Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft
File: sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft (raw, json)
Hash identifier: G9K4rXAPE05gcWComVmpiakgtzlVeo8jI8VS0pfHpjg=
Subject key identifier: 8F:6D:4B:12:B9:D8:48:48:F5:E2:1B:74:00:18:61:28:D1:72:AC:5B
Authority key identifier: B1:94:F0:30:4E:ED:D3:63:C6:62:2F:D9:1C:59:B1:08:71:AA:30:44
Certificate issuer: /CN=b194f0304eedd363c6622fd91c59b10871aa3044
Certificate serial: 019F8E347AEA2A74122338EBBC71CCA55AC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sZTwME7t02PGYi_ZHFmxCHGqMEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft
Manifest number: 19C9
Signing time: Thu 23 Jul 2026 09:00:31 +0000
Manifest this update: Thu 23 Jul 2026 09:00:31 +0000
Manifest next update: Fri 24 Jul 2026 09:00:31 +0000
Files and hashes: 1: 1OKJSf7t7_lAiooOLlq2_b408jY.asa (hash: TVW+nVerXDEgPaaDUGrcKWYX2YALjhxpnf1JfzADSvU=)
2: B9HNNW3Bz7oID9G3-lfUfNqxyrY.roa (hash: tzCu3LyuSxup7J333i9m+mIRLj60qx1pJbahNRpyJGA=)
3: MUOyRWPN46PNKkdduP0g7nQfNok.roa (hash: fGl9qQgDH816kxRklhwGBTJ3WAbYJUjNKNT/W0cEqrc=)
4: sZTwME7t02PGYi_ZHFmxCHGqMEQ.crl (hash: IJNDcgQ0j8vQFEZDhFsvUMkzH4Wo1xEounJEDt6R+Sc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sZTwME7t02PGYi_ZHFmxCHGqMEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 09:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:34:7a:ea:2a:74:12:23:38:eb:bc:71:cc:a5:5a:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b194f0304eedd363c6622fd91c59b10871aa3044
Validity
Not Before: Jul 23 09:00:31 2026 GMT
Not After : Jul 24 09:00:31 2026 GMT
Subject: CN=8f6d4b12b9d84848f5e21b7400186128d172ac5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:99:9e:18:66:0c:a3:38:e1:07:a9:be:14:81:
fe:18:1a:54:8c:0d:d8:7b:4a:7e:f2:d3:ba:69:f4:
17:3b:ea:84:fc:90:6b:ea:e3:ea:9e:8b:1d:18:7d:
db:65:c6:3b:af:70:95:c5:58:99:0f:4c:06:d1:20:
f7:c0:43:ef:69:20:57:3a:51:25:5d:81:e5:12:cb:
69:47:53:29:64:34:de:a9:f8:cc:eb:6a:bd:c7:69:
92:76:67:84:ef:e0:94:0b:2f:00:5b:10:1e:38:92:
ee:5a:4d:1a:48:fc:e2:c5:c2:65:dc:bb:3f:02:2d:
29:5c:5e:6d:5a:81:2e:55:ed:c0:4e:95:93:a6:89:
f3:fd:80:2d:09:f8:cf:01:e4:f1:33:a7:0b:66:a3:
51:3f:a7:ac:5a:7d:ff:45:d3:c8:98:55:03:5a:59:
b6:71:29:c2:d4:6b:47:2e:43:e2:73:63:a1:75:fa:
e5:fa:6d:bf:d6:1c:89:2a:82:21:6f:67:7e:64:c7:
50:46:cd:1f:b6:7f:94:5b:c1:0a:ce:33:dc:4b:25:
70:2a:e8:0b:4a:f6:54:87:25:a6:7e:74:3a:0b:34:
cb:96:5d:09:46:1d:11:2d:de:7e:46:58:ef:b2:35:
2b:f2:98:27:db:5f:0d:e3:51:72:bf:bf:09:5e:54:
bd:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:6D:4B:12:B9:D8:48:48:F5:E2:1B:74:00:18:61:28:D1:72:AC:5B
X509v3 Authority Key Identifier:
keyid:B1:94:F0:30:4E:ED:D3:63:C6:62:2F:D9:1C:59:B1:08:71:AA:30:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZTwME7t02PGYi_ZHFmxCHGqMEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:66:1b:d2:33:1c:df:20:b8:c3:a7:50:0c:1a:ac:13:e8:13:
28:8d:a0:9e:ef:19:ab:6f:f7:92:9d:ca:b6:cd:7f:dd:5e:34:
df:98:83:01:98:c6:bb:95:e8:b2:8e:ae:c1:36:c4:72:5f:99:
98:11:32:24:14:89:b8:ab:ba:7a:81:84:f3:3f:64:9d:f2:0b:
9a:be:38:3e:35:56:28:65:f1:52:c1:15:81:ea:93:fa:24:af:
8f:49:ce:51:35:d4:36:70:03:fa:6e:25:bf:97:98:0a:0f:fb:
1c:a7:30:d8:41:fa:bc:db:00:54:3c:eb:8b:fb:ae:74:10:4f:
3b:f0:bf:35:03:4e:11:68:fa:1b:b9:a1:70:35:11:70:b1:66:
32:53:45:97:5a:cb:6e:0a:56:86:4a:2a:82:d4:f9:f6:70:f2:
47:62:47:0d:5f:80:46:db:4e:a7:fc:e4:f3:b3:2d:7d:af:8a:
32:83:e1:e4:5a:9c:1d:7e:e7:4d:8b:2f:3f:92:2d:13:e2:3a:
1d:39:15:e2:07:fa:1a:af:d3:1e:7d:e9:ea:ab:0b:0a:95:fd:
8f:04:6b:c5:04:10:9d:2b:56:5a:ac:a6:8b:cd:24:87:6f:d1:
a5:64:aa:56:fe:27:f1:e9:29:11:4c:67:8b:ac:f9:fc:f4:92:
22:20:89:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:03:31 2026 by rpki-client