Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.mft
File: zNNXkIMM50aalMWbLizLv1420T8.mft (raw, json)
Hash identifier: xzRGY+XbmF5jPvLPOdS1UabFgi7F6SDTxdfISxR2mdo=
Subject key identifier: 75:93:01:74:BE:3E:4A:3B:66:DE:62:6B:8E:29:E4:39:62:9F:36:AD
Authority key identifier: CC:D3:57:90:83:0C:E7:46:9A:94:C5:9B:2E:2C:CB:BF:5E:36:D1:3F
Certificate issuer: /CN=ccd35790830ce7469a94c59b2e2ccbbf5e36d13f
Certificate serial: 019F91A42F2E284502A10665D965AC30AD05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNNXkIMM50aalMWbLizLv1420T8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.mft
Manifest number: 143E
Signing time: Fri 24 Jul 2026 01:01:24 +0000
Manifest this update: Fri 24 Jul 2026 01:01:24 +0000
Manifest next update: Sat 25 Jul 2026 01:01:24 +0000
Files and hashes: 1: TUvmrgBE44ev_WdD8HZ7-Tqrsvk.roa (hash: eGtgmPAMsFLuXajQP6UacgNI2KT3PlnsWKJ/DF91EtU=)
2: v87hPEGnMIsf-U-27Xa5aB7InJ0.roa (hash: vpt3+IR1X8NAWDYMxgQL6E8vBwuUgUGdnpH6ThIVLCI=)
3: zNNXkIMM50aalMWbLizLv1420T8.crl (hash: OsnHX8hipHj1dRTMG3bBrk8TRiYIOfTqCtBVv0gWIGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zNNXkIMM50aalMWbLizLv1420T8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a4:2f:2e:28:45:02:a1:06:65:d9:65:ac:30:ad:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd35790830ce7469a94c59b2e2ccbbf5e36d13f
Validity
Not Before: Jul 24 01:01:24 2026 GMT
Not After : Jul 25 01:01:24 2026 GMT
Subject: CN=75930174be3e4a3b66de626b8e29e439629f36ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a6:8b:f5:d8:8c:50:d9:d2:b0:95:4d:5f:ff:
de:05:7e:ce:ef:88:f8:90:bf:ab:c7:ab:64:07:f8:
48:c6:1b:2c:01:75:db:6f:85:00:be:22:0a:3d:a7:
f6:65:b8:99:65:f3:db:9a:aa:75:2d:82:29:63:0f:
79:39:5f:0f:fb:d6:f7:7d:30:69:9b:8f:06:d1:fd:
00:17:4c:71:98:ad:f2:9d:bb:bf:ee:f0:0b:76:49:
88:b7:5d:b1:60:5b:9d:d1:48:c7:46:c6:87:b3:e2:
0f:cf:0e:8c:f0:b3:66:17:2b:ae:87:ac:86:6b:bc:
9e:c9:c8:de:54:8a:be:20:c6:8f:fa:a5:0b:70:e1:
87:d5:f7:65:a6:91:b7:d7:b9:cc:6c:00:68:9b:b2:
c6:e1:6c:67:e6:b8:12:9e:10:15:ad:95:56:33:1e:
34:9e:4c:d2:d1:d2:26:4e:8e:d4:36:56:1e:ac:31:
7f:bb:53:b4:04:b6:e0:b2:6b:e7:2f:1f:83:ad:68:
6f:d1:ae:af:6b:b7:d1:1d:96:f0:23:47:6a:e7:c4:
9c:18:16:f8:f8:9a:a8:1d:69:ba:6f:88:a4:3c:44:
34:e2:cd:95:10:e8:df:af:62:3e:b5:88:89:e2:a8:
8b:62:b1:dc:6a:01:ad:36:d9:1d:45:60:2a:b6:30:
3d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:93:01:74:BE:3E:4A:3B:66:DE:62:6B:8E:29:E4:39:62:9F:36:AD
X509v3 Authority Key Identifier:
keyid:CC:D3:57:90:83:0C:E7:46:9A:94:C5:9B:2E:2C:CB:BF:5E:36:D1:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNNXkIMM50aalMWbLizLv1420T8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:d3:27:74:93:4c:a5:85:62:8a:95:82:e3:20:76:1f:e9:3f:
c4:2f:39:a6:c7:b5:04:29:e2:7c:a8:cd:1c:89:59:5d:26:d0:
dc:c8:a2:15:f9:aa:a9:a1:c1:64:16:78:09:20:5d:e7:dc:e4:
96:9f:59:04:7e:be:45:d0:f3:aa:b1:82:32:9e:53:10:cd:51:
d1:76:58:b8:bf:01:fb:1e:d9:fc:95:fd:85:52:78:48:0f:b1:
f5:6b:03:10:ef:f0:08:40:7c:0a:5f:0c:39:ba:d5:a0:15:a3:
fb:1d:d2:e4:91:ac:d8:02:60:64:c9:3d:3e:0b:d1:2a:02:b3:
71:be:fb:1c:4e:8b:5b:49:5f:e6:85:26:2a:a7:90:ac:25:82:
df:59:7c:a3:3a:76:bf:8e:66:b3:a7:5a:1a:7a:c1:c4:e7:90:
e1:6d:d5:04:f6:24:f9:60:23:e5:3e:92:c3:32:c6:56:42:ca:
95:9c:3a:78:cf:c0:22:e2:d9:0c:49:d2:42:99:e2:d4:0d:d8:
a5:1e:4c:34:0e:a6:af:53:43:3f:fe:40:c1:34:ee:a7:18:bb:
37:22:40:c9:d0:55:b9:b2:5c:a8:8a:5b:2c:c3:db:74:d0:b4:
af:c6:db:bf:e5:54:e8:4f:d4:90:4d:b5:0c:3f:70:c2:dc:f7:
2b:29:cd:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:17:08 2026 by rpki-client