Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/ce69f0-b6e1-4ba6-b9e0-4eb2695a868d/1/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.mft
File: zx1_8Bb_9dA5qWiaQ8k-hP5F28g.mft (raw, json)
Hash identifier: h9cNaf4hfte8+6RkeEAbsToX2b5jVso/kk7aPYMam+8=
Subject key identifier: EB:42:2F:91:CD:8D:3C:4D:DF:4F:93:AD:9D:38:0D:C8:A5:54:0B:38
Authority key identifier: CF:1D:7F:F0:16:FF:F5:D0:39:A9:68:9A:43:C9:3E:84:FE:45:DB:C8
Certificate issuer: /CN=cf1d7ff016fff5d039a9689a43c93e84fe45dbc8
Certificate serial: 019F935C2B3C8133E44787EA63D7C4AEE0DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/ce69f0-b6e1-4ba6-b9e0-4eb2695a868d/1/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.mft
Manifest number: 1735
Signing time: Fri 24 Jul 2026 09:01:58 +0000
Manifest this update: Fri 24 Jul 2026 09:01:58 +0000
Manifest next update: Sat 25 Jul 2026 09:01:58 +0000
Files and hashes: 1: PAK2KvwTG30-jUzj7sYacw3L9ic.roa (hash: Lb1okikdPiNmYkmLldNkAdsJr1dPWTMaZXm3lhpA5to=)
2: zx1_8Bb_9dA5qWiaQ8k-hP5F28g.crl (hash: fCYTCyemQj77iQSZUWCQbJHXKe4zkfRfBfFyG8zdvpk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/ce69f0-b6e1-4ba6-b9e0-4eb2695a868d/1/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/ce69f0-b6e1-4ba6-b9e0-4eb2695a868d/1/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.mft
rsync://rpki.ripe.net/repository/DEFAULT/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5c:2b:3c:81:33:e4:47:87:ea:63:d7:c4:ae:e0:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf1d7ff016fff5d039a9689a43c93e84fe45dbc8
Validity
Not Before: Jul 24 09:01:58 2026 GMT
Not After : Jul 25 09:01:58 2026 GMT
Subject: CN=eb422f91cd8d3c4ddf4f93ad9d380dc8a5540b38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e0:e8:d3:cd:c0:06:1f:3e:bc:16:2c:0e:fc:
59:8e:44:cd:d7:88:d4:49:04:2b:8c:57:f0:0b:0d:
e3:15:ef:e6:c8:e7:41:37:b8:30:f9:d9:bb:c4:e5:
20:36:a4:59:dc:82:60:3f:6e:df:95:00:e9:05:52:
c7:0b:b0:0d:98:b8:72:3f:56:e4:50:53:dc:89:69:
31:90:57:10:90:4a:50:aa:b3:90:06:4d:e5:39:66:
1b:73:84:71:ba:fa:78:e6:7a:27:9b:38:f7:00:df:
f1:bb:21:05:80:0d:e7:66:7c:8d:8e:06:10:bd:10:
2b:80:ed:d4:e0:38:a7:47:21:2f:96:31:cd:5f:8d:
e5:59:17:56:d2:1e:c0:67:3f:b2:3f:d0:af:d8:8b:
a4:8c:54:35:61:f0:e4:66:cc:99:d4:7c:28:f4:46:
de:a1:43:fa:9b:95:cd:d1:ff:49:6c:1c:57:cc:71:
61:be:e1:22:58:96:46:be:76:95:a9:22:09:73:c4:
02:03:ee:3a:4c:60:98:49:03:8e:c7:24:44:a7:aa:
1c:5b:e2:d2:bb:74:38:21:50:bc:c1:de:69:08:f0:
28:bb:e0:ed:2b:6e:b3:5a:1f:6d:3a:af:19:10:5f:
62:13:c4:98:2e:e0:01:8c:94:66:e0:5a:24:2a:7d:
b3:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:42:2F:91:CD:8D:3C:4D:DF:4F:93:AD:9D:38:0D:C8:A5:54:0B:38
X509v3 Authority Key Identifier:
keyid:CF:1D:7F:F0:16:FF:F5:D0:39:A9:68:9A:43:C9:3E:84:FE:45:DB:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ce69f0-b6e1-4ba6-b9e0-4eb2695a868d/1/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ce69f0-b6e1-4ba6-b9e0-4eb2695a868d/1/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:a4:b2:46:67:05:af:66:b8:c2:8c:fe:7c:d4:ae:92:2c:41:
47:31:c8:95:71:be:6d:0e:df:6d:37:86:03:4e:4c:59:2e:9f:
f7:15:0c:77:2c:00:1b:7c:20:b3:fe:1f:be:0a:f1:54:20:54:
5d:48:eb:25:e5:cd:1c:95:5f:37:02:a9:20:c9:d5:5f:34:11:
7f:da:64:62:49:87:43:2d:b7:c3:6d:52:a6:c1:f3:de:84:48:
78:20:87:91:7f:98:e2:23:eb:07:16:63:68:f4:53:9a:3f:dd:
7b:10:30:8f:11:59:75:0f:fd:4f:dc:c3:5a:7d:c7:c1:5d:2e:
35:0e:23:e1:26:08:94:42:02:fd:0d:45:26:a2:c6:c0:7f:5e:
ad:60:81:e2:4c:aa:0c:88:d0:37:08:bc:ed:a6:ed:77:22:8a:
d0:06:31:74:f9:bd:99:76:0f:36:a5:e9:54:ee:24:91:b4:47:
11:18:80:3f:e5:d3:01:8c:8a:0f:9d:a9:c7:24:cc:c1:47:9d:
c3:9f:ed:9f:a2:8f:57:b8:39:e2:ae:24:7a:1d:04:74:8d:15:
9f:06:c4:8a:71:7d:e1:08:de:7b:55:17:94:37:a5:94:07:86:
b3:83:91:77:f8:3a:5e:ff:2d:e8:c9:bf:61:f9:c3:c0:39:67:
67:ef:72:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:28:57 2026 by rpki-client