:c9:eb:11:5b:2e:2f:97:1c:00:79:02:
73:bf:96:ae:3c:10:1f:d1:b4:30:3c:5a:c5:5b:7c:69:85:04:
7a:a3:ec:24:fe:88:72:23:b4:6c:8e:9d:31:50:68:ea:0e:f5:
00:89:91:54:5d:24:55:ca:37:17:47:4a:3d:aa:ed:b1:ec:db:
09:6e:46:56:ac:33:9c:1a:9e:78:93:56:95:c0:6c:46:0d:c1:
20:6b:92:34:43:e9:52:f0:0b:7a:a2:ee:a5:2d:b6:f9:58:45:
4d:55:5c:a7:5e:e6:d1:30:50:d8:ad:bd:50:4f:d3:ac:c9:71:
63:70:3c:05:92:ae:15:55:b0:be:65:af:a8:b8:14:80:41:d7:
41:76:1f:e0:3e:36:06:39:b4:07:65:93:3b:b4:26:8d:36:40:
e1:a7:23:d4:88:7b:68:d3:83:9f:ec:a8:82:35:e4:dc:3c:bc:
2a:7c:ef:8b:11:46:cf:7d:e6:ac:fd:d3:f1:0b:2b:a2:de:7c:
b0:bf:55:f5:f7:ce:0c:ef:91:87:4a:24:84:d8:13:89:b1:f0:
75:3c:ae:34:b7:40:3b:a5:54:2c:61:fa:ad:43:62:96:88:92:
ad:5c:6b:77:8f:8f:e3:79:41:19:32:17:24:66:14:f4:40:96:
e3:05:36:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:34:58 2026 by rpki-client