Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/zbFQJ29VuuRVmI06E-WTQQdNzQo.mft
File: zbFQJ29VuuRVmI06E-WTQQdNzQo.mft (raw, json)
Hash identifier: gnKxy21VgM2HvvefGitCulrzgZQnbiZ6hbZvPqPVnEw=
Subject key identifier: 30:FE:49:4E:0B:8B:1E:E9:BE:38:CF:3C:8A:F2:01:2F:6D:DD:5D:6F
Authority key identifier: CD:B1:50:27:6F:55:BA:E4:55:98:8D:3A:13:E5:93:41:07:4D:CD:0A
Certificate issuer: /CN=cdb150276f55bae455988d3a13e59341074dcd0a
Certificate serial: 019F946DD3E6C0544BE90637DA0E29BA3B0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zbFQJ29VuuRVmI06E-WTQQdNzQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/zbFQJ29VuuRVmI06E-WTQQdNzQo.mft
Manifest number: 19CB
Signing time: Fri 24 Jul 2026 14:00:53 +0000
Manifest this update: Fri 24 Jul 2026 14:00:53 +0000
Manifest next update: Sat 25 Jul 2026 14:00:53 +0000
Files and hashes: 1: lz_wShBEMScRLpNIlFJG1rBoiF4.roa (hash: d/v05QGqY1AL+DPGS5unWRu61oq5dQYWqSy/Y4KvwgA=)
2: zbFQJ29VuuRVmI06E-WTQQdNzQo.crl (hash: 2xNg6sW0wrxp1mlqWlg3XhM0xldrT12YqG89lCwU7oM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/zbFQJ29VuuRVmI06E-WTQQdNzQo.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/zbFQJ29VuuRVmI06E-WTQQdNzQo.mft
rsync://rpki.ripe.net/repository/DEFAULT/zbFQJ29VuuRVmI06E-WTQQdNzQo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:6d:d3:e6:c0:54:4b:e9:06:37:da:0e:29:ba:3b:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdb150276f55bae455988d3a13e59341074dcd0a
Validity
Not Before: Jul 24 14:00:53 2026 GMT
Not After : Jul 25 14:00:53 2026 GMT
Subject: CN=30fe494e0b8b1ee9be38cf3c8af2012f6ddd5d6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:82:d4:37:16:11:33:85:f7:91:d6:58:83:88:
5a:dd:c1:ac:c3:fb:99:a4:fd:6f:4f:c1:5c:cd:87:
73:e1:0b:4f:16:12:b7:b2:9a:a8:37:d7:eb:e8:e2:
5b:08:b1:97:ad:f6:d2:64:df:38:6f:d7:20:68:39:
f6:6b:00:3d:b2:de:52:f1:87:e2:91:fe:ea:16:49:
89:55:29:ae:1a:f3:51:73:bb:81:33:3c:54:85:95:
cd:82:df:6c:15:36:34:af:8a:29:5d:45:1d:39:ae:
80:4e:8d:27:87:74:cc:61:f5:4f:a9:bc:11:df:71:
d1:28:50:72:1e:25:66:0e:b6:ae:57:12:92:b9:f4:
7a:82:f3:33:c3:2f:55:6f:c5:4b:2c:5f:df:0d:d9:
73:2a:ca:6d:89:e9:8f:cc:1d:0d:84:53:ef:57:a6:
4c:52:3e:7e:31:fb:af:88:92:91:7d:b0:f6:b1:00:
7d:c6:2b:c6:84:7b:2c:0a:79:a5:ed:52:1e:2c:15:
58:31:6a:8e:cb:0d:fb:b9:95:81:8e:a9:72:9a:9e:
a4:cc:55:aa:62:3a:b6:b1:b8:ea:5e:fa:c7:4c:a4:
44:b5:49:f7:d7:ce:69:77:25:53:16:4a:5a:86:b5:
11:b9:02:43:f7:c5:3b:96:de:4d:85:b0:6b:62:8a:
0f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:FE:49:4E:0B:8B:1E:E9:BE:38:CF:3C:8A:F2:01:2F:6D:DD:5D:6F
X509v3 Authority Key Identifier:
keyid:CD:B1:50:27:6F:55:BA:E4:55:98:8D:3A:13:E5:93:41:07:4D:CD:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbFQJ29VuuRVmI06E-WTQQdNzQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/zbFQJ29VuuRVmI06E-WTQQdNzQo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/zbFQJ29VuuRVmI06E-WTQQdNzQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:e4:a1:a4:4f:6c:50:7e:8c:ab:21:6a:2a:05:2b:10:49:14:
ad:76:df:e8:ee:c2:fe:80:54:3b:d3:36:f1:88:cb:6c:ec:e4:
e7:4f:e9:3b:dd:16:37:fa:22:cf:8f:f5:60:e8:b5:bc:c0:a2:
3c:ee:6b:da:2e:78:3c:ef:de:17:c8:89:81:81:5d:eb:df:ca:
ff:bc:89:64:2e:5a:41:ad:ac:23:8c:0a:fa:35:a2:e6:af:5b:
fd:d1:4f:bd:82:a7:73:b1:ff:f0:73:0b:97:25:c3:f3:1f:c1:
c3:4a:9e:2c:2c:8a:03:fe:c5:4b:8e:f7:67:68:a3:c1:7c:ad:
e4:20:31:6a:2a:95:3b:0b:9a:66:32:60:39:c8:e7:95:29:58:
8b:e7:12:93:5f:de:c0:f1:16:47:7f:65:9a:73:51:f4:4f:87:
90:52:81:4b:ad:52:b3:7a:7b:01:22:43:e2:4a:52:98:9d:44:
7a:e5:df:ac:78:a5:de:4f:61:3e:72:53:26:77:2f:68:78:cc:
b0:41:26:af:de:44:52:9c:d7:9a:bc:04:07:2c:4c:3f:66:02:
33:c3:8c:3c:de:22:cd:62:87:44:f3:8d:2d:5f:f0:89:e7:c3:
e8:b9:aa:3d:0a:bd:25:c4:75:6e:0b:0d:c7:32:30:81:9d:98:
21:3b:eb:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:19:17 2026 by rpki-client