Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/96d0e2-184f-47e3-9bf6-55a03cb83bf6/1/zsyfK4Jf2WfpeMQgknlZX88zLFo.mft
File: zsyfK4Jf2WfpeMQgknlZX88zLFo.mft (raw, json)
Hash identifier: tZFAHA4VBzN0ONeVzqDK8flSEQl714WHkWE8pv3Uaec=
Subject key identifier: 23:6B:3A:F2:76:98:05:F3:F4:20:C3:3C:BF:87:AC:25:84:E3:60:3B
Authority key identifier: CE:CC:9F:2B:82:5F:D9:67:E9:78:C4:20:92:79:59:5F:CF:33:2C:5A
Certificate issuer: /CN=cecc9f2b825fd967e978c4209279595fcf332c5a
Certificate serial: 019F935B967401B737652A29396BFC075181
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsyfK4Jf2WfpeMQgknlZX88zLFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/96d0e2-184f-47e3-9bf6-55a03cb83bf6/1/zsyfK4Jf2WfpeMQgknlZX88zLFo.mft
Manifest number: 195A
Signing time: Fri 24 Jul 2026 09:01:20 +0000
Manifest this update: Fri 24 Jul 2026 09:01:20 +0000
Manifest next update: Sat 25 Jul 2026 09:01:20 +0000
Files and hashes: 1: WH9MtYAjhnZexRfLWNZUYcRJcYU.roa (hash: KLzTItCMkuqh0f0qD5QoElv/ivKn4xdXzfd7Tf8Ak2s=)
2: zsyfK4Jf2WfpeMQgknlZX88zLFo.crl (hash: xIbQiKWZS/g34vKfwJvRuTMmd3y0XjQOOpmMBZz1IIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/96d0e2-184f-47e3-9bf6-55a03cb83bf6/1/zsyfK4Jf2WfpeMQgknlZX88zLFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/96d0e2-184f-47e3-9bf6-55a03cb83bf6/1/zsyfK4Jf2WfpeMQgknlZX88zLFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/zsyfK4Jf2WfpeMQgknlZX88zLFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:96:74:01:b7:37:65:2a:29:39:6b:fc:07:51:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cecc9f2b825fd967e978c4209279595fcf332c5a
Validity
Not Before: Jul 24 09:01:20 2026 GMT
Not After : Jul 25 09:01:20 2026 GMT
Subject: CN=236b3af2769805f3f420c33cbf87ac2584e3603b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f7:fc:af:05:0e:cc:77:d6:b4:ca:bb:02:47:
fb:57:68:e7:6f:ae:41:8b:e9:10:13:eb:4f:80:a5:
fd:1d:ef:41:4b:2b:c3:b0:f5:2c:7b:b7:44:ca:3b:
b7:65:0b:c5:21:de:58:a3:92:95:18:88:2b:30:d8:
0d:4d:1f:a9:73:f4:70:8d:d8:db:4e:da:a8:8a:77:
ea:96:e1:6c:84:a3:11:01:34:e7:5a:f7:77:b2:73:
93:75:45:86:b2:bc:af:54:b8:0e:93:d0:96:c9:73:
f4:32:f4:51:56:92:a2:ca:4f:b7:0a:33:a4:ba:b4:
cf:88:af:62:c0:e5:8c:9a:91:65:54:53:a9:46:b4:
a7:a5:ad:c0:eb:9c:df:d5:01:5e:34:49:1a:3e:ec:
7d:6c:ee:61:3a:82:38:d3:ba:02:98:8d:45:b7:70:
0d:23:2b:a6:65:db:34:db:a4:a4:f7:58:a8:6a:d9:
20:82:e7:b3:3a:23:c8:86:eb:8c:fd:d4:d8:7d:93:
a2:07:a8:46:4a:5d:28:a3:50:95:83:a2:3c:7a:80:
43:90:de:19:39:ea:ec:55:0f:46:14:df:f9:b8:05:
be:a4:27:c1:a2:bd:a9:4b:61:90:ba:15:05:d9:34:
59:fd:0b:82:cf:ed:f8:3b:2d:8e:01:bd:6a:92:40:
fb:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:6B:3A:F2:76:98:05:F3:F4:20:C3:3C:BF:87:AC:25:84:E3:60:3B
X509v3 Authority Key Identifier:
keyid:CE:CC:9F:2B:82:5F:D9:67:E9:78:C4:20:92:79:59:5F:CF:33:2C:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsyfK4Jf2WfpeMQgknlZX88zLFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/96d0e2-184f-47e3-9bf6-55a03cb83bf6/1/zsyfK4Jf2WfpeMQgknlZX88zLFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/96d0e2-184f-47e3-9bf6-55a03cb83bf6/1/zsyfK4Jf2WfpeMQgknlZX88zLFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:68:e2:9c:ae:8c:f7:79:90:f9:65:cf:86:ce:40:ba:e3:f4:
28:44:fc:66:43:e6:f9:8b:96:93:f3:46:23:d8:1f:25:de:b3:
b1:17:b5:65:bb:91:98:26:d6:c0:ca:ab:37:8d:60:f4:22:ac:
43:fb:07:48:45:19:04:ae:fc:43:29:65:40:3a:31:a2:05:56:
e4:5f:32:b0:79:8b:83:8f:c4:f4:6b:1b:d4:f1:a4:26:e5:4a:
16:02:cf:a5:c2:81:ed:b0:f0:e2:1f:a0:e0:b9:02:60:69:57:
79:38:7e:25:64:74:fb:58:08:4d:e9:ed:64:32:4e:59:37:cf:
be:32:64:b0:b1:69:9e:3e:ff:e1:39:3a:52:42:29:cc:62:ec:
cf:f8:96:9c:25:7a:07:09:58:f8:14:e1:4e:57:ec:04:51:c7:
b1:65:be:31:65:4d:b1:26:2e:3a:e3:2f:25:39:ce:18:a6:2f:
1d:12:0e:c3:73:35:5c:72:bb:9f:09:35:7a:45:97:ee:88:05:
84:18:7c:21:c9:d0:da:57:8b:7e:bb:f9:09:b7:bc:73:3e:5a:
68:99:0a:15:94:48:96:78:64:0f:2d:6b:05:2e:16:fc:39:e8:
25:7c:53:eb:4d:f0:9a:d6:62:08:57:23:a1:92:53:9d:a8:e9:
61:c1:10:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:27:27 2026 by rpki-client