Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/zZY90B7IDenhOMneRKNtSPBrk_0.mft
File: zZY90B7IDenhOMneRKNtSPBrk_0.mft (raw, json)
Hash identifier: VvP833FvDGSEfc7xVc01K20ZsRkb9ryTafkHe4azPzA=
Subject key identifier: 61:B2:C7:7C:C9:F9:44:0A:E0:B9:60:4D:FF:57:7B:E7:7D:01:D4:A1
Authority key identifier: CD:96:3D:D0:1E:C8:0D:E9:E1:38:C9:DE:44:A3:6D:48:F0:6B:93:FD
Certificate issuer: /CN=cd963dd01ec80de9e138c9de44a36d48f06b93fd
Certificate serial: 019F91DA7D97BBDDE03B0DD4D539DD583A6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZY90B7IDenhOMneRKNtSPBrk_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/zZY90B7IDenhOMneRKNtSPBrk_0.mft
Manifest number: 0FF3
Signing time: Fri 24 Jul 2026 02:00:43 +0000
Manifest this update: Fri 24 Jul 2026 02:00:43 +0000
Manifest next update: Sat 25 Jul 2026 02:00:43 +0000
Files and hashes: 1: TTo4BVEjNXzzXJclZ-0-kt2DI5w.roa (hash: hjAmuYuA2bu34wGu3wYkNL+2UTuhOaLaJGD6bAnWUE8=)
2: zZY90B7IDenhOMneRKNtSPBrk_0.crl (hash: /WmRQRsaaJG4jrc5OSjaU5dmlI3BPFUTltFpoavRnyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/zZY90B7IDenhOMneRKNtSPBrk_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/zZY90B7IDenhOMneRKNtSPBrk_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/zZY90B7IDenhOMneRKNtSPBrk_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:7d:97:bb:dd:e0:3b:0d:d4:d5:39:dd:58:3a:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd963dd01ec80de9e138c9de44a36d48f06b93fd
Validity
Not Before: Jul 24 02:00:43 2026 GMT
Not After : Jul 25 02:00:43 2026 GMT
Subject: CN=61b2c77cc9f9440ae0b9604dff577be77d01d4a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:21:be:b2:4d:34:5a:50:6e:fc:fb:04:e6:50:
1e:72:52:15:66:a6:2d:4c:9e:d0:5b:26:b5:83:45:
07:d8:a0:8f:58:02:f5:25:46:fb:80:9f:15:d5:d1:
04:be:92:5f:59:dc:b1:a2:8a:e1:b5:ec:93:9d:c1:
00:a0:a7:54:3d:08:79:78:37:78:40:af:9c:2e:05:
c0:80:6d:e7:1f:08:0a:9d:a3:19:81:54:b8:26:37:
f9:cc:31:65:97:52:e0:0a:c8:28:63:ab:44:4e:62:
aa:f6:f8:10:6a:99:ff:58:42:bf:34:b7:23:26:c7:
50:cb:06:62:3c:38:b9:ff:85:59:f7:0d:f6:18:a9:
23:a7:54:f5:7e:26:cb:27:f1:2c:2d:fe:ca:d8:84:
0e:c3:2a:7c:ea:94:d8:df:8d:82:be:cd:91:06:76:
22:af:1e:25:1c:65:63:57:34:10:be:67:49:db:81:
b1:53:95:1c:da:ff:8c:a4:8f:12:83:8e:02:15:a2:
7f:ec:93:c6:e9:c2:ce:b7:f2:91:19:61:38:de:f8:
f7:8b:bd:ae:16:a5:d1:3c:6c:87:4a:75:8f:5b:c7:
f2:0c:07:36:5e:cb:ab:5c:b2:f8:01:a4:27:e3:b5:
5f:aa:88:3c:c8:7d:f3:a3:f7:a8:bb:04:ac:ac:0f:
b8:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:B2:C7:7C:C9:F9:44:0A:E0:B9:60:4D:FF:57:7B:E7:7D:01:D4:A1
X509v3 Authority Key Identifier:
keyid:CD:96:3D:D0:1E:C8:0D:E9:E1:38:C9:DE:44:A3:6D:48:F0:6B:93:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZY90B7IDenhOMneRKNtSPBrk_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/zZY90B7IDenhOMneRKNtSPBrk_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/zZY90B7IDenhOMneRKNtSPBrk_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:f7:e9:99:84:6f:59:6c:e4:22:e8:f3:bf:b2:4c:e1:b3:09:
79:88:c1:0c:0c:c8:e7:9a:58:32:be:cc:18:b8:a4:9d:b8:90:
e2:30:01:50:cc:c7:08:3f:fb:ec:6f:be:5b:8d:f8:05:9d:b6:
04:13:d3:91:c1:96:60:89:a9:49:c2:f5:ce:f5:c7:5d:ac:88:
66:9a:d7:04:06:e6:b7:6c:9c:7e:23:80:bf:56:91:e4:a7:3f:
de:3c:27:57:c4:62:e3:bf:9b:f3:0b:6f:da:27:a4:bc:f0:4c:
41:66:71:1d:50:15:d9:f7:43:5c:a0:86:7d:99:7a:5d:9b:b6:
42:81:f6:e4:5d:4a:21:36:9e:85:fd:ab:c7:2f:19:cb:e1:06:
04:e0:f9:10:9e:a5:20:17:e4:10:de:1c:95:1d:9e:3d:a5:60:
72:d4:5d:16:6d:21:c5:04:fd:e7:49:ac:b3:69:9f:82:cb:a4:
47:bf:49:b3:58:ff:37:0e:37:d5:f0:8a:a2:2d:9a:da:fb:01:
94:6c:ae:5c:a8:80:e4:64:f3:69:6e:1c:61:31:9f:f6:61:18:
b1:8f:f0:22:6b:be:84:dd:8f:03:77:42:cb:0e:ac:09:28:89:
f7:26:1b:31:ba:ad:75:ae:f4:81:3d:6e:77:27:ae:38:eb:86:
19:a4:15:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:52:51 2026 by rpki-client