Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/ZC8kHMyieCtfxAfhu696l6mEdGA.mft
File: ZC8kHMyieCtfxAfhu696l6mEdGA.mft (raw, json)
Hash identifier: L7LE2kWWqoKKS8OW/miEOn0QMCnNYIbQu5zl0+UZb5A=
Subject key identifier: C6:F1:43:A0:A8:C0:E2:6D:57:B8:1A:BB:DE:08:9E:12:5C:F2:61:C3
Authority key identifier: 64:2F:24:1C:CC:A2:78:2B:5F:C4:07:E1:BB:AF:7A:97:A9:84:74:60
Certificate issuer: /CN=642f241ccca2782b5fc407e1bbaf7a97a9847460
Certificate serial: 019F91DB0FE5D1EE5484CAADE4E2596A1466
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZC8kHMyieCtfxAfhu696l6mEdGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/ZC8kHMyieCtfxAfhu696l6mEdGA.mft
Manifest number: 0AFB
Signing time: Fri 24 Jul 2026 02:01:20 +0000
Manifest this update: Fri 24 Jul 2026 02:01:20 +0000
Manifest next update: Sat 25 Jul 2026 02:01:20 +0000
Files and hashes: 1: ZC8kHMyieCtfxAfhu696l6mEdGA.crl (hash: J3fnW5vo4OGvsGLnIGGdOPDFDs70Kx55nV9Rfs5nx14=)
2: ekOzOiDdfxxEUE52B61ICsigaF0.roa (hash: 6fj4c7wjlH2wB374dMtlshl1OSG/zfWE+ZknbaJj2LQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/ZC8kHMyieCtfxAfhu696l6mEdGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/ZC8kHMyieCtfxAfhu696l6mEdGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZC8kHMyieCtfxAfhu696l6mEdGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 02:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:db:0f:e5:d1:ee:54:84:ca:ad:e4:e2:59:6a:14:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=642f241ccca2782b5fc407e1bbaf7a97a9847460
Validity
Not Before: Jul 24 02:01:20 2026 GMT
Not After : Jul 25 02:01:20 2026 GMT
Subject: CN=c6f143a0a8c0e26d57b81abbde089e125cf261c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c4:a3:08:7d:6c:74:70:0a:51:48:67:0c:58:
1e:91:42:a2:0a:6e:25:ce:f2:ef:e7:f9:6f:f8:d4:
85:7d:3b:d6:b8:59:8a:f2:ae:1d:2b:60:8c:f4:20:
77:ad:ab:cf:ce:e1:19:f9:4f:1c:e2:1b:0f:dd:dc:
8d:40:51:da:16:ee:fa:27:54:14:72:80:9f:38:0c:
39:56:7b:68:de:1a:34:42:18:34:91:5b:42:bc:30:
09:1a:fe:eb:83:59:47:2e:46:e9:23:cc:8f:fb:d9:
10:96:29:ae:1e:09:42:ad:c6:f1:1d:a8:e2:6b:1d:
c4:29:a2:54:b1:ec:c3:3d:9a:b4:9c:4a:ba:c0:5e:
37:4c:1c:78:4f:62:cf:c3:01:f7:9f:13:ba:68:f6:
b3:2a:6f:48:38:ba:2d:37:ea:54:e1:7e:8b:a7:27:
bf:97:a3:bc:85:77:f3:d3:0c:b9:32:3a:d9:28:d6:
3d:e8:02:37:0c:7a:42:07:ed:d7:96:99:3d:15:c8:
f4:15:e9:f0:92:27:f8:8e:5a:8b:f2:77:e2:ae:67:
e9:b4:16:6c:6b:f4:26:ae:29:9c:fa:2d:ed:69:63:
9f:53:67:44:40:95:9f:eb:ca:ef:e2:68:10:27:f8:
5e:f5:d1:2a:05:b2:94:23:19:33:2b:ec:de:57:8e:
66:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:F1:43:A0:A8:C0:E2:6D:57:B8:1A:BB:DE:08:9E:12:5C:F2:61:C3
X509v3 Authority Key Identifier:
keyid:64:2F:24:1C:CC:A2:78:2B:5F:C4:07:E1:BB:AF:7A:97:A9:84:74:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZC8kHMyieCtfxAfhu696l6mEdGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/ZC8kHMyieCtfxAfhu696l6mEdGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/ZC8kHMyieCtfxAfhu696l6mEdGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:6b:aa:2f:92:33:60:37:18:05:59:10:0d:6b:d8:5a:64:36:
63:d1:ed:da:f3:c5:da:19:9d:5f:05:c4:29:1b:be:e7:8c:20:
09:7d:05:a6:9e:c1:4c:4e:28:51:39:48:1f:31:90:46:8e:ff:
7e:31:47:88:86:fa:ad:e8:ed:d6:44:eb:fd:05:dc:19:e6:56:
6c:0b:be:fc:39:39:3c:d0:25:df:67:5c:6c:b1:83:00:21:a0:
a1:4b:4d:d3:c9:39:a2:2d:77:d9:18:e8:bd:90:07:5a:6f:fc:
d8:31:6f:3e:47:40:51:0e:74:e2:51:fb:91:b6:e2:89:df:79:
13:b8:9b:f5:e9:6a:f5:d0:35:59:08:6d:d2:1b:6b:2a:d0:38:
1b:20:3f:a9:5d:1a:32:8b:a7:9e:75:c5:d7:8b:ee:35:45:f4:
d0:32:2c:38:da:a1:64:d7:ef:a9:49:d9:d5:bc:37:59:57:a5:
76:8b:df:fb:bb:b3:5e:a7:97:04:b1:40:11:d6:7f:f5:12:cb:
32:9d:17:54:7a:85:d4:01:c9:5e:4b:7d:9e:7d:a3:52:6f:d0:
44:61:f9:49:da:64:0b:ec:c3:3a:1c:11:fa:3c:7c:0e:28:38:
ad:22:fe:a0:75:d2:70:13:dd:1f:c2:5b:b7:6d:a6:c9:0d:14:
d0:af:c6:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:01:48 2026 by rpki-client