Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.mft
File: z0D92CoP3ztwvhgiHuumDYAe178.mft (raw, json)
Hash identifier: l6Pf81N/l4wcNGSyCYACMB6GG8C7zoCch7vPE+F4jsM=
Subject key identifier: 80:AB:69:B7:27:E2:3A:D1:AC:1E:0B:9E:D5:88:96:C8:1A:CA:75:BF
Authority key identifier: CF:40:FD:D8:2A:0F:DF:3B:70:BE:18:22:1E:EB:A6:0D:80:1E:D7:BF
Certificate issuer: /CN=cf40fdd82a0fdf3b70be18221eeba60d801ed7bf
Certificate serial: 019F92EDEA553C005447EA6EEADA2EC62E28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z0D92CoP3ztwvhgiHuumDYAe178.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.mft
Manifest number: 19DB
Signing time: Fri 24 Jul 2026 07:01:33 +0000
Manifest this update: Fri 24 Jul 2026 07:01:33 +0000
Manifest next update: Sat 25 Jul 2026 07:01:33 +0000
Files and hashes: 1: F_Dk1EXyZalcSUrQVrmmhufc-3c.roa (hash: Bud8p3xLXlXOrM2nbGi5ghblIRWjV7KfIKq7F8d9FoQ=)
2: P8VBM2Vt78MH0hTsTsDYoN1DCwo.roa (hash: BNrt6BqKbc/fkjdmpvHEP4BZdwanUa88eWbx1Ysrn8g=)
3: z0D92CoP3ztwvhgiHuumDYAe178.crl (hash: fCW2780vu/ep1KfWH524HvgScAnW9reViOWSYxuKr5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.mft
rsync://rpki.ripe.net/repository/DEFAULT/z0D92CoP3ztwvhgiHuumDYAe178.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:ea:55:3c:00:54:47:ea:6e:ea:da:2e:c6:2e:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf40fdd82a0fdf3b70be18221eeba60d801ed7bf
Validity
Not Before: Jul 24 07:01:33 2026 GMT
Not After : Jul 25 07:01:33 2026 GMT
Subject: CN=80ab69b727e23ad1ac1e0b9ed58896c81aca75bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c2:9d:34:d3:bd:bf:39:44:6d:30:7f:ef:47:
4c:16:16:29:d2:5d:bc:c4:41:94:72:e2:ba:e2:1c:
93:dd:dc:03:67:30:5f:0e:c7:6c:b1:99:f4:b9:64:
04:2b:6a:fc:ce:e6:b5:24:7d:3a:1a:06:9b:5c:43:
4c:a2:34:7f:33:45:9b:79:b1:7a:f5:72:6a:78:66:
74:9e:3c:7b:e1:29:4a:8d:1d:9a:54:46:21:bd:ce:
67:44:70:8a:95:89:fa:04:88:4d:48:fa:cc:4a:ac:
02:e5:34:5c:c9:5c:a4:18:b1:a1:46:b6:36:3c:64:
fb:00:c7:9a:37:22:60:8f:fd:4c:2c:29:76:63:8d:
9f:a8:3e:4e:89:6b:c1:b6:f8:40:e7:fe:b2:39:c4:
04:56:4a:94:27:f2:73:75:aa:77:c1:82:36:e6:3e:
82:72:ef:06:2c:63:6e:b1:76:8d:72:25:99:02:4f:
b5:e0:f1:da:d4:61:eb:7a:2c:f7:40:19:78:7c:31:
3e:99:92:ee:7c:c3:d3:99:4d:cc:0e:da:91:f6:44:
4a:60:43:05:61:65:43:82:e8:7b:34:60:ab:d4:15:
a3:9f:3f:a3:0e:86:ab:50:2a:ce:0b:87:d0:95:4f:
a0:f2:a7:23:e6:c1:cf:63:6b:0c:79:cc:29:53:ef:
82:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:AB:69:B7:27:E2:3A:D1:AC:1E:0B:9E:D5:88:96:C8:1A:CA:75:BF
X509v3 Authority Key Identifier:
keyid:CF:40:FD:D8:2A:0F:DF:3B:70:BE:18:22:1E:EB:A6:0D:80:1E:D7:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z0D92CoP3ztwvhgiHuumDYAe178.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:6f:db:14:f1:63:8a:a5:db:d7:ff:f7:3a:97:29:eb:15:ce:
37:d2:5a:e3:ad:3d:c1:1b:b2:65:04:36:4c:6d:04:c2:58:37:
84:be:73:09:8c:a5:d2:4b:ac:57:9a:ba:e4:7d:af:e6:c9:e6:
46:1a:49:09:95:fe:8a:0b:65:ee:07:4e:ed:4f:c0:07:91:50:
f3:31:7d:4a:d5:91:1a:80:67:ed:e1:c8:5b:70:c1:c8:33:56:
64:c1:48:86:5a:c2:ef:da:24:45:68:51:bc:d7:95:41:37:9b:
a9:8a:8c:0c:31:1a:f2:87:51:29:fa:1a:ca:cd:fd:c0:fa:fa:
27:f5:0e:d1:d7:63:2a:d6:99:e9:86:13:99:ee:8d:ef:40:0a:
64:fc:6e:5b:82:0a:63:8c:c6:fe:c8:91:3d:9d:69:3d:91:e9:
1b:15:73:35:a8:ff:9a:9c:bf:6b:50:9c:dc:9f:b2:a1:f6:c0:
a7:05:c3:c8:eb:2d:61:29:6d:4a:43:31:eb:2c:cf:ce:e5:b1:
bd:5b:16:d7:58:b5:b1:44:f0:5a:67:8a:3a:f3:9f:83:ac:02:
08:da:b2:83:25:96:bd:80:b6:24:31:f5:59:87:9f:7f:7e:9e:
64:ee:66:44:d2:3e:c3:a5:09:34:6c:8b:e3:1c:01:55:22:c6:
df:a5:f4:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:46:05 2026 by rpki-client