Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.mft
File: ZHVxhUcvFtU-62ihQONRP6McMdg.mft (raw, json)
Hash identifier: sGnivuyJZsmSWqztVu86cM42f0wVe94v75YeuE3etk8=
Subject key identifier: C0:43:D7:F9:D3:38:CD:F7:DC:DF:3B:F6:86:CA:A2:2E:B2:30:51:73
Authority key identifier: 64:75:71:85:47:2F:16:D5:3E:EB:68:A1:40:E3:51:3F:A3:1C:31:D8
Certificate issuer: /CN=64757185472f16d53eeb68a140e3513fa31c31d8
Certificate serial: 019F95B798AE54A4E2477643C4F4064DB410
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZHVxhUcvFtU-62ihQONRP6McMdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.mft
Manifest number: 12A3
Signing time: Fri 24 Jul 2026 20:01:05 +0000
Manifest this update: Fri 24 Jul 2026 20:01:05 +0000
Manifest next update: Sat 25 Jul 2026 20:01:05 +0000
Files and hashes: 1: FIc01Lo1yeWxE-xTe7CiddAVpBk.roa (hash: hMcJ6OK+PeXHDyYgCQtCCTDn1eungDLXByvXPV4zXXA=)
2: ZHVxhUcvFtU-62ihQONRP6McMdg.crl (hash: IJoi0YYhPYSJuUN5nG6bGjREcqvcKghjdrElV8hJ0YE=)
3: n9G4PwDSvg3JXpVqBL9fxfextGk.roa (hash: ISD2QN6R10mZDVwEXSrMdj+oKlZVAdmDz7rQAXDL/g0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZHVxhUcvFtU-62ihQONRP6McMdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:b7:98:ae:54:a4:e2:47:76:43:c4:f4:06:4d:b4:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64757185472f16d53eeb68a140e3513fa31c31d8
Validity
Not Before: Jul 24 20:01:05 2026 GMT
Not After : Jul 25 20:01:05 2026 GMT
Subject: CN=c043d7f9d338cdf7dcdf3bf686caa22eb2305173
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:05:32:41:a1:97:d7:49:8d:4e:33:e8:6e:53:
41:6d:55:0e:2b:73:6a:00:d8:73:6a:7b:2a:a9:a5:
f2:d0:b6:36:0b:09:5c:aa:c7:34:43:9f:4a:15:0b:
fc:17:8a:c7:e6:1b:0d:18:ab:48:bc:40:ce:1b:06:
af:63:0f:eb:88:8d:da:3e:25:6b:22:ef:88:15:e9:
bc:84:8b:f7:40:7a:e7:f6:62:65:0a:10:ac:20:af:
37:4a:44:8a:55:09:ed:bd:c9:a4:3e:9c:cc:ca:3f:
d8:c8:1f:aa:22:e3:9e:2a:49:82:0d:78:08:09:4c:
30:24:f1:9d:94:9e:b1:3a:e5:0c:7a:c0:e7:e1:ae:
2c:ed:5c:35:15:d9:6c:6a:62:6b:91:e5:29:fd:4e:
b6:3d:ab:ed:9c:d4:2d:13:05:43:94:d9:cc:2c:93:
42:72:4f:82:f2:f6:57:88:ab:0a:6a:73:e1:73:3f:
e1:bd:af:f8:80:ad:67:f4:33:56:d1:9a:86:01:12:
d6:39:9a:b0:e9:90:43:16:6f:4c:64:50:c3:e7:84:
81:0d:6f:77:7b:4c:91:ce:8e:08:a1:e1:0c:bb:e6:
3c:9e:28:21:f5:31:c8:bc:68:c9:0d:4a:58:70:71:
8f:1d:c8:17:30:df:c5:ef:29:b0:77:25:b8:5a:05:
4a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:43:D7:F9:D3:38:CD:F7:DC:DF:3B:F6:86:CA:A2:2E:B2:30:51:73
X509v3 Authority Key Identifier:
keyid:64:75:71:85:47:2F:16:D5:3E:EB:68:A1:40:E3:51:3F:A3:1C:31:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZHVxhUcvFtU-62ihQONRP6McMdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:03:04:97:0b:2e:89:0f:e2:c0:f7:20:e3:40:a0:02:4d:23:
6e:d1:4e:0f:16:82:51:d1:0a:3d:c0:90:1f:a2:69:89:aa:a7:
a5:23:e7:dc:dc:77:02:2f:4e:36:60:30:3b:c6:d4:2e:8a:5b:
97:c4:38:41:55:ff:a0:fc:4e:45:42:d1:8b:23:00:f6:33:93:
b8:5b:33:b3:db:7e:01:38:75:ca:a4:dd:60:25:7a:e1:9a:c3:
45:09:6a:5c:68:c1:33:54:a8:75:4c:c1:8f:38:9c:85:cf:5d:
0c:a2:55:8a:1e:b8:b9:eb:bb:c6:aa:77:39:3b:8f:7d:9b:18:
56:32:16:b1:71:74:06:bf:bd:f5:97:59:8f:e7:93:a4:35:ee:
b6:9b:32:59:42:7f:67:48:ff:18:cd:ab:8a:c7:23:97:41:a7:
42:f2:c6:ac:c7:73:c1:b0:b6:ff:1a:9b:1d:6d:5f:f5:2b:bd:
bc:a1:db:25:f7:00:07:a1:28:5d:e5:64:bf:9e:9c:1b:8f:5e:
74:26:33:30:2a:2a:ef:1f:4a:cb:55:3d:99:35:a2:12:41:d2:
c5:0a:54:18:b1:f8:89:cc:4c:84:67:b8:cf:d3:e0:3b:d3:0e:
f5:69:30:8d:6c:65:64:39:9c:f7:8c:db:6a:9b:5f:e6:e5:78:
81:f0:99:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:14:52 2026 by rpki-client