Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/zahD6BKxbexgu3CYykEzEX24R00.mft
File: zahD6BKxbexgu3CYykEzEX24R00.mft (raw, json)
Hash identifier: PgTeNPoMXtlitzC0b+0hzWzR63yG8ConvvaF62oQ0Rs=
Subject key identifier: BD:C0:3E:70:92:43:95:18:DD:CF:13:C2:1F:8D:27:0D:6E:ED:D6:A3
Authority key identifier: CD:A8:43:E8:12:B1:6D:EC:60:BB:70:98:CA:41:33:11:7D:B8:47:4D
Certificate issuer: /CN=cda843e812b16dec60bb7098ca4133117db8474d
Certificate serial: 019F94A4BCE0A220E7125811CF3B165B31C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zahD6BKxbexgu3CYykEzEX24R00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/zahD6BKxbexgu3CYykEzEX24R00.mft
Manifest number: 19C9
Signing time: Fri 24 Jul 2026 15:00:51 +0000
Manifest this update: Fri 24 Jul 2026 15:00:51 +0000
Manifest next update: Sat 25 Jul 2026 15:00:51 +0000
Files and hashes: 1: xAJAqKl5Srwo2ARzZhLG6xPoMEY.roa (hash: zXin4xfG6I9ng2fyOSNQGYSR3toHXgB+MkkZOtI6MnY=)
2: zahD6BKxbexgu3CYykEzEX24R00.crl (hash: 62Lo2Z1dIbItNHyPAVMdPE6fuhNeeLHyO2ZkxNyl4vw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/zahD6BKxbexgu3CYykEzEX24R00.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/zahD6BKxbexgu3CYykEzEX24R00.mft
rsync://rpki.ripe.net/repository/DEFAULT/zahD6BKxbexgu3CYykEzEX24R00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 15:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:a4:bc:e0:a2:20:e7:12:58:11:cf:3b:16:5b:31:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cda843e812b16dec60bb7098ca4133117db8474d
Validity
Not Before: Jul 24 15:00:51 2026 GMT
Not After : Jul 25 15:00:51 2026 GMT
Subject: CN=bdc03e7092439518ddcf13c21f8d270d6eedd6a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:bc:ab:87:ed:fe:83:3b:bd:77:ec:84:4c:74:
b1:6f:bb:bb:68:d8:ae:95:8b:b0:d6:90:00:b4:25:
12:75:70:d6:4d:7e:46:64:5c:f6:2b:18:ac:e0:06:
c2:a8:ff:95:de:2d:7c:65:13:1b:1f:fb:69:08:00:
7a:6a:c3:69:a9:37:ce:65:eb:a2:e0:ad:79:97:62:
2d:28:45:37:0e:cb:0f:39:9f:a6:ef:3e:7d:ca:ab:
a6:53:8e:b7:60:8a:d9:c4:d3:2e:47:18:69:c3:bf:
21:d6:a4:52:bd:17:2a:b9:54:60:7f:36:ed:7d:01:
67:19:76:19:dc:9c:c2:8c:72:29:79:4e:0f:60:bb:
26:53:2c:17:24:6e:99:53:d0:11:87:b1:c5:38:13:
ce:35:e0:7b:15:fe:41:08:55:60:a7:65:fa:a2:49:
34:83:2e:84:07:32:0e:f0:1e:18:a3:27:33:52:36:
78:f8:88:34:08:61:21:60:b4:76:9a:c5:fd:7b:bc:
43:ed:04:94:1e:cd:96:61:87:98:66:b6:cc:35:e2:
34:e7:9b:c6:de:e6:3b:df:c0:70:7e:65:f4:ef:52:
2a:f0:26:78:0b:36:9a:18:6b:45:ce:ea:6e:a4:f4:
39:30:8a:f4:aa:78:86:53:87:72:59:d7:dd:cf:b5:
2d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:C0:3E:70:92:43:95:18:DD:CF:13:C2:1F:8D:27:0D:6E:ED:D6:A3
X509v3 Authority Key Identifier:
keyid:CD:A8:43:E8:12:B1:6D:EC:60:BB:70:98:CA:41:33:11:7D:B8:47:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zahD6BKxbexgu3CYykEzEX24R00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/zahD6BKxbexgu3CYykEzEX24R00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/zahD6BKxbexgu3CYykEzEX24R00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:94:83:2c:81:40:af:64:c2:68:e0:82:5a:1b:e5:60:27:bd:
ac:51:1c:43:b5:8c:1d:6c:4a:f5:d3:62:35:0f:2e:00:0d:ff:
2f:7c:3a:a1:20:f0:50:62:94:7a:13:5f:c3:b8:07:b9:ee:e1:
f5:13:20:63:4e:e3:cd:88:e9:56:64:d5:33:f8:a5:3f:6b:75:
d9:b3:17:7e:bd:29:48:7f:23:2b:96:43:f7:11:ed:e3:30:e0:
78:9a:ab:81:91:b1:a9:a5:ae:85:43:00:90:c2:5b:24:12:84:
48:c1:59:ad:8a:1e:df:bb:c1:ae:81:5a:ff:4b:b7:76:be:40:
2c:3e:d3:4f:fd:c1:62:76:af:6d:c4:ca:9e:4a:37:54:46:77:
87:62:c4:38:c8:cc:51:9e:fb:57:3c:d6:83:6d:1f:98:ef:28:
33:79:c1:74:5e:4f:c1:2f:6d:e7:14:cf:e8:a8:19:53:c3:8e:
de:3a:c8:de:03:74:34:54:b9:54:60:1a:8c:f5:c1:33:d2:9b:
71:40:06:2c:28:7c:c8:15:26:74:9e:d7:99:81:9d:08:b2:0e:
77:10:22:e7:35:da:63:dc:18:48:99:99:53:2f:73:ad:b7:b6:
43:07:0c:ec:83:be:42:25:d1:0f:48:0f:85:e9:ff:16:a7:f5:
48:35:8a:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:40:12 2026 by rpki-client