Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft
File: Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft (raw, json)
Hash identifier: Zv5xMm1iaoXh2ZUoGtnRhbP93HXDNNsz8dEQZR/LdXQ=
Subject key identifier: EE:A8:D8:B2:F3:D8:6B:89:49:27:40:04:32:0B:89:DD:16:C9:1F:6B
Authority key identifier: 67:58:9D:5F:E4:BB:1C:5B:DB:83:A3:53:C2:73:7D:C6:04:34:13:26
Certificate issuer: /CN=67589d5fe4bb1c5bdb83a353c2737dc604341326
Certificate serial: 019F93241CAB3998BFD0A086E897237FCB02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft
Manifest number: 0509
Signing time: Fri 24 Jul 2026 08:00:45 +0000
Manifest this update: Fri 24 Jul 2026 08:00:45 +0000
Manifest next update: Sat 25 Jul 2026 08:00:45 +0000
Files and hashes: 1: KyuLPj5o4j_n8r1tPjoVcUGqn_c.roa (hash: 6rz3nPgtR7nYzXOgSBXCSqdxgUf8eCA4QNV+oiGauy0=)
2: Z1idX-S7HFvbg6NTwnN9xgQ0EyY.crl (hash: XlRSSQ2nUQiCj8r67/X8qI86qFtSBOdNhdD3qmOnwc8=)
3: xYG26TB2RrgqHuMvZiHsPq1NDVM.roa (hash: W2+WDoIzPRMoYogzmzQsW/rEEBQkgPMptZQ4oMSwz/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:24:1c:ab:39:98:bf:d0:a0:86:e8:97:23:7f:cb:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67589d5fe4bb1c5bdb83a353c2737dc604341326
Validity
Not Before: Jul 24 08:00:45 2026 GMT
Not After : Jul 25 08:00:45 2026 GMT
Subject: CN=eea8d8b2f3d86b8949274004320b89dd16c91f6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d8:a4:0f:10:7a:46:18:71:29:ad:44:53:b2:
e5:fa:95:bc:bd:ec:0f:90:93:b1:27:a4:3e:2a:26:
48:f1:cc:7d:2f:58:93:e7:02:70:a7:e7:31:55:c4:
e4:a2:da:81:6c:30:1f:32:39:61:73:37:d5:f6:79:
1f:13:73:61:f2:6a:2c:99:1d:9e:27:a2:a9:bc:12:
e0:a4:7d:6b:16:1b:7c:1d:ce:46:27:0e:07:42:e6:
64:88:27:ae:61:b0:4d:b5:4a:15:c8:e1:6a:a7:9b:
d9:24:ac:06:89:15:80:c3:8f:56:76:0c:65:b4:fc:
7e:b0:51:0c:c5:35:26:97:42:40:74:e7:d9:4c:c4:
57:93:1b:16:d1:c5:4a:76:c1:3e:d2:63:2a:c5:27:
a3:72:ae:5b:2f:12:da:a9:b7:38:89:d9:01:80:91:
89:65:e7:86:62:7b:e8:ab:4b:f9:09:3a:eb:f8:7e:
19:a7:9d:a1:4a:59:d2:47:b4:14:fe:22:cc:0b:43:
3f:da:f8:a0:d4:89:e6:19:44:17:75:81:f6:6f:66:
16:d6:65:28:ed:eb:41:f1:f2:9c:50:70:4a:4d:27:
7c:ae:74:ab:29:b6:76:49:8c:30:ac:61:74:be:e2:
ee:b3:60:6b:f0:3a:d1:ff:e3:96:58:9d:65:52:c3:
82:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:A8:D8:B2:F3:D8:6B:89:49:27:40:04:32:0B:89:DD:16:C9:1F:6B
X509v3 Authority Key Identifier:
keyid:67:58:9D:5F:E4:BB:1C:5B:DB:83:A3:53:C2:73:7D:C6:04:34:13:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:4b:60:fb:7d:5a:ab:cf:13:f9:ae:b0:5d:49:81:c5:5c:46:
ff:90:1b:44:71:7b:f4:8f:7d:df:50:59:ef:f3:70:c0:3e:2e:
4e:84:07:4a:87:cc:7f:ab:2e:aa:ba:3c:08:8b:75:6a:92:01:
57:da:17:b1:9c:47:23:39:32:ed:22:fa:60:b1:49:ba:04:c3:
5e:dd:29:2d:d2:5e:2c:1e:3f:ff:65:94:bf:eb:1a:d7:ed:1c:
71:2a:95:e4:a2:ca:11:74:57:e4:08:a7:67:c4:91:83:7d:79:
52:37:d0:6c:8f:f3:dd:f3:56:2d:57:2f:33:8b:e5:6f:31:7c:
c1:4f:b1:99:8a:62:f3:ed:a1:b7:5e:a0:79:2c:0a:9e:f1:9e:
49:1f:48:4e:96:1b:eb:c7:9b:9f:d9:30:4d:a4:b1:d6:9c:1c:
cd:35:62:8f:67:64:90:bc:0d:76:47:57:23:cc:4f:ce:bb:1a:
ff:f4:a6:11:8c:e8:d3:c1:11:d1:51:a8:6f:7f:66:5b:f3:78:
49:48:c5:86:62:77:79:90:9e:9a:53:1c:23:c7:7e:c6:ae:48:
c0:2e:fb:66:52:55:bf:85:ff:4c:4b:8c:a5:e6:45:af:21:d4:
20:51:eb:f3:ef:db:93:67:d3:18:42:6d:4d:8a:9e:3f:6f:ee:
08:b1:8b:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:28:46 2026 by rpki-client