Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.mft
File: Z-MMF5zUKoZBWDI0UBsY7_JRVUk.mft (raw, json)
Hash identifier: YiLevebMIg0Pl1AUfgoJ4/oh5IDFoPc0mMysRJQAkEM=
Subject key identifier: F1:7B:B9:76:BC:12:30:BB:17:9B:BE:7D:76:C7:7C:C1:23:B4:12:87
Authority key identifier: 67:E3:0C:17:9C:D4:2A:86:41:58:32:34:50:1B:18:EF:F2:51:55:49
Certificate issuer: /CN=67e30c179cd42a8641583234501b18eff2515549
Certificate serial: 019F95B7C97C2D6790044510B498C42CC323
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.mft
Manifest number: 094B
Signing time: Fri 24 Jul 2026 20:01:17 +0000
Manifest this update: Fri 24 Jul 2026 20:01:17 +0000
Manifest next update: Sat 25 Jul 2026 20:01:17 +0000
Files and hashes: 1: Z-MMF5zUKoZBWDI0UBsY7_JRVUk.crl (hash: LkxBMstbNJEKXB9GmZZb9HJSA9jDFybI5oJV5zkQiY0=)
2: dI0KgXxJI7glvO_mfsDPmIQ5NkA.roa (hash: F9yFe51qdVbE9AuCXASZZ90BbvMiZC4wn/OYeZyyhEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:b7:c9:7c:2d:67:90:04:45:10:b4:98:c4:2c:c3:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67e30c179cd42a8641583234501b18eff2515549
Validity
Not Before: Jul 24 20:01:17 2026 GMT
Not After : Jul 25 20:01:17 2026 GMT
Subject: CN=f17bb976bc1230bb179bbe7d76c77cc123b41287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2f:58:3d:cb:7d:4e:6d:9d:bc:a1:c6:82:a2:
29:5c:2b:71:7c:f5:dc:bf:46:e3:98:4a:2d:89:e9:
8d:c0:da:0e:93:9b:55:db:f4:78:c7:fe:ff:f1:7b:
89:d9:26:aa:6f:53:bf:7b:a6:46:55:9b:d3:8f:e7:
c2:a8:3e:c3:01:38:1e:16:8c:dd:37:4b:f9:05:cb:
03:a1:dd:66:e9:4b:2a:c1:ad:5b:21:c0:06:2c:76:
49:19:f8:2c:71:89:c2:3a:ac:74:60:2d:8e:c5:fd:
59:2b:a7:1f:81:6e:72:de:66:85:5b:a4:20:96:62:
76:6d:05:1c:af:7b:f5:90:71:da:dd:6c:62:d2:89:
20:33:1e:65:5a:c7:2f:b0:89:d9:6d:67:a3:45:71:
01:38:ce:cc:1f:b0:2e:98:2f:29:c5:4f:25:7e:63:
62:5d:30:bc:fb:c9:71:49:70:62:bc:80:de:1c:17:
0e:bc:f0:29:8f:97:ee:69:2f:da:ba:96:f2:a8:0e:
c8:01:32:ed:e7:31:1d:c9:69:0f:dc:3d:cf:33:d2:
cc:f6:a5:c7:a8:65:6e:00:89:34:82:3d:5c:0a:6a:
6f:2d:9d:28:69:b7:5c:be:46:f0:66:f6:0f:f2:a4:
e3:cb:0a:10:d3:d4:f0:2f:aa:8f:61:b5:99:30:40:
60:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:7B:B9:76:BC:12:30:BB:17:9B:BE:7D:76:C7:7C:C1:23:B4:12:87
X509v3 Authority Key Identifier:
keyid:67:E3:0C:17:9C:D4:2A:86:41:58:32:34:50:1B:18:EF:F2:51:55:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:2b:44:e6:95:34:8b:86:71:bf:85:6a:c0:28:87:04:8e:b3:
94:3f:19:ed:cc:72:70:2c:1f:47:ee:cd:8d:f4:ca:3c:9c:3c:
9b:65:37:20:11:93:55:97:18:87:8a:ac:c7:0f:15:50:aa:4d:
68:0f:a0:34:ad:1d:6b:95:03:e0:eb:ea:15:35:54:7c:4e:3a:
03:31:76:67:9d:33:c2:0b:dc:46:a2:6d:c4:0c:0a:df:54:14:
8a:0a:31:a8:55:b7:96:99:b5:c6:a6:b4:b9:99:43:10:c1:ff:
20:68:bb:e5:0a:d0:44:f0:ad:16:00:48:12:8a:9f:2c:60:a1:
11:03:9b:07:b1:58:6f:bd:23:22:14:33:30:30:52:ee:83:78:
9f:65:46:2a:e6:f9:2d:ba:bb:44:03:2f:17:de:89:92:bc:18:
43:ca:4d:8f:65:3e:58:da:50:c5:10:63:f1:56:3c:c4:a2:05:
7f:5b:07:1a:b2:0b:6f:bc:4b:f3:dd:28:0b:9b:ea:5c:57:ea:
d5:22:f7:3a:c7:63:53:01:59:36:4c:b1:7a:d3:e3:1e:dd:e0:
8b:75:96:91:00:f8:46:d4:ee:ae:80:84:40:8c:10:03:d4:a0:
dd:2a:cb:40:13:33:66:23:5e:d1:02:4b:c1:ad:32:59:8b:ef:
3c:9c:05:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 02:04:39 2026 by rpki-client