Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/Z5JSueId-BdsxTgCeJX39FhWZqs.mft
File: Z5JSueId-BdsxTgCeJX39FhWZqs.mft (raw, json)
Hash identifier: kZXmC8UPuUrfDX68ah8Fpbu3H8w6pDeC64vqhsNsWAM=
Subject key identifier: B2:31:5C:9F:07:49:A0:4F:99:3B:92:A8:DF:A8:2A:5C:84:8D:4A:4C
Authority key identifier: 67:92:52:B9:E2:1D:F8:17:6C:C5:38:02:78:95:F7:F4:58:56:66:AB
Certificate issuer: /CN=679252b9e21df8176cc538027895f7f4585666ab
Certificate serial: 019F94DB5ABFE50B00E47C2A30943FF42785
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5JSueId-BdsxTgCeJX39FhWZqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/Z5JSueId-BdsxTgCeJX39FhWZqs.mft
Manifest number: 19C9
Signing time: Fri 24 Jul 2026 16:00:31 +0000
Manifest this update: Fri 24 Jul 2026 16:00:31 +0000
Manifest next update: Sat 25 Jul 2026 16:00:31 +0000
Files and hashes: 1: ATo6rNOsZvRHig1xnSfHpMmgc0Y.roa (hash: a0wsPiri9N8v0Qf4OIW+s20J9vgPW/O4uUqTrgadEUg=)
2: Z5JSueId-BdsxTgCeJX39FhWZqs.crl (hash: TGIvLDt603nmpyWw5k4Qy08LOHNvSMGgwcLUUwAcxRY=)
3: huyceIHVnvQkvqjpwCiPSV0-omg.roa (hash: iUSoYSpkqD2GKh9pN5QDirlx+fKKFecxfJ2ArcTf/QE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/Z5JSueId-BdsxTgCeJX39FhWZqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/Z5JSueId-BdsxTgCeJX39FhWZqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z5JSueId-BdsxTgCeJX39FhWZqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:db:5a:bf:e5:0b:00:e4:7c:2a:30:94:3f:f4:27:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=679252b9e21df8176cc538027895f7f4585666ab
Validity
Not Before: Jul 24 16:00:31 2026 GMT
Not After : Jul 25 16:00:31 2026 GMT
Subject: CN=b2315c9f0749a04f993b92a8dfa82a5c848d4a4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:9a:7b:65:af:9c:03:b5:aa:bb:3a:92:70:6b:
57:59:a2:8d:c3:be:17:82:4f:c2:c8:fe:3e:eb:16:
3f:2c:87:69:60:82:d2:60:a9:19:73:49:fa:47:1b:
ee:92:b9:5d:8d:96:6a:06:80:64:bc:1c:e0:25:20:
d1:0b:64:89:2f:eb:bd:80:a7:73:27:c8:9d:57:d8:
ea:0d:af:f4:64:f4:c6:95:72:92:af:84:00:45:09:
a7:aa:1d:10:59:a4:1a:84:4e:2b:7e:3c:e0:a9:d3:
33:0c:28:ca:3b:16:91:6e:9e:dc:df:ae:25:81:ca:
c5:1f:4e:92:d5:cd:dd:7a:28:a2:bb:db:1e:ed:9e:
bd:e9:56:4f:af:57:28:78:cd:12:82:2a:5b:b7:a5:
f4:5f:dc:ea:70:21:de:13:90:47:28:80:cc:87:4f:
fd:7b:f0:f8:27:df:f9:25:cc:46:6b:a6:f2:95:1b:
d1:54:68:8e:49:b0:16:a4:f5:b3:8d:ef:ea:58:95:
c0:af:0d:fd:91:8f:99:7b:ec:0c:bc:71:1a:d6:85:
a6:59:39:74:df:ec:f9:82:93:e1:36:0e:75:d8:71:
74:e6:d8:75:2f:3c:d5:d5:b6:c0:09:5d:7c:77:3c:
98:a5:29:63:1c:eb:27:37:02:1b:e2:3e:a7:21:52:
5a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:31:5C:9F:07:49:A0:4F:99:3B:92:A8:DF:A8:2A:5C:84:8D:4A:4C
X509v3 Authority Key Identifier:
keyid:67:92:52:B9:E2:1D:F8:17:6C:C5:38:02:78:95:F7:F4:58:56:66:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5JSueId-BdsxTgCeJX39FhWZqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/Z5JSueId-BdsxTgCeJX39FhWZqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/Z5JSueId-BdsxTgCeJX39FhWZqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:8b:05:5b:24:7a:35:5f:3a:f2:96:49:6d:f8:90:09:36:24:
3b:61:59:51:e4:d6:91:70:b4:11:86:7c:f7:3b:5e:c6:49:6d:
c6:87:0f:ee:71:56:c9:8e:d0:5c:9b:7e:fe:41:33:c2:de:52:
05:fe:ca:d4:87:79:05:bf:74:11:d8:91:40:a3:63:4b:32:47:
83:3f:21:f3:1a:9d:ea:bd:be:1a:96:28:8b:f6:27:44:7a:02:
5e:d3:54:d0:32:d1:b0:ef:37:ec:7f:77:0f:3b:19:d7:4c:35:
64:ec:17:6d:55:18:92:57:e6:8d:85:e1:ae:3c:a2:63:f4:07:
6d:90:97:82:a4:be:c3:14:03:40:9a:ab:fa:8f:c7:a0:fb:50:
bd:0d:de:05:5c:35:ca:9b:8d:af:0c:36:ea:c6:c8:f3:7b:c0:
f6:35:7c:b5:e0:37:7d:ee:e0:b3:9c:f6:d5:c2:d1:dc:f3:e0:
ee:80:c3:86:77:7a:7d:1d:7e:28:48:a1:0c:a1:e8:cf:98:92:
67:69:e3:b3:d6:5f:c5:1f:50:af:19:43:01:64:45:fb:c0:c7:
49:11:aa:27:46:78:43:5c:12:36:2a:a6:8d:a1:ce:ca:60:eb:
3b:25:8d:92:da:d2:7a:e6:60:34:93:cd:ea:5a:ad:ac:1a:14:
69:63:26:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 01:38:16 2026 by rpki-client