Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.mft
File: zBWcih5k_GT_ZmvZIZ3OF0NzyvI.mft (raw, json)
Hash identifier: 1CQJpn0tS70eWLk/bWUixk0tGcUmrD+bwV6Wnyv/sls=
Subject key identifier: FE:B2:7B:6B:D6:2F:E3:D3:67:FD:20:F6:21:9C:27:E7:7B:C8:91:2E
Authority key identifier: CC:15:9C:8A:1E:64:FC:64:FF:66:6B:D9:21:9D:CE:17:43:73:CA:F2
Certificate issuer: /CN=cc159c8a1e64fc64ff666bd9219dce174373caf2
Certificate serial: 019F935BF640FF46E4E9752CE608A7A28241
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.mft
Manifest number: 168F
Signing time: Fri 24 Jul 2026 09:01:45 +0000
Manifest this update: Fri 24 Jul 2026 09:01:45 +0000
Manifest next update: Sat 25 Jul 2026 09:01:45 +0000
Files and hashes: 1: CuEyheF-29dttpD6VLLaExCFGAA.roa (hash: R6vjhi7yIbFl0joD76O7Kh49JYPbEdB6dMSlf59XV7s=)
2: tSwu_rs-_T3OD9Pp5HQg9a8f-F0.roa (hash: OkFsnGmy75UDy40lQIElr+ClgPv+0wuI2ecBN6Kx84o=)
3: zBWcih5k_GT_ZmvZIZ3OF0NzyvI.crl (hash: /+tCTMisciozcYvazJsMaoSt5RsSGD7Lgj3s2qNZQjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:f6:40:ff:46:e4:e9:75:2c:e6:08:a7:a2:82:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc159c8a1e64fc64ff666bd9219dce174373caf2
Validity
Not Before: Jul 24 09:01:45 2026 GMT
Not After : Jul 25 09:01:45 2026 GMT
Subject: CN=feb27b6bd62fe3d367fd20f6219c27e77bc8912e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:75:43:b8:06:cb:2a:1c:68:1b:fd:c4:41:9d:
69:66:df:cd:dd:2b:5c:59:86:0b:50:00:e7:ac:4b:
46:db:25:46:71:bd:f3:66:26:0c:c0:ba:b4:46:bd:
98:02:13:ab:39:3d:20:d8:d4:00:92:35:27:ab:fc:
f0:dc:92:47:a2:dc:88:20:ac:aa:f1:69:b2:7c:e1:
9a:1c:2c:0c:40:df:af:fe:4e:86:d5:22:7e:03:c6:
c2:a8:16:78:2d:59:a2:16:24:42:98:13:a6:8b:cd:
ab:8c:c7:bb:a7:69:d5:0c:a5:47:c8:84:0f:9a:d2:
ab:7c:5c:3d:60:54:4c:b0:86:8d:6d:a4:dd:e0:6e:
a1:38:29:3b:13:fc:60:0e:ab:a9:14:4f:fc:36:c1:
93:a0:ff:a4:a6:a9:9b:c6:d2:9a:a9:d1:05:d3:66:
98:95:68:85:88:3c:78:4b:ed:10:8f:d5:d1:c4:36:
9b:1f:b2:6f:00:51:f8:22:d5:ab:20:65:d5:62:f0:
de:20:d3:eb:44:1a:d0:b8:3a:d2:6a:8b:76:61:67:
39:73:0d:21:c1:88:2a:6c:74:69:2e:a8:e9:92:df:
42:38:a5:d2:fa:f3:11:fc:0a:1b:11:8a:2a:ea:ca:
fe:23:11:06:95:d9:11:87:f0:58:4b:94:41:0f:15:
90:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:B2:7B:6B:D6:2F:E3:D3:67:FD:20:F6:21:9C:27:E7:7B:C8:91:2E
X509v3 Authority Key Identifier:
keyid:CC:15:9C:8A:1E:64:FC:64:FF:66:6B:D9:21:9D:CE:17:43:73:CA:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:dc:14:1a:77:80:fc:5b:ac:65:ee:e8:ac:98:ec:ea:7c:36:
c1:31:ff:69:e7:13:9d:13:9e:7c:3b:b7:67:4c:e0:db:8a:c0:
9b:be:85:98:3c:10:26:84:03:0d:7b:8d:c1:b6:57:8d:c3:5d:
c6:7e:ee:a1:0c:3f:4e:e4:fb:0d:4b:c5:d3:ed:df:80:47:c3:
98:58:6d:8c:58:16:64:6a:80:ef:5c:61:98:a7:9e:e9:98:b1:
f1:98:bd:44:e0:99:4b:a0:78:b3:bb:3b:36:b1:d7:2c:42:20:
33:c4:ce:27:a7:da:c0:1b:48:e4:32:30:02:e3:a2:34:80:68:
97:65:76:26:73:d5:e9:be:dc:8e:89:4f:68:26:0f:16:03:95:
3c:bf:91:9e:b3:54:35:06:70:ca:c8:e5:c0:83:cf:6c:94:a6:
df:f1:a3:73:12:28:53:e4:1c:9b:38:8a:25:65:4f:ac:07:af:
29:84:b7:e4:ef:65:0b:a0:b3:e6:b8:16:43:2e:aa:ea:50:d2:
32:ee:2a:3d:56:a5:d0:9b:96:92:19:d7:78:8f:b8:c5:13:b3:
e6:65:46:ce:db:e8:68:1e:4c:11:d6:cd:a1:2d:21:3e:d1:a6:
9c:ce:82:cc:9d:58:77:0b:d0:f4:1c:c6:5d:a1:f7:35:03:8d:
f7:4f:bf:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:02:47 2026 by rpki-client