Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.mft
File: Z9FngbymTCsjZDTt7_5uRS5xYtQ.mft (raw, json)
Hash identifier: Z4VbcyEOtL2zUZih/qVYg1DRqmJtwudONyFjoAUtUZg=
Subject key identifier: 6D:FB:ED:15:A6:82:C4:E2:C4:EF:F8:FB:9A:2C:BC:AA:D8:C3:11:FA
Authority key identifier: 67:D1:67:81:BC:A6:4C:2B:23:64:34:ED:EF:FE:6E:45:2E:71:62:D4
Certificate issuer: /CN=67d16781bca64c2b236434edeffe6e452e7162d4
Certificate serial: 019F95B7B2764A2BB86E30CD9B17AF5DE225
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z9FngbymTCsjZDTt7_5uRS5xYtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.mft
Manifest number: 19C9
Signing time: Fri 24 Jul 2026 20:01:11 +0000
Manifest this update: Fri 24 Jul 2026 20:01:11 +0000
Manifest next update: Sat 25 Jul 2026 20:01:11 +0000
Files and hashes: 1: Z9FngbymTCsjZDTt7_5uRS5xYtQ.crl (hash: GyDtcj92dYp1Qfm9qZNSWukT0EX0LgbaSz7Ut522Ys0=)
2: mjYrOZuE7NERgZ0UM4YBqgcrJ0k.roa (hash: zm8SvAgNh+tsDlRXHMlAw5DptKIdz9z91tV1dCDIl7w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z9FngbymTCsjZDTt7_5uRS5xYtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:b7:b2:76:4a:2b:b8:6e:30:cd:9b:17:af:5d:e2:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67d16781bca64c2b236434edeffe6e452e7162d4
Validity
Not Before: Jul 24 20:01:11 2026 GMT
Not After : Jul 25 20:01:11 2026 GMT
Subject: CN=6dfbed15a682c4e2c4eff8fb9a2cbcaad8c311fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:08:be:f8:3b:c1:7d:c1:e5:38:ac:a8:24:dc:
61:25:4d:3d:d8:86:b0:07:5a:e2:4c:b7:ff:2c:ee:
70:90:51:36:28:58:d2:cf:c9:53:3e:e9:fa:e6:38:
d6:84:24:cb:d1:52:d1:3b:f8:4e:fd:46:cc:11:f4:
7c:5e:7f:af:dc:99:c8:57:04:f9:6a:fb:44:c0:97:
0a:15:e7:d3:c8:a5:59:d9:ef:a9:f0:45:45:bc:94:
f6:e7:2c:98:43:4c:09:38:42:55:d4:aa:bb:de:5d:
4f:f8:da:dd:63:88:b6:83:18:e7:b5:ca:f8:f2:43:
8c:35:da:a5:93:03:18:da:0a:08:9b:b1:77:17:f2:
71:b0:08:01:6a:86:69:6c:f5:a6:4e:e8:d3:1f:e2:
fe:63:e0:be:fe:5e:48:f7:e8:38:4d:6e:02:46:54:
a9:f2:73:3b:08:82:1a:fc:11:08:25:f0:67:78:a5:
d6:04:46:6a:cf:70:00:1d:be:5b:3a:74:7b:91:b6:
6e:7e:66:7e:e8:e1:44:dd:38:8b:a3:7f:fe:2f:fe:
29:cd:b9:24:e1:04:f2:17:2a:68:62:12:1c:24:8c:
24:ee:06:25:10:89:cb:26:83:17:9a:56:19:70:2e:
7d:15:21:79:03:32:8d:6e:c8:2e:c5:5c:ae:1d:6f:
37:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:FB:ED:15:A6:82:C4:E2:C4:EF:F8:FB:9A:2C:BC:AA:D8:C3:11:FA
X509v3 Authority Key Identifier:
keyid:67:D1:67:81:BC:A6:4C:2B:23:64:34:ED:EF:FE:6E:45:2E:71:62:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z9FngbymTCsjZDTt7_5uRS5xYtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:97:c9:12:7b:a3:ef:f6:0d:a8:34:a7:8e:f3:35:c0:a5:06:
f3:44:c0:93:a6:f5:69:09:0d:bf:5f:42:22:32:b6:5a:98:a3:
c8:76:a5:52:38:ba:17:ad:4a:82:de:03:6c:09:aa:84:86:59:
ba:54:5a:1c:4d:78:ae:5d:de:4e:f1:f1:72:cb:a4:6c:9e:e1:
31:e3:d8:7c:ab:a2:f7:cd:e0:c2:3f:0f:7c:44:67:89:c8:5e:
f3:8e:df:81:e9:79:92:43:70:e1:7d:87:89:d5:1c:b1:c7:da:
0d:20:08:7f:6e:8c:37:21:77:94:17:4c:c0:e6:71:69:95:7a:
96:6b:e7:36:a9:79:e0:4e:03:ba:f2:d5:3c:35:22:57:ed:80:
f1:b2:55:0d:a0:20:17:b7:36:53:e2:bf:43:5a:4a:24:98:89:
94:d8:b4:ac:e2:ce:fb:0c:e8:ca:38:67:72:1f:61:7a:68:14:
6c:ea:a9:75:10:43:f6:c9:38:bb:7c:09:12:97:3c:76:af:c6:
82:4b:62:35:26:be:bc:f7:f9:51:9f:99:c9:5c:c7:eb:2e:c4:
28:e1:92:d6:9e:ee:4b:3f:74:bc:e3:b5:9b:28:61:5d:c3:e2:
d6:f3:fb:36:95:4d:8d:1c:e2:61:19:b3:3a:93:15:7a:aa:7f:
2a:0c:bd:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:32:44 2026 by rpki-client