Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.mft
File: z4l1dGy_H_dd3sbNuArMhSGBhM4.mft (raw, json)
Hash identifier: OpHAIbAf/BQ2q2233FO3rqyk1vJ/jzWcDyCknxDHJfg=
Subject key identifier: DC:F3:E9:71:64:BD:E0:C0:C9:9B:89:4C:22:47:36:74:4F:8B:E6:22
Authority key identifier: CF:89:75:74:6C:BF:1F:F7:5D:DE:C6:CD:B8:0A:CC:85:21:81:84:CE
Certificate issuer: /CN=cf8975746cbf1ff75ddec6cdb80acc85218184ce
Certificate serial: 019F905A38293D7B98749760FF9CA28E41C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z4l1dGy_H_dd3sbNuArMhSGBhM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.mft
Manifest number: 1957
Signing time: Thu 23 Jul 2026 19:00:59 +0000
Manifest this update: Thu 23 Jul 2026 19:00:59 +0000
Manifest next update: Fri 24 Jul 2026 19:00:59 +0000
Files and hashes: 1: f8pXdTunsFienw12OWOwkjd9_Sg.roa (hash: D84B6IFhxTwUljKKeuMD7kN/I53xCeCr1djjSkG38Ek=)
2: z4l1dGy_H_dd3sbNuArMhSGBhM4.crl (hash: 0askU8XUzE3/aaoAbYlt3AvZXM34/e0GH1ocE4EeY3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/z4l1dGy_H_dd3sbNuArMhSGBhM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:5a:38:29:3d:7b:98:74:97:60:ff:9c:a2:8e:41:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf8975746cbf1ff75ddec6cdb80acc85218184ce
Validity
Not Before: Jul 23 19:00:59 2026 GMT
Not After : Jul 24 19:00:59 2026 GMT
Subject: CN=dcf3e97164bde0c0c99b894c224736744f8be622
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:eb:10:fa:ae:84:5a:b3:ed:94:d3:dc:37:01:
2d:23:ec:28:89:42:e6:fb:c4:76:b6:a8:0a:9c:03:
ae:ad:0e:d7:e5:c0:f1:db:b7:5d:a8:bc:85:7c:d0:
ad:9a:d8:33:06:0d:f7:5e:a1:3e:39:78:52:0b:93:
e7:34:70:c6:d6:db:1c:fe:f5:3b:62:75:ca:81:6b:
c5:60:cc:c3:5b:34:96:d2:47:8d:7b:a2:12:28:c3:
69:1d:a1:ed:80:6d:c4:db:5c:21:4b:0b:f5:89:69:
0e:48:5d:b6:10:f6:03:cf:6b:2f:27:60:02:7c:80:
bf:65:12:34:2b:17:8b:e8:6f:ce:0c:4e:73:bb:7a:
b5:2b:98:c8:b8:01:e2:be:82:b7:32:2b:e9:7b:45:
12:42:62:91:a4:cd:66:b0:01:0d:e1:5e:07:f2:f9:
b0:ad:40:8f:fa:f1:22:90:e2:f3:0f:8a:55:81:c1:
a2:89:42:77:c1:a6:48:a7:60:a6:1e:bc:31:88:c1:
df:79:f5:57:ac:a8:bd:52:cc:20:13:6a:a3:5a:8b:
67:c0:a1:25:1d:94:e1:d6:70:67:b6:40:8c:bd:5a:
5b:e8:11:0c:1e:42:4e:54:a3:9c:2f:2f:b1:e0:3b:
68:f0:32:22:84:a3:b4:ec:c4:e8:42:25:f8:c5:f4:
dc:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:F3:E9:71:64:BD:E0:C0:C9:9B:89:4C:22:47:36:74:4F:8B:E6:22
X509v3 Authority Key Identifier:
keyid:CF:89:75:74:6C:BF:1F:F7:5D:DE:C6:CD:B8:0A:CC:85:21:81:84:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z4l1dGy_H_dd3sbNuArMhSGBhM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:7c:f5:d3:fc:cf:d9:b9:5f:08:39:ea:af:bd:6e:9d:44:8d:
2e:8d:b2:42:ee:2a:a5:e7:fd:cb:f8:b1:de:4d:a6:85:b2:a9:
47:20:ae:b4:4c:75:dd:6b:c5:81:f5:ec:e5:9d:01:9e:4f:81:
d5:04:63:33:10:39:33:cb:fe:51:f7:c6:34:59:d8:d9:7e:21:
d3:2a:7c:8e:e7:b2:69:32:ba:8d:bb:cc:94:23:3f:56:1c:19:
99:c1:43:e8:40:5c:8f:fc:2b:c9:d7:23:43:c4:ac:7f:31:d1:
f6:a0:a3:fe:d7:95:26:f8:bd:05:a3:6a:e9:75:85:51:e3:70:
b8:47:84:78:d3:bb:63:b2:40:71:76:71:70:d7:d2:ec:61:14:
4d:0c:6c:54:b8:7c:da:23:f2:d2:b2:e5:ff:c1:d3:fc:64:b4:
e6:19:eb:89:bf:9a:6e:75:57:7b:e6:49:e9:da:ca:86:74:77:
16:fe:ba:46:14:6a:f5:27:53:44:fd:f1:27:34:e4:7e:31:80:
0e:57:9c:53:71:5d:20:98:82:7e:68:15:7c:48:cf:39:21:c8:
5c:91:95:40:e2:fe:ba:c2:35:04:26:44:65:e6:34:86:4f:a6:
28:e3:5d:16:90:6a:0c:4a:d0:9f:c9:aa:dd:73:14:b2:79:04:
ff:06:e6:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:40:20 2026 by rpki-client