
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.mft
File: zpTDHhXfS3pg5dQN86rBhS6Np0s.mft (raw, json)
Hash identifier: 9jtR5pTqxh3qKxm0I1kBthXGf+oQnXkoEqj+0mPeABs=
Subject key identifier: 48:E5:C2:D2:00:E3:2D:C4:1F:88:B2:76:A3:E7:68:5F:7D:21:A1:D4
Authority key identifier: CE:94:C3:1E:15:DF:4B:7A:60:E5:D4:0D:F3:AA:C1:85:2E:8D:A7:4B
Certificate issuer: /CN=ce94c31e15df4b7a60e5d40df3aac1852e8da74b
Certificate serial: 019F92481E9B30157B069884F208C7383637
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zpTDHhXfS3pg5dQN86rBhS6Np0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.mft
Manifest number: 0BC4
Signing time: Fri 24 Jul 2026 04:00:27 +0000
Manifest this update: Fri 24 Jul 2026 04:00:27 +0000
Manifest next update: Sat 25 Jul 2026 04:00:27 +0000
Files and hashes: 1: 2asX8qOaxpLjyUU4myYKc0Ej3nA.roa (hash: xKHvXSgALDQpoGTmF3KkZGpVCQ/XwWuRiWZZZUlqzJ0=)
2: zpTDHhXfS3pg5dQN86rBhS6Np0s.crl (hash: q3mUnUx7lh0iw5c1HR4MT8+tf8AvAmGen4xX7Cw5xxA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/zpTDHhXfS3pg5dQN86rBhS6Np0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:1e:9b:30:15:7b:06:98:84:f2:08:c7:38:36:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce94c31e15df4b7a60e5d40df3aac1852e8da74b
Validity
Not Before: Jul 24 04:00:27 2026 GMT
Not After : Jul 25 04:00:27 2026 GMT
Subject: CN=48e5c2d200e32dc41f88b276a3e7685f7d21a1d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:90:d9:a3:75:c5:4c:ce:36:df:99:9d:58:e3:
5e:7b:78:40:42:4e:cf:3a:85:f1:71:1a:d9:3d:24:
e6:46:67:2c:c2:83:6b:d8:c2:3f:65:87:3a:e2:21:
77:c5:a8:d3:4b:e2:b9:41:5c:a7:93:b6:1d:cd:33:
ea:22:10:11:95:8d:45:12:84:19:14:df:c4:db:ba:
29:9b:d7:98:21:f2:24:a7:4e:31:fb:47:20:e8:80:
aa:e5:0d:79:c9:83:dd:19:5c:fd:82:50:60:a3:f1:
61:f5:c3:b1:d4:26:df:1b:e9:1f:44:61:31:3a:67:
5c:c8:1d:3d:8d:d5:53:47:7a:43:35:06:3b:e8:2c:
9a:4a:d2:4a:49:23:75:67:7d:b9:31:c2:cb:b8:a1:
18:34:a7:d2:f1:1f:4f:e9:e4:56:9e:d5:86:92:74:
78:15:3d:06:2b:f4:46:42:63:7e:83:6c:50:d9:82:
89:1f:f2:1f:c6:bd:8b:4e:6e:bd:53:c5:7c:31:45:
cb:03:1f:ec:b9:11:38:33:7e:6f:0c:64:c3:6e:e9:
77:d3:6b:e1:00:a6:ab:e7:2f:d5:b3:a0:b9:85:83:
da:27:ce:4e:46:65:67:82:34:d7:70:27:2b:1f:de:
ac:db:ae:55:b3:2a:45:4e:0c:8b:9b:e1:35:ca:ed:
12:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:E5:C2:D2:00:E3:2D:C4:1F:88:B2:76:A3:E7:68:5F:7D:21:A1:D4
X509v3 Authority Key Identifier:
keyid:CE:94:C3:1E:15:DF:4B:7A:60:E5:D4:0D:F3:AA:C1:85:2E:8D:A7:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zpTDHhXfS3pg5dQN86rBhS6Np0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:e2:bc:aa:82:4d:07:41:3c:e8:e2:0b:4d:46:1c:6d:27:7a:
a7:1f:a0:27:bc:af:d9:f9:44:28:d6:f7:30:ee:a2:65:47:c6:
22:4b:fb:b3:e9:3c:d3:1f:bb:3e:6c:49:e8:13:9b:d0:19:d3:
e5:d1:73:af:73:b7:e6:3e:f7:d2:90:92:d6:92:8d:37:5b:38:
95:1c:8b:47:7e:32:95:ca:fa:15:6b:6b:6f:fc:2c:09:d4:f8:
ee:2b:1d:c0:32:ba:09:f1:7a:51:3a:1c:2b:d6:a5:15:10:50:
ac:48:f4:52:10:bd:90:4a:63:14:df:82:55:ef:75:1a:6c:1c:
92:a5:12:6a:61:fd:bc:b6:aa:2a:5b:e6:73:58:bd:8d:64:7c:
42:64:23:8d:3a:a9:62:a7:06:04:b9:9c:2a:00:25:64:59:e6:
b1:b8:ec:c2:2e:3e:a5:31:a6:ef:02:ab:7a:3a:27:90:e1:3c:
ad:a9:93:90:f1:ef:f3:50:76:b9:ff:d9:cd:ca:75:8e:52:0f:
a4:f0:72:55:32:d4:f1:c8:68:54:f8:7b:01:45:1f:12:c7:cf:
fc:5c:2b:42:ba:09:4e:0d:d7:14:56:f5:9b:52:67:d0:61:9f:
07:b4:9f:64:45:93:88:4e:26:fa:33:c8:8a:b3:96:a2:7c:6a:
27:b1:ae:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:57:36 2026 by rpki-client