Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/9fb5e0-5508-49f4-9f9e-34362415182a/1/zoCPTPJWR31wopTRMBbCToQn1cI.mft
File: zoCPTPJWR31wopTRMBbCToQn1cI.mft (raw, json)
Hash identifier: sD7R6IMotP0lc2Sb/bFTT87BimIVy++5n4WuU87gbJ0=
Subject key identifier: 9B:37:92:B9:AE:1D:FB:DE:4E:16:36:CF:0C:6E:D3:B3:86:2E:1A:DF
Authority key identifier: CE:80:8F:4C:F2:56:47:7D:70:A2:94:D1:30:16:C2:4E:84:27:D5:C2
Certificate issuer: /CN=ce808f4cf256477d70a294d13016c24e8427d5c2
Certificate serial: 019F935B28F7DE8302E9A2E9457AB4577F19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zoCPTPJWR31wopTRMBbCToQn1cI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/9fb5e0-5508-49f4-9f9e-34362415182a/1/zoCPTPJWR31wopTRMBbCToQn1cI.mft
Manifest number: 41
Signing time: Fri 24 Jul 2026 09:00:52 +0000
Manifest this update: Fri 24 Jul 2026 09:00:52 +0000
Manifest next update: Sat 25 Jul 2026 09:00:52 +0000
Files and hashes: 1: _JmG_0xrHcMFjUFl8DJsIFUaYD8.roa (hash: 7k5k2uPEyUiwrs4Pq2qVmxoQcxV+zQ2r/avbqedzahU=)
2: zDXzBZeXum8l30Cf-mJ2T8gbfQg.roa (hash: sIKKghlLT4flRrCI8RlvLEJlP+eAnZaJEqf8oP1H+nw=)
3: zoCPTPJWR31wopTRMBbCToQn1cI.crl (hash: TEcoIkjQ9Vbi/4lYVJERF5e4h8TtJFL2IeyP32DCkBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/9fb5e0-5508-49f4-9f9e-34362415182a/1/zoCPTPJWR31wopTRMBbCToQn1cI.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/9fb5e0-5508-49f4-9f9e-34362415182a/1/zoCPTPJWR31wopTRMBbCToQn1cI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zoCPTPJWR31wopTRMBbCToQn1cI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:28:f7:de:83:02:e9:a2:e9:45:7a:b4:57:7f:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce808f4cf256477d70a294d13016c24e8427d5c2
Validity
Not Before: Jul 24 09:00:52 2026 GMT
Not After : Jul 25 09:00:52 2026 GMT
Subject: CN=9b3792b9ae1dfbde4e1636cf0c6ed3b3862e1adf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d0:9c:aa:3e:81:1b:ef:40:74:74:35:0b:4f:
58:ea:a7:82:cb:3f:a8:6b:95:f9:03:4a:66:9b:e8:
ed:c4:a0:0a:90:af:8e:59:3f:a3:cb:ba:21:06:16:
d1:9f:5b:aa:1b:07:64:d0:ac:93:48:d9:1f:74:56:
d6:74:56:49:fe:78:19:4f:b6:b1:0e:8b:28:81:36:
12:31:e0:b3:cd:23:fb:f8:4b:49:7e:23:c1:2a:44:
bd:29:23:58:77:a7:cd:15:95:e3:54:48:cf:5e:0a:
23:2f:61:00:22:f6:e5:ed:e5:d6:1b:05:39:cb:99:
1e:10:43:49:51:d1:d5:43:2f:cd:83:04:b1:45:bd:
79:f6:d3:d7:f4:50:e3:c5:f6:0a:e7:c9:a9:08:c1:
bd:1c:f3:a1:4c:9f:d1:d2:f2:7f:86:17:42:3d:55:
d3:b7:72:7f:1e:d7:06:03:f1:d4:40:f8:0c:9e:b7:
5a:d8:40:94:b6:ac:cc:e8:56:07:03:08:e1:e6:58:
28:4c:45:7e:44:a0:a0:3f:61:da:6d:c1:76:c2:ff:
bb:61:cd:b4:fd:a9:f2:43:f9:6c:d0:f3:33:ec:c1:
f3:94:72:3f:75:a1:df:84:ba:3a:0f:55:d6:ef:08:
ab:f9:70:83:a3:9c:52:ef:8e:41:ab:a7:ff:37:cd:
45:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:37:92:B9:AE:1D:FB:DE:4E:16:36:CF:0C:6E:D3:B3:86:2E:1A:DF
X509v3 Authority Key Identifier:
keyid:CE:80:8F:4C:F2:56:47:7D:70:A2:94:D1:30:16:C2:4E:84:27:D5:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zoCPTPJWR31wopTRMBbCToQn1cI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/9fb5e0-5508-49f4-9f9e-34362415182a/1/zoCPTPJWR31wopTRMBbCToQn1cI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/9fb5e0-5508-49f4-9f9e-34362415182a/1/zoCPTPJWR31wopTRMBbCToQn1cI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:99:1a:4d:a1:8e:d2:34:20:ad:cb:df:16:ff:89:c2:fc:f8:
77:3a:17:cd:21:9b:14:8d:ee:48:14:2a:39:2b:e9:8f:f6:f7:
24:af:33:01:93:1c:33:d3:4e:04:f1:aa:13:dc:82:d8:54:bc:
86:ea:66:8a:b5:4f:a9:77:28:91:de:40:80:9c:65:e2:4b:3a:
34:4d:76:74:81:a1:b4:09:65:b5:7b:83:7f:7e:07:31:0b:4e:
24:e7:f4:db:5d:1a:05:66:e6:fb:5c:d1:e9:36:4d:8f:94:91:
06:c8:a9:c0:1a:4d:45:22:50:47:21:35:9b:07:b7:5b:4a:d8:
41:32:54:a7:22:bc:8f:9c:17:99:06:9a:60:eb:c2:2b:0d:14:
76:fa:70:d1:1c:4d:98:fa:cd:4f:a3:2f:d7:b6:8b:a4:bb:c2:
43:1f:4f:98:e9:49:8d:a0:8a:8a:2b:df:b0:17:9e:de:0b:01:
a6:a4:f2:83:d4:4f:5f:ad:dd:b2:f3:ab:67:97:d0:98:6e:8b:
c5:ab:8a:fe:88:72:39:23:17:9e:13:17:aa:b9:23:34:e2:85:
93:c2:13:06:99:72:6d:e2:8f:df:c5:aa:41:55:cb:44:1d:4c:
70:3d:51:35:36:76:7e:43:6b:99:a5:79:4c:be:dc:a4:f8:4c:
92:17:74:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:42:11 2026 by rpki-client