Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/208623-268c-4bf6-b947-f459235d987b/1/zPae-KVIMMWntjeJH8PJCrEsung.mft
File: zPae-KVIMMWntjeJH8PJCrEsung.mft (raw, json)
Hash identifier: bFEtBFzqrasSqt64lGlGvZBX7SAu9xhLmfZvQkk2CAE=
Subject key identifier: B8:74:61:7D:4F:E9:70:64:98:F0:85:78:2F:DB:20:D6:59:CE:55:F6
Authority key identifier: CC:F6:9E:F8:A5:48:30:C5:A7:B6:37:89:1F:C3:C9:0A:B1:2C:BA:78
Certificate issuer: /CN=ccf69ef8a54830c5a7b637891fc3c90ab12cba78
Certificate serial: 019F9625620AAB0496AF96477E9088711D10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zPae-KVIMMWntjeJH8PJCrEsung.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/208623-268c-4bf6-b947-f459235d987b/1/zPae-KVIMMWntjeJH8PJCrEsung.mft
Manifest number: 03F7
Signing time: Fri 24 Jul 2026 22:00:59 +0000
Manifest this update: Fri 24 Jul 2026 22:00:59 +0000
Manifest next update: Sat 25 Jul 2026 22:00:59 +0000
Files and hashes: 1: SMSEOT3Bw8BdVDxGYRzfDIZdEU0.roa (hash: Q+jvQC3Cp7YojEH0cGPSd1xy7T9E3c9+3+jfE13JjeY=)
2: g8Z517-jOmVF6Xu2Nxp8NTAxGx4.roa (hash: OXnUsbk5vh8et8vrHb0/ntkeJcO9A+ORppXS73LPvXg=)
3: zPae-KVIMMWntjeJH8PJCrEsung.crl (hash: 5PTDP0M6WBB1ApMTnsxi8Mo62unnQQfK84MFTZdi5MI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/208623-268c-4bf6-b947-f459235d987b/1/zPae-KVIMMWntjeJH8PJCrEsung.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/208623-268c-4bf6-b947-f459235d987b/1/zPae-KVIMMWntjeJH8PJCrEsung.mft
rsync://rpki.ripe.net/repository/DEFAULT/zPae-KVIMMWntjeJH8PJCrEsung.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:96:25:62:0a:ab:04:96:af:96:47:7e:90:88:71:1d:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccf69ef8a54830c5a7b637891fc3c90ab12cba78
Validity
Not Before: Jul 24 22:00:59 2026 GMT
Not After : Jul 25 22:00:59 2026 GMT
Subject: CN=b874617d4fe9706498f085782fdb20d659ce55f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:be:12:13:20:be:64:30:c4:64:81:bc:e5:5c:
9f:fa:95:4c:03:3b:f0:1f:8d:17:ae:05:e9:d8:d1:
c6:19:9e:a2:8b:15:4c:ab:98:a3:7b:d3:63:ae:4c:
e0:01:ea:94:a9:79:ca:58:da:43:1c:3a:c4:1c:bc:
db:2c:40:0e:1e:4b:12:a1:6b:66:a9:69:6e:c4:31:
6b:00:3d:d7:f8:98:b8:ed:89:ad:ff:86:33:38:76:
1f:37:3f:42:68:9f:80:e2:5c:22:b1:09:be:90:5e:
ab:e3:c4:6a:dd:ca:a9:b2:c0:0e:4a:02:5a:a6:c2:
a8:04:ff:86:d3:b3:fe:16:60:09:04:e0:f6:7e:6b:
37:b9:a7:47:b3:7e:00:89:00:8b:ce:58:4c:f8:56:
e2:55:cd:ef:8c:94:88:02:1f:1b:35:87:6f:09:b6:
e8:d9:e0:01:04:ea:fb:78:81:1d:76:dc:b3:1f:d3:
88:8c:dc:a2:31:87:4a:49:3a:34:7e:b3:31:27:ed:
e2:af:c4:39:75:3d:61:a5:7d:2b:cc:36:ff:3b:a0:
5f:6e:6a:a7:7b:e3:35:55:30:3f:85:ea:81:15:34:
f7:a3:21:63:9b:d8:7b:6b:cc:b4:5c:8f:52:2e:bf:
a7:46:a8:9d:f6:7f:ae:96:b0:5e:2e:86:af:58:1d:
e6:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:74:61:7D:4F:E9:70:64:98:F0:85:78:2F:DB:20:D6:59:CE:55:F6
X509v3 Authority Key Identifier:
keyid:CC:F6:9E:F8:A5:48:30:C5:A7:B6:37:89:1F:C3:C9:0A:B1:2C:BA:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPae-KVIMMWntjeJH8PJCrEsung.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/208623-268c-4bf6-b947-f459235d987b/1/zPae-KVIMMWntjeJH8PJCrEsung.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/208623-268c-4bf6-b947-f459235d987b/1/zPae-KVIMMWntjeJH8PJCrEsung.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:6a:7a:90:9d:4a:87:40:47:fa:bd:be:06:e9:f7:c0:ac:88:
2b:c3:7c:17:f6:7d:e3:e8:0d:1a:c7:46:61:fa:0e:db:66:f4:
e8:38:75:98:80:7c:3e:fd:16:50:a0:d6:38:40:25:f4:ab:bc:
b2:1e:96:a3:a0:3a:0c:78:cf:44:b2:56:33:3c:0f:3f:e2:54:
8d:4d:b4:24:a7:6d:92:e2:47:17:49:2c:d4:9d:34:17:3d:c8:
9c:88:b3:ea:74:bd:2c:9d:85:20:5b:b4:c1:30:ab:fb:69:44:
fe:75:f3:7e:b8:d4:3e:78:33:a3:dd:18:ec:10:15:b3:b8:ff:
fc:9d:a7:63:dc:fc:e0:c1:2b:b4:3a:d1:70:df:95:68:25:8c:
c3:7f:44:a7:6f:3f:48:cb:7f:9a:c9:7c:e5:28:02:c0:02:d3:
78:8c:ba:df:e1:04:ac:dc:ba:80:ad:da:b4:c8:2b:68:5e:55:
45:81:4e:42:db:e8:ed:e6:10:c1:63:18:6d:52:3c:9d:b8:75:
51:a4:76:c6:a5:4c:ff:10:13:80:d8:dc:c2:fc:d6:f8:73:d9:
9f:fd:40:5a:47:2c:30:91:20:49:ba:1e:52:c2:bc:0a:28:c1:
73:2a:70:53:39:5a:61:7c:fd:ad:7f:2d:d2:ed:d7:7b:c5:0a:
42:44:63:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 02:47:26 2026 by rpki-client