Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/c38360-743a-428f-ab97-6369b17ff178/1/zS0l92kTYIeMus6YWJC59e_PfZU.mft
File: zS0l92kTYIeMus6YWJC59e_PfZU.mft (raw, json)
Hash identifier: uh4fncB2mDhWyqOjBevOgfqCH8cjE7UYYpHp3SFyc3E=
Subject key identifier: 95:59:7B:89:82:AB:1A:31:75:C7:3E:A9:AA:62:CE:77:CA:BC:DE:9D
Authority key identifier: CD:2D:25:F7:69:13:60:87:8C:BA:CE:98:58:90:B9:F5:EF:CF:7D:95
Certificate issuer: /CN=cd2d25f7691360878cbace985890b9f5efcf7d95
Certificate serial: 019F92ECD91614144B91D5CAD599E2898EFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zS0l92kTYIeMus6YWJC59e_PfZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/c38360-743a-428f-ab97-6369b17ff178/1/zS0l92kTYIeMus6YWJC59e_PfZU.mft
Manifest number: 191E
Signing time: Fri 24 Jul 2026 07:00:23 +0000
Manifest this update: Fri 24 Jul 2026 07:00:23 +0000
Manifest next update: Sat 25 Jul 2026 07:00:23 +0000
Files and hashes: 1: RqKPi2xz-dA9iWopa2S6eD63VNM.roa (hash: sh/U5dfnaz+hJ1QK4InqZNRlbTTXVEErKQaPltkS37U=)
2: zS0l92kTYIeMus6YWJC59e_PfZU.crl (hash: UPelj/vJ3Gje50o36gKK49XkissMtOrXMchCVN7BHHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/c38360-743a-428f-ab97-6369b17ff178/1/zS0l92kTYIeMus6YWJC59e_PfZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/c38360-743a-428f-ab97-6369b17ff178/1/zS0l92kTYIeMus6YWJC59e_PfZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/zS0l92kTYIeMus6YWJC59e_PfZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ec:d9:16:14:14:4b:91:d5:ca:d5:99:e2:89:8e:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd2d25f7691360878cbace985890b9f5efcf7d95
Validity
Not Before: Jul 24 07:00:23 2026 GMT
Not After : Jul 25 07:00:23 2026 GMT
Subject: CN=95597b8982ab1a3175c73ea9aa62ce77cabcde9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:af:7e:b3:8c:ac:a1:82:6a:29:8e:f7:1b:ce:
ba:41:0c:f6:2c:96:d7:ca:18:26:f8:42:79:db:34:
ca:07:da:4e:d9:af:df:89:79:81:3a:9e:03:83:b3:
61:0c:b8:0b:2e:1f:d3:c1:98:88:3b:f4:db:f8:5a:
a5:e6:dc:22:08:2c:65:ce:9d:51:5a:2b:04:10:28:
5b:a3:8a:87:63:66:1b:dd:d0:7d:18:a7:bc:89:a4:
3d:d9:da:43:43:9d:3b:87:f2:f7:4f:fb:c9:4b:67:
0b:c4:c3:db:52:e9:b7:e3:55:11:b7:f4:c5:b5:67:
7f:d8:3b:e9:15:48:26:b5:ec:a1:d8:66:53:0e:1e:
e7:ab:c1:3e:d9:cd:ea:9d:dd:e7:b3:e1:2f:19:a9:
9e:eb:45:77:8a:f7:54:bb:b6:ab:70:6d:15:5d:31:
e6:e6:0e:e3:b1:6b:24:00:3b:16:b3:b9:73:91:07:
a0:0c:51:40:5e:65:33:c6:7a:e4:0e:79:b0:95:3c:
7f:b2:58:c8:79:a1:16:20:1d:00:18:cd:2c:78:0f:
7a:e0:62:d2:39:83:eb:6d:7c:50:8b:7a:a9:a5:3e:
1c:d6:04:6e:51:46:64:06:6e:eb:05:a5:bc:a5:13:
73:06:49:7f:42:9c:ee:d1:a2:10:62:10:df:31:63:
1f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:59:7B:89:82:AB:1A:31:75:C7:3E:A9:AA:62:CE:77:CA:BC:DE:9D
X509v3 Authority Key Identifier:
keyid:CD:2D:25:F7:69:13:60:87:8C:BA:CE:98:58:90:B9:F5:EF:CF:7D:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zS0l92kTYIeMus6YWJC59e_PfZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c38360-743a-428f-ab97-6369b17ff178/1/zS0l92kTYIeMus6YWJC59e_PfZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c38360-743a-428f-ab97-6369b17ff178/1/zS0l92kTYIeMus6YWJC59e_PfZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:0f:95:50:7a:d1:f6:f9:39:93:de:57:00:9e:bf:db:18:ca:
43:26:d5:9e:7e:66:5c:54:2b:75:21:47:e3:5d:9d:c7:29:f8:
68:0c:1a:d2:36:2e:17:49:58:f6:91:da:f9:ff:6d:9e:52:0e:
cc:a1:43:ef:1d:9c:ca:ba:9d:33:8a:ca:fc:98:63:50:e1:e6:
2f:73:44:4c:99:86:d7:61:63:27:47:09:58:81:be:f1:53:bc:
36:d6:ff:76:92:4e:6b:aa:a1:e9:db:9f:cb:8a:9a:a6:e2:60:
a1:98:7c:1f:27:61:2d:a4:00:87:8e:b4:5c:ed:f5:cf:81:d9:
87:76:5f:81:ca:22:b3:0d:2c:ae:72:6e:7f:c5:c5:5f:fd:d8:
15:fb:30:22:03:bd:1a:ac:7c:56:5a:ac:dc:64:91:23:b8:62:
c6:54:4e:26:c6:1c:7c:af:e7:1c:5a:dc:57:83:ea:ee:dd:be:
8d:25:2d:50:42:9c:bf:20:05:17:09:c3:14:b9:b5:7b:45:08:
2d:9a:79:80:eb:71:ac:f5:0f:4c:c4:7f:08:87:bd:5b:6f:8a:
32:04:90:28:e2:66:db:0c:5a:ef:a3:14:84:c2:22:cc:c7:de:
68:22:75:c2:09:e2:82:ee:5b:ab:26:00:5b:e3:9b:46:91:b9:
64:c0:b3:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+S7NkWFBRLkdXK1ZniiY76MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkMmQyNWY3NjkxMzYwODc4Y2JhY2U5ODU4OTBiOWY1ZWZj
ZjdkOTUwHhcNMjYwNzI0MDcwMDIzWhcNMjYwNzI1MDcwMDIzWjAzMTEwLwYDVQQD
Eyg5NTU5N2I4OTgyYWIxYTMxNzVjNzNlYTlhYTYyY2U3N2NhYmNkZTlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwK9+s4ysoYJqKY73G866QQz2LJbX
yhgm+EJ52zTKB9pO2a/fiXmBOp4Dg7NhDLgLLh/TwZiIO/Tb+Fql5twiCCxlzp1R
WisEEChbo4qHY2Yb3dB9GKe8iaQ92dpDQ507h/L3T/vJS2cLxMPbUum341URt/TF
tWd/2DvpFUgmteyh2GZTDh7nq8E+2c3qnd3ns+EvGame60V3ivdUu7arcG0VXTHm
5g7jsWskADsWs7lzkQegDFFAXmUzxnrkDnmwlTx/sljIeaEWIB0AGM0seA964GLS
OYPrbXxQi3qppT4c1gRuUUZkBm7rBaW8pRNzBkl/Qpzu0aIQYhDfMWMfGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJVZe4mCqxoxdcc+qapiznfKvN6dMB8GA1UdIwQY
MBaAFM0tJfdpE2CHjLrOmFiQufXvz32VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelMwbDkya1RZSWVNdXM2WVdKQzU5ZV9QZlpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9jMzgzNjAtNzQzYS00MjhmLWFiOTct
NjM2OWIxN2ZmMTc4LzEvelMwbDkya1RZSWVNdXM2WVdKQzU5ZV9QZlpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS9jMzgzNjAtNzQzYS00MjhmLWFiOTctNjM2OWIxN2ZmMTc4
LzEvelMwbDkya1RZSWVNdXM2WVdKQzU5ZV9QZlpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbA+VUHrR
9vk5k95XAJ6/2xjKQybVnn5mXFQrdSFH412dxyn4aAwa0jYuF0lY9pHa+f9tnlIO
zKFD7x2cyrqdM4rK/JhjUOHmL3NETJmG12FjJ0cJWIG+8VO8Ntb/dpJOa6qh6duf
y4qapuJgoZh8HydhLaQAh460XO31z4HZh3Zfgcoisw0srnJuf8XFX/3YFfswIgO9
Gqx8Vlqs3GSRI7hixlROJsYcfK/nHFrcV4Pq7t2+jSUtUEKcvyAFFwnDFLm1e0UI
LZp5gOtxrPUPTMR/CIe9W2+KMgSQKOJm2wxa76MUhMIizMfeaCJ1wgnigu5bqyYA
W+ObRpG5ZMCzGQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:08:26 2026 by rpki-client