
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/Z2S57soliueMTVEyGovf75orajw.mft
File: Z2S57soliueMTVEyGovf75orajw.mft (raw, json)
Hash identifier: XMEdCakIEiD6nhMSF4iZae9CdPQWA24LL+BBkARpO80=
Subject key identifier: 5A:5F:33:A6:4E:D6:F3:7E:2B:6C:E9:19:8C:FD:5C:1C:55:38:EE:CA
Authority key identifier: 67:64:B9:EE:CA:25:8A:E7:8C:4D:51:32:1A:8B:DF:EF:9A:2B:6A:3C
Certificate issuer: /CN=6764b9eeca258ae78c4d51321a8bdfef9a2b6a3c
Certificate serial: 019F9135D80A42DEA26F0B81FA47E7F1F433
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z2S57soliueMTVEyGovf75orajw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/Z2S57soliueMTVEyGovf75orajw.mft
Manifest number: 19CD
Signing time: Thu 23 Jul 2026 23:00:52 +0000
Manifest this update: Thu 23 Jul 2026 23:00:52 +0000
Manifest next update: Fri 24 Jul 2026 23:00:52 +0000
Files and hashes: 1: 9_ZPXDi15fm1zzx9GsCu0r8cLwA.roa (hash: h9CqZh0rb7DZM2DSkg1oUJ5C5eMZCB3Ebd3JWwXuuXI=)
2: Z2S57soliueMTVEyGovf75orajw.crl (hash: 4mjK0/jVWQjWTFLYtq8CdWtCtee8igSH385B4RB8YFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/Z2S57soliueMTVEyGovf75orajw.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/Z2S57soliueMTVEyGovf75orajw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z2S57soliueMTVEyGovf75orajw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:d8:0a:42:de:a2:6f:0b:81:fa:47:e7:f1:f4:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6764b9eeca258ae78c4d51321a8bdfef9a2b6a3c
Validity
Not Before: Jul 23 23:00:52 2026 GMT
Not After : Jul 24 23:00:52 2026 GMT
Subject: CN=5a5f33a64ed6f37e2b6ce9198cfd5c1c5538eeca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b1:94:20:0b:06:ca:06:3e:d0:d6:55:0a:32:
1f:d4:29:25:be:54:4b:f8:82:ac:07:05:86:21:be:
32:c6:77:9c:96:9c:9b:85:47:06:ce:8c:c4:f5:9e:
a0:46:8f:93:0b:25:35:2f:fb:07:78:39:64:8b:68:
fe:d5:db:00:62:33:c6:a7:41:0e:f5:c4:26:5d:33:
af:ea:e8:64:e9:3e:2d:f6:c9:9f:76:82:03:10:d5:
cf:54:20:0f:73:3f:b1:6f:bd:ac:89:99:e4:33:ff:
f3:f4:63:3d:31:fa:05:67:4e:f3:7b:18:0d:cf:ac:
7c:f5:be:1b:1a:6b:33:ae:50:44:ab:c9:3c:b6:0e:
98:75:52:75:e7:db:ff:15:c2:e4:f0:27:93:a5:1b:
3b:b0:95:5e:a7:a2:37:59:0e:46:9b:fb:76:d1:e7:
e9:3c:93:89:59:72:0b:05:ea:03:47:4f:b6:8e:3a:
44:d2:c8:1c:43:57:44:48:09:e0:65:61:11:89:dc:
32:9a:cc:e3:1c:f6:25:02:29:84:27:8a:d8:01:16:
8e:bf:15:32:7f:27:5d:34:75:7d:ca:49:62:53:9e:
af:2e:68:3a:47:9b:2a:10:b4:75:c6:a6:cf:9a:25:
04:82:66:89:05:61:f6:fc:35:91:f2:31:0f:2f:b0:
a5:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:5F:33:A6:4E:D6:F3:7E:2B:6C:E9:19:8C:FD:5C:1C:55:38:EE:CA
X509v3 Authority Key Identifier:
keyid:67:64:B9:EE:CA:25:8A:E7:8C:4D:51:32:1A:8B:DF:EF:9A:2B:6A:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z2S57soliueMTVEyGovf75orajw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/Z2S57soliueMTVEyGovf75orajw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/Z2S57soliueMTVEyGovf75orajw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:5e:ba:42:19:27:1b:4a:3d:9d:f3:b8:ee:1b:9c:ca:e8:0f:
a1:94:84:5a:5e:c2:00:75:89:dc:0f:8c:9a:ca:1c:e5:b3:b9:
82:d1:6e:23:ca:67:37:1d:6f:25:10:02:96:8a:fa:65:56:a5:
f7:1d:50:d0:d8:89:3c:f1:0a:fd:b1:ed:c4:1b:0a:e9:9d:49:
d1:7d:12:a3:74:a2:be:9c:ba:f2:7c:3e:32:b4:8e:e4:f8:0b:
50:b7:87:07:27:79:96:2f:28:eb:dc:1e:5e:c3:b5:f9:52:a3:
6e:2f:45:35:88:25:8e:eb:04:e9:4e:29:9b:78:c9:f8:c6:6c:
1d:8b:3a:d6:e6:b7:1c:23:c3:77:9b:63:6b:6f:58:a3:ba:14:
69:22:1d:5f:a7:1e:cc:32:66:e1:2b:2d:04:4e:af:93:b4:e4:
17:0f:b4:f3:e1:0b:e6:0a:eb:d8:ad:65:76:65:6c:db:71:23:
72:54:29:cc:60:29:d0:75:5a:ea:45:7c:cd:b3:0a:3f:f1:3b:
31:17:72:48:3d:5e:2e:b0:f4:75:4a:fb:7f:57:07:f5:98:12:
4a:f7:90:d7:7a:20:55:6e:ed:58:42:76:37:e5:a8:64:21:45:
b3:98:5f:49:f8:ad:d0:af:fc:97:ac:7f:89:43:75:7d:7d:25:
d6:77:98:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:43:36 2026 by rpki-client