Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft
File: ZPpm-4SngaBYT9DRwt85vaR2BRk.mft (raw, json)
Hash identifier: VE2n2I6WCiKsg/dDv7R+9Y4CPsnlvXcfaoNT4X9Gdso=
Subject key identifier: 78:CF:8C:B7:92:4D:7E:A5:6D:20:AA:30:06:04:20:3C:FA:04:0D:FA
Authority key identifier: 64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19
Certificate issuer: /CN=64fa66fb84a781a0584fd0d1c2df39bda4760519
Certificate serial: 019F91A434F969F9915FAF3E4511861A4334
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft
Manifest number: 1A3B
Signing time: Fri 24 Jul 2026 01:01:25 +0000
Manifest this update: Fri 24 Jul 2026 01:01:25 +0000
Manifest next update: Sat 25 Jul 2026 01:01:25 +0000
Files and hashes: 1: 5fUbTKl8FSPc1kSYGwQAsVfb2vQ.roa (hash: PLRtthNs8hk5vDeIh9r/ACQzulJpBpXJunHHwis/BW4=)
2: KHKZ9oAR4pOjsmM70Mx2jjXuCSc.roa (hash: KQJvV0lMLENSykGh1gJfx02ynaMwFLdd0OilipOgatU=)
3: KhGccG-9kSJW0nKCk6yANGIBUFg.roa (hash: zywPAJ1T+FuIU1G9CdS4XD+lquEKkevubyLrKuYUwfk=)
4: WfYZ1TfImT3yRIrYlNuuVCM96nE.roa (hash: 4hQnLNa6AvcfooEXSYRpCYSRQGf1HFK3GJPOn5OeTYg=)
5: ZPpm-4SngaBYT9DRwt85vaR2BRk.crl (hash: lk+WxV2FvtxahtAxkPdI8bR5Cf1YI1NDYkxPI3ew21Y=)
6: bWULgqZwLFtgMnHWpi5ob6mG51g.roa (hash: lfo7CD8cFvuweAa0KOVUGNQ19lLzJ7antvDI5XPAMSI=)
7: dukbn33Ogir7i7r4vD8U_2-uD0k.roa (hash: Qnah27HWaQWC9U8nihXoX9JQsARGjKgGqZfWIx2YcYg=)
8: oTNGV0Y7SaXlCklNzwFHJ1qEeUI.roa (hash: 1MTRBJjbkgRiCWVR5beZsUo8EaPKlW5X/iPni1dYgA8=)
9: tOjC-880lUvIDXcMv4Td0baNxyA.roa (hash: 9ecFS71NaP3AlhNnMbdDSrsMVob6HFpLwU4ec3vZFPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a4:34:f9:69:f9:91:5f:af:3e:45:11:86:1a:43:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64fa66fb84a781a0584fd0d1c2df39bda4760519
Validity
Not Before: Jul 24 01:01:25 2026 GMT
Not After : Jul 25 01:01:25 2026 GMT
Subject: CN=78cf8cb7924d7ea56d20aa300604203cfa040dfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:60:df:c7:a8:ff:f3:f0:97:64:6e:f1:b4:99:
f9:e3:b9:29:ab:66:54:6a:66:b4:fb:76:7a:db:61:
79:13:59:2e:44:54:be:10:36:09:a0:f5:e0:84:5b:
b2:ec:c6:45:8c:8f:d9:3d:49:d5:97:63:2d:9d:9c:
3a:8d:7a:9a:12:3b:c5:40:01:e9:c1:0d:11:2d:6e:
70:f6:b7:d3:35:da:41:b1:58:dd:5b:3d:3f:a8:c3:
c6:bb:eb:a1:ea:03:55:22:4f:06:bf:5b:0f:01:d8:
9a:cf:93:09:77:ef:3d:01:64:5a:5b:a0:ea:f4:23:
40:1e:e7:58:b2:58:57:cb:9d:2b:d3:18:81:2b:c1:
a5:fe:0b:f8:2a:ae:3c:b7:21:66:e7:21:b4:db:af:
41:b6:c9:17:e3:d9:c9:d3:80:83:b6:28:fb:e5:33:
f3:12:4f:59:38:ee:3d:93:2c:f4:ba:6f:59:72:03:
4d:88:aa:09:be:c7:3b:98:4f:18:66:82:6c:6e:49:
c3:50:92:11:ff:cf:7f:2e:e6:1f:92:ee:28:62:46:
62:7e:8c:c8:95:b5:60:57:62:23:d7:48:2d:58:a0:
7e:26:f3:e1:74:5a:aa:0f:05:2a:26:1d:10:d3:92:
bc:9d:c6:34:b0:f9:db:c1:54:ed:4e:6c:01:ba:f6:
28:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:CF:8C:B7:92:4D:7E:A5:6D:20:AA:30:06:04:20:3C:FA:04:0D:FA
X509v3 Authority Key Identifier:
keyid:64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:ef:9a:b1:68:85:bb:dd:c9:73:5d:36:92:34:f3:1b:df:c3:
06:34:93:4a:f8:a0:1e:0f:97:b0:24:87:b5:bb:b0:42:e1:1c:
e3:27:bf:e9:73:87:1f:67:6f:f2:a7:2b:dd:34:e9:bb:55:2c:
16:f6:91:05:f5:82:68:ac:bb:09:22:d2:93:0a:ea:3a:d0:3a:
1e:00:81:1f:39:34:30:19:83:46:a6:e1:82:d9:b9:b6:ac:b6:
84:3e:3b:60:32:a8:b2:65:ad:e7:a1:37:d1:20:3c:9a:0a:44:
47:f7:66:b6:98:b8:69:9f:6b:4e:0d:fe:43:93:9e:ff:b6:f8:
cb:8b:f1:5c:30:4b:f2:9d:40:2c:48:c2:e7:71:b8:34:7d:9c:
44:f9:a3:82:bf:28:2c:8e:9c:30:c3:37:35:cf:51:ca:86:37:
29:96:23:63:6d:3d:fe:e0:cc:da:bf:69:25:9a:1a:ce:d5:13:
77:e6:ef:74:7a:77:35:b8:5a:db:03:56:44:6d:6d:9d:6a:51:
72:c7:81:ab:39:aa:bc:c2:b3:ab:24:87:6b:64:29:a7:f0:ac:
db:b8:c7:f6:60:9f:69:b4:8e:25:0e:01:5c:c5:0c:44:d3:c3:
02:19:cc:e9:96:e7:04:ac:19:4e:b2:53:b5:b4:fd:6c:44:ca:
7a:97:d6:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:12:51 2026 by rpki-client