
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.mft
File: zQYCONBmjUWgQWGKxd92f1mgxK4.mft (raw, json)
Hash identifier: V59i6UgdT9iuoA6F6hW1Obo+nyz+Blaszkod8ThVYQg=
Subject key identifier: E3:1C:FE:9D:54:66:F6:77:0E:02:57:5B:B8:AC:F1:02:64:14:1B:99
Authority key identifier: CD:06:02:38:D0:66:8D:45:A0:41:61:8A:C5:DF:76:7F:59:A0:C4:AE
Certificate issuer: /CN=cd060238d0668d45a041618ac5df767f59a0c4ae
Certificate serial: 019F943674A3597DE8BA3925E48EAE0CA4E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQYCONBmjUWgQWGKxd92f1mgxK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.mft
Manifest number: 1058
Signing time: Fri 24 Jul 2026 13:00:24 +0000
Manifest this update: Fri 24 Jul 2026 13:00:24 +0000
Manifest next update: Sat 25 Jul 2026 13:00:24 +0000
Files and hashes: 1: B0xeJ6OlptEzuwHkDKb2uLt1U_4.roa (hash: 0mnm00N6t5GT0+PQLMuChkiPF3X09nPjo6FNCsIiX9w=)
2: DHWxwhm5BstgQrswTpmXlNRqB68.roa (hash: U4MLvKfxIOpMtW85VWgOrj7JclXnEEYGlYHrxV44rNY=)
3: zQYCONBmjUWgQWGKxd92f1mgxK4.crl (hash: aZKTy57JKF2sEzh0KqC6GBSIKIabrde4WYLXu304Qtg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zQYCONBmjUWgQWGKxd92f1mgxK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:36:74:a3:59:7d:e8:ba:39:25:e4:8e:ae:0c:a4:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd060238d0668d45a041618ac5df767f59a0c4ae
Validity
Not Before: Jul 24 13:00:24 2026 GMT
Not After : Jul 25 13:00:24 2026 GMT
Subject: CN=e31cfe9d5466f6770e02575bb8acf10264141b99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:1f:36:95:82:14:99:b1:3b:ed:e5:5f:60:b5:
d7:f7:2d:96:90:b3:46:19:57:76:e2:d5:ac:f0:12:
f0:ff:33:e2:2d:a9:99:db:6c:b5:4a:54:a0:ba:bc:
08:54:42:77:6a:66:d1:0c:81:2d:10:06:c3:ce:84:
af:0e:df:d6:5f:ea:16:6b:01:61:3a:f5:8b:30:89:
89:aa:96:4c:c0:a8:08:a2:16:2d:06:9f:a7:3a:58:
46:90:8b:99:05:7a:21:15:4f:c6:f8:d6:1e:d7:36:
23:9c:47:52:06:5e:ce:45:0a:3b:68:8b:64:07:15:
e3:76:d5:96:f3:60:e3:42:20:ac:38:1b:fe:fb:b0:
65:2e:40:17:f4:f7:c9:1b:fb:85:61:f1:5e:12:71:
72:3b:9f:3a:e2:67:0b:60:91:cd:8c:70:98:01:1c:
cc:49:8e:18:e0:20:52:b7:79:34:5a:73:83:94:17:
ec:01:33:23:9a:c1:e9:20:7a:21:a3:5c:4b:64:44:
1b:bc:18:8d:4f:cc:3d:23:6c:af:37:60:8d:87:59:
ef:f2:2c:ce:62:12:0c:17:1b:a7:93:84:8d:3b:b7:
eb:79:e5:f1:5b:4b:4d:3d:fb:ea:28:8c:91:02:ed:
c8:4c:65:79:84:c8:76:10:d2:a4:c5:5c:b5:db:28:
c8:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:1C:FE:9D:54:66:F6:77:0E:02:57:5B:B8:AC:F1:02:64:14:1B:99
X509v3 Authority Key Identifier:
keyid:CD:06:02:38:D0:66:8D:45:A0:41:61:8A:C5:DF:76:7F:59:A0:C4:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQYCONBmjUWgQWGKxd92f1mgxK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:01:ba:4b:ae:03:43:5b:83:2a:40:8b:d0:e2:43:6e:a4:60:
2f:a0:34:3c:c2:b6:3c:80:3b:40:bf:35:3f:58:63:c1:92:58:
d7:aa:ea:7e:43:70:79:53:ba:b4:67:26:b6:d6:b1:f5:f4:7e:
a1:52:fb:00:70:bd:8f:cc:9d:c8:0d:70:f7:eb:68:6f:f1:be:
4f:4e:b9:b4:cd:f7:5f:e6:45:a8:b7:f6:3f:1c:37:1f:b7:66:
b8:3f:5b:ec:e8:fd:6a:e2:b4:25:ac:17:f2:12:c7:b1:df:aa:
34:ab:59:48:ed:b1:94:47:fa:90:e3:34:38:51:2d:37:7f:7d:
ed:ae:ae:43:02:28:f3:fc:c4:7b:48:05:ee:1e:dc:78:f3:88:
26:ea:6d:63:41:df:a2:e9:ef:19:57:e1:b6:d7:81:fb:c0:90:
58:bb:9a:37:a4:01:7c:f8:7b:5b:8c:ff:4d:39:f8:60:bb:ab:
8c:d5:4e:fa:f4:19:64:e6:71:5b:ae:99:85:49:6e:fd:8c:c4:
e9:88:46:b7:8a:76:c9:1d:98:20:20:0c:bb:2e:ff:4a:e3:4b:
82:32:ad:22:de:a2:49:19:54:9c:c6:2d:32:dd:b4:86:81:63:
47:77:9d:02:26:4b:9e:88:1e:0a:88:1e:0b:04:63:4d:83:e0:
c3:ca:be:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:41:30 2026 by rpki-client