Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/b7cd7c-5795-4146-8477-0da87b51ffac/1/ZpSrKKgJqi4Kd46pJbHtnSp3VxY.mft
File: ZpSrKKgJqi4Kd46pJbHtnSp3VxY.mft (raw, json)
Hash identifier: eAIv6KeLZxHAjSkjEl6pANsT32tsKMT5uUM0dxitcU8=
Subject key identifier: 28:42:ED:D2:2C:DB:4F:80:E3:FF:CC:45:AA:A3:52:09:FC:EA:32:0B
Authority key identifier: 66:94:AB:28:A8:09:AA:2E:0A:77:8E:A9:25:B1:ED:9D:2A:77:57:16
Certificate issuer: /CN=6694ab28a809aa2e0a778ea925b1ed9d2a775716
Certificate serial: 019F8F7F1981E1F00A3C30C96AEAA8283C20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZpSrKKgJqi4Kd46pJbHtnSp3VxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/b7cd7c-5795-4146-8477-0da87b51ffac/1/ZpSrKKgJqi4Kd46pJbHtnSp3VxY.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 15:01:39 +0000
Manifest this update: Thu 23 Jul 2026 15:01:39 +0000
Manifest next update: Fri 24 Jul 2026 15:01:39 +0000
Files and hashes: 1: 65lyhfcnUeev5X-4CcMUdWujCvQ.asa (hash: Q5VU2hVKSklyugtCkKPk1YQjPGPSs0Bldy1d061Ftg4=)
2: PQUU7wS6Dnj9yIlgV8Xc2NVBH64.roa (hash: KhnDFB03h86ec4eUqmqIrwmEs0JGq+ImfCvKHB/LolY=)
3: ZpSrKKgJqi4Kd46pJbHtnSp3VxY.crl (hash: r3JilzP7cFYm+UUhQPnC4rRPL9ND+zUiCDRXKzCsZ6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/b7cd7c-5795-4146-8477-0da87b51ffac/1/ZpSrKKgJqi4Kd46pJbHtnSp3VxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/b7cd7c-5795-4146-8477-0da87b51ffac/1/ZpSrKKgJqi4Kd46pJbHtnSp3VxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZpSrKKgJqi4Kd46pJbHtnSp3VxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7f:19:81:e1:f0:0a:3c:30:c9:6a:ea:a8:28:3c:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6694ab28a809aa2e0a778ea925b1ed9d2a775716
Validity
Not Before: Jul 23 15:01:39 2026 GMT
Not After : Jul 24 15:01:39 2026 GMT
Subject: CN=2842edd22cdb4f80e3ffcc45aaa35209fcea320b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:93:67:f6:04:33:85:fc:b7:1b:52:7e:7d:ca:
ae:19:6a:3e:82:bc:10:87:6c:b5:fe:a5:42:2e:49:
03:a3:0a:4d:73:eb:df:2b:e8:7f:c8:ae:b9:6f:61:
01:57:c0:bb:14:88:d7:b1:0b:f6:2d:69:69:54:f8:
0b:f2:5c:19:db:c1:eb:07:55:aa:38:5d:c0:bd:2e:
50:b6:1c:ad:5e:da:06:f5:87:0f:9b:86:4f:9e:7b:
20:c7:45:63:78:4b:9d:54:80:e1:7d:1c:d6:17:99:
c7:71:ef:e5:40:14:38:fe:65:0c:32:e1:1d:7b:37:
73:73:63:6a:42:a5:15:75:f6:ad:ee:1e:98:75:2e:
46:e9:cb:be:29:18:48:b5:74:ef:47:08:1a:c4:10:
82:58:99:1f:0c:29:4d:06:1f:dd:d2:d2:c2:a2:2c:
a8:bd:7a:8f:74:c2:b8:70:57:ec:81:35:6d:16:a1:
a9:9c:8f:2a:3a:fa:76:20:a1:c0:a3:a6:dd:13:fe:
41:f1:16:39:f8:8e:91:59:22:ed:c1:d6:f2:9b:d0:
ac:3c:a5:40:f3:68:d1:5d:22:8e:22:1a:f7:a4:23:
61:88:97:3e:f3:40:d9:ed:d3:d4:03:6e:7b:c9:12:
58:43:83:c0:0c:59:36:4a:09:e7:fe:90:e4:38:e7:
17:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:42:ED:D2:2C:DB:4F:80:E3:FF:CC:45:AA:A3:52:09:FC:EA:32:0B
X509v3 Authority Key Identifier:
keyid:66:94:AB:28:A8:09:AA:2E:0A:77:8E:A9:25:B1:ED:9D:2A:77:57:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZpSrKKgJqi4Kd46pJbHtnSp3VxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b7cd7c-5795-4146-8477-0da87b51ffac/1/ZpSrKKgJqi4Kd46pJbHtnSp3VxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b7cd7c-5795-4146-8477-0da87b51ffac/1/ZpSrKKgJqi4Kd46pJbHtnSp3VxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:00:b7:46:2d:9a:7c:10:8b:0f:8b:53:5b:07:54:e7:cd:0d:
6f:b3:2e:07:1a:98:e7:03:1c:b1:56:26:95:d4:b7:28:61:a4:
90:fd:35:a8:c0:c6:25:58:f8:1a:45:4d:49:06:fa:d1:c2:3c:
01:79:27:de:6f:1b:d6:0f:5a:15:05:e3:64:c4:c5:9f:e2:43:
af:26:dc:d9:e2:e2:96:eb:01:cf:d7:c0:0d:fb:ef:d3:0f:89:
3a:91:5c:a6:cb:2f:7f:e1:69:47:7f:d9:9c:08:0e:df:04:80:
ea:36:5a:a6:8f:7f:76:70:ae:71:0a:83:84:c9:44:45:ec:e5:
bc:27:17:89:20:4a:8c:28:4b:bd:89:ec:f9:c3:7e:2d:dc:9c:
52:5b:e7:c2:c8:d1:03:98:53:18:12:a4:c7:b7:9d:ec:fa:c3:
d2:ef:dc:e2:e4:d1:7c:1e:26:45:91:88:e7:35:0a:3f:0f:06:
8e:7a:c2:b6:01:18:53:84:8f:e2:60:f2:7d:d9:36:1e:2a:58:
96:0c:8b:c9:07:1e:16:ec:2a:57:1f:c9:6b:d5:3c:e1:43:3b:
ea:a0:b8:eb:8c:90:03:ca:96:19:6d:ce:c1:78:85:73:65:af:
b8:8c:ef:7f:f9:14:89:7c:f3:8f:0a:1d:57:7b:e6:bc:07:54:
1f:86:c7:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:08:11 2026 by rpki-client