Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.mft
File: zgDhEsA_aV-fJdO3K7I6TDTtITg.mft (raw, json)
Hash identifier: pX/gPvlzd4+WSgMiZKGaPoArkS59Z1Crhi9fu+0khb8=
Subject key identifier: 28:2C:2F:E7:E3:42:B7:7D:29:65:A3:06:53:D1:A1:65:B3:B9:76:4C
Authority key identifier: CE:00:E1:12:C0:3F:69:5F:9F:25:D3:B7:2B:B2:3A:4C:34:ED:21:38
Certificate issuer: /CN=ce00e112c03f695f9f25d3b72bb23a4c34ed2138
Certificate serial: 019F94A4B79F4B51CC51F1DBEAFEE226F0CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zgDhEsA_aV-fJdO3K7I6TDTtITg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.mft
Manifest number: 1489
Signing time: Fri 24 Jul 2026 15:00:50 +0000
Manifest this update: Fri 24 Jul 2026 15:00:50 +0000
Manifest next update: Sat 25 Jul 2026 15:00:50 +0000
Files and hashes: 1: gX3BQ48KT1SBCIdQ1BTvFv5yWJs.roa (hash: DEwg47W0q/dNOjfYsnuPLnMnC+CGQgRpMPoSjjP+Lr4=)
2: zgDhEsA_aV-fJdO3K7I6TDTtITg.crl (hash: 5kmgqGit9liRd85muBKcI0EjfcU7Rrf1rOphbvEMRd4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.mft
rsync://rpki.ripe.net/repository/DEFAULT/zgDhEsA_aV-fJdO3K7I6TDTtITg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 15:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:a4:b7:9f:4b:51:cc:51:f1:db:ea:fe:e2:26:f0:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce00e112c03f695f9f25d3b72bb23a4c34ed2138
Validity
Not Before: Jul 24 15:00:50 2026 GMT
Not After : Jul 25 15:00:50 2026 GMT
Subject: CN=282c2fe7e342b77d2965a30653d1a165b3b9764c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:aa:59:4b:a1:79:85:07:bf:90:79:5a:28:2d:
a0:89:d5:55:b1:ce:e5:7a:8b:ce:52:77:d3:ca:99:
42:9a:f2:ce:f5:21:97:15:90:c5:7f:46:eb:7c:df:
ab:5a:77:74:75:9d:94:96:af:a4:f1:73:89:ad:63:
b3:db:0b:28:19:da:6b:f0:c8:94:b9:7a:23:90:e4:
83:d7:41:01:f7:5b:8d:10:07:40:fb:45:c2:08:e2:
be:61:56:54:b6:c2:16:cb:96:2f:2a:c7:2b:72:df:
b9:cd:25:f1:59:e5:6a:86:46:c7:c2:4c:bc:ba:d4:
09:c8:f5:20:b9:98:67:36:c0:fb:37:c0:98:85:7c:
5e:ca:b1:1f:59:f3:6e:2b:ee:37:ff:0f:24:33:b7:
56:b0:81:80:c5:42:b7:4e:22:36:0f:40:08:e3:51:
bc:64:9f:5a:91:3b:ab:2b:92:ad:c2:21:e2:7b:22:
fd:f0:1b:1d:47:67:53:8d:1f:ad:92:0f:18:36:43:
88:fd:88:02:94:4f:f4:51:ef:4d:18:fc:f5:ba:31:
35:23:38:c9:c9:c0:70:b3:a8:63:9e:8e:ee:8b:99:
c5:8d:2b:0c:21:7d:d9:32:90:21:9b:b2:35:d1:64:
48:98:c8:fb:b4:e0:77:e9:99:21:ad:42:7b:11:95:
d5:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:2C:2F:E7:E3:42:B7:7D:29:65:A3:06:53:D1:A1:65:B3:B9:76:4C
X509v3 Authority Key Identifier:
keyid:CE:00:E1:12:C0:3F:69:5F:9F:25:D3:B7:2B:B2:3A:4C:34:ED:21:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zgDhEsA_aV-fJdO3K7I6TDTtITg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:0b:5f:98:3a:35:ec:8d:c5:fd:a0:b4:6b:b4:4e:22:74:04:
b4:b3:7d:83:fb:18:d5:28:1f:27:cc:d2:dd:0c:12:d8:ea:94:
08:25:1f:34:b0:a0:fb:5a:0b:0c:cb:bf:7a:f5:6e:6e:43:b4:
b5:99:3f:00:a4:8a:6a:92:3f:b3:35:ef:b1:59:1f:78:1f:d1:
80:45:37:d2:c2:dc:08:30:03:65:f4:72:a5:1d:57:20:1a:77:
4d:da:4c:d5:d7:3d:28:8d:45:48:d8:4b:bf:7b:24:dc:d0:61:
16:32:46:8f:42:de:7f:0d:78:42:b7:21:4e:12:f4:a1:61:49:
54:e9:f3:b4:07:6a:68:3f:4a:82:12:1d:5a:17:aa:43:18:4a:
bc:1a:b5:03:6b:ee:3f:f5:da:7f:65:a2:6b:0f:02:14:26:15:
d5:0d:5d:7d:d7:b7:cc:40:a4:4e:1a:f8:f9:87:b3:2b:c3:31:
24:96:3e:8b:c7:f6:c8:f7:b4:08:43:16:97:72:df:cc:d3:82:
53:29:20:32:d1:35:e7:d7:87:6f:4a:ca:6c:24:3d:84:09:b0:
aa:74:c7:9e:07:17:7f:0f:f3:8b:43:12:73:f2:83:fc:41:83:
03:d0:6f:14:6e:cf:0e:f1:71:31:d3:23:e2:0c:8e:3e:6f:24:
81:ad:fa:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:56:37 2026 by rpki-client