Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/439cb7-4a36-425e-a084-dcf8ae924993/1/0ZFVeiDTKZYTxwLpmT6dWcObRwg.mft
File: 0ZFVeiDTKZYTxwLpmT6dWcObRwg.mft (raw, json)
Hash identifier: BePZM6iIg1yJqI0u4Ekpi68jpkAZm6yuZFiASatvDSc=
Subject key identifier: EC:D7:08:E7:11:4D:E5:0D:AE:FB:04:8A:9E:64:27:FB:0B:F8:9A:EF
Authority key identifier: D1:91:55:7A:20:D3:29:96:13:C7:02:E9:99:3E:9D:59:C3:9B:47:08
Certificate issuer: /CN=d191557a20d3299613c702e9993e9d59c39b4708
Certificate serial: 019F905A561D9CEB858F3E55074366F1BD37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ZFVeiDTKZYTxwLpmT6dWcObRwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/439cb7-4a36-425e-a084-dcf8ae924993/1/0ZFVeiDTKZYTxwLpmT6dWcObRwg.mft
Manifest number: 31
Signing time: Thu 23 Jul 2026 19:01:07 +0000
Manifest this update: Thu 23 Jul 2026 19:01:07 +0000
Manifest next update: Fri 24 Jul 2026 19:01:07 +0000
Files and hashes: 1: 0ZFVeiDTKZYTxwLpmT6dWcObRwg.crl (hash: QDPjFeglyMZfNGBt0L/pIsv1x4sW6aEyJqF55S9XwaI=)
2: sxcdm8hMPFs7hwfFtctneyGAbtY.roa (hash: qSfMKSLLYHXoos50NdW6B+8JG0v//N7ZW2DTOD6cmAA=)
3: zKunQbH1Pi1kuPKcXi66B2kK2GE.roa (hash: IW2iL6xlGt6vOJU5K2L4rfi0KiuOBllyiIH+ctseSa0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/439cb7-4a36-425e-a084-dcf8ae924993/1/0ZFVeiDTKZYTxwLpmT6dWcObRwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/439cb7-4a36-425e-a084-dcf8ae924993/1/0ZFVeiDTKZYTxwLpmT6dWcObRwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0ZFVeiDTKZYTxwLpmT6dWcObRwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:5a:56:1d:9c:eb:85:8f:3e:55:07:43:66:f1:bd:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d191557a20d3299613c702e9993e9d59c39b4708
Validity
Not Before: Jul 23 19:01:07 2026 GMT
Not After : Jul 24 19:01:07 2026 GMT
Subject: CN=ecd708e7114de50daefb048a9e6427fb0bf89aef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c1:31:2e:99:f2:68:23:69:a0:13:cd:76:a0:
09:68:86:a0:16:45:31:dc:04:4e:3c:7c:a5:9c:bd:
8c:ff:cc:31:08:e1:7d:af:70:18:88:78:ef:46:ac:
19:5b:5a:08:6b:39:90:38:78:34:bd:19:3d:15:d2:
6f:92:64:cb:7a:da:6f:49:70:53:db:f7:ee:3a:2e:
36:f7:38:f3:93:14:3c:52:d3:a0:61:9a:9f:55:22:
d7:7c:3e:05:2c:c3:ad:67:8f:47:a1:2e:57:41:7c:
78:b2:d3:2e:d6:43:7d:ea:63:66:60:9a:58:ea:76:
25:20:b6:d9:e7:aa:4c:19:b9:a5:a2:6b:a0:65:fa:
aa:c3:08:5b:98:04:c9:f7:bf:a4:ff:74:1d:e8:70:
28:f3:c0:7e:2b:d2:dd:da:17:43:9c:9c:d4:37:84:
62:6b:d6:65:a2:8f:b8:4f:6f:46:3f:09:c2:0e:8d:
e1:b3:fe:21:68:34:46:24:5a:76:23:10:07:f8:51:
75:cf:e1:39:f0:99:e4:c3:ab:f4:56:0b:52:e0:b2:
73:ee:2b:89:5e:8e:f6:3f:f7:99:a8:2c:92:c5:2e:
a5:0f:cd:81:c2:3c:40:9d:3e:ef:3c:7b:51:fd:29:
c5:fd:56:c4:bd:dd:90:96:79:f6:2d:c6:2b:20:95:
b5:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:D7:08:E7:11:4D:E5:0D:AE:FB:04:8A:9E:64:27:FB:0B:F8:9A:EF
X509v3 Authority Key Identifier:
keyid:D1:91:55:7A:20:D3:29:96:13:C7:02:E9:99:3E:9D:59:C3:9B:47:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ZFVeiDTKZYTxwLpmT6dWcObRwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/439cb7-4a36-425e-a084-dcf8ae924993/1/0ZFVeiDTKZYTxwLpmT6dWcObRwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/439cb7-4a36-425e-a084-dcf8ae924993/1/0ZFVeiDTKZYTxwLpmT6dWcObRwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:68:de:cf:f0:a2:b6:5e:be:2c:0f:f2:49:27:e3:1c:33:5a:
04:1b:29:3c:2a:e7:9c:cd:86:d0:8d:b4:9d:a1:53:fb:b0:91:
4a:4b:8d:9d:77:ab:92:d3:61:be:61:9d:0f:fc:33:db:02:fd:
65:34:12:53:39:23:1f:60:dd:66:e7:1c:5d:08:20:9f:24:47:
fc:dc:0c:84:34:d1:f8:fb:bf:e4:72:a6:d4:c0:b6:a6:06:b5:
ac:c0:08:ab:26:ee:e9:29:b5:c3:0a:51:18:3a:4f:17:73:63:
82:6f:cc:b5:1e:8e:32:cf:37:fe:f5:18:8e:03:d2:29:d7:6f:
be:af:c9:7c:98:27:ec:b9:e5:7d:e7:01:4a:22:da:2e:ce:d5:
cf:ed:75:eb:e1:21:69:67:61:16:df:3e:50:b0:31:08:32:c9:
d4:8c:00:86:a7:63:c1:e3:85:22:8d:3a:28:ed:52:b2:43:0c:
8c:e2:00:63:19:e9:f3:c4:a3:d1:3f:c5:5f:aa:cd:57:dd:d7:
88:91:f3:b4:5b:f3:1d:0f:5f:52:63:19:61:bf:50:2d:5c:18:
a0:98:27:9b:b4:90:55:61:99:08:43:c7:f6:90:57:70:17:d0:
99:96:12:07:8f:02:f2:60:31:15:42:4e:27:dd:06:29:44:27:
f5:c6:57:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:26:44 2026 by rpki-client