Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft
File: Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft (raw, json)
Hash identifier: Q2GibQzIHXFz9s7Y6hWYcM4PCef6o/g6OlvZjnsjSZI=
Subject key identifier: 9B:E6:B8:03:C9:27:A4:5A:B9:BF:83:0A:9D:D3:25:BE:3C:3F:C9:AF
Authority key identifier: 66:5E:17:C0:8A:CD:C7:7E:94:4B:28:39:50:8F:1F:D7:11:E8:E9:7B
Certificate issuer: /CN=665e17c08acdc77e944b2839508f1fd711e8e97b
Certificate serial: 019F916C8E426D7EEA7D525E212CE3CBC793
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zl4XwIrNx36USyg5UI8f1xHo6Xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft
Manifest number: 0963
Signing time: Fri 24 Jul 2026 00:00:38 +0000
Manifest this update: Fri 24 Jul 2026 00:00:38 +0000
Manifest next update: Sat 25 Jul 2026 00:00:38 +0000
Files and hashes: 1: C_VRFP2HIVQ92IBRqKDUpWFoIEw.roa (hash: vn7JZEI6f0C3P1aOSgIzdjUGS6glebz8hQYfRM3UhMg=)
2: IAnS6bEzch3TIofLALz1ygB0iyo.roa (hash: lyXUvYyQfJt4aH/SJqViQQv03gKvKKB5vsWtq0xG3Ro=)
3: Zl4XwIrNx36USyg5UI8f1xHo6Xs.crl (hash: 73HSLP1K/e1W0+HqGBcvTL1E2JyK1uwFXOKLWeko4YY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zl4XwIrNx36USyg5UI8f1xHo6Xs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:8e:42:6d:7e:ea:7d:52:5e:21:2c:e3:cb:c7:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=665e17c08acdc77e944b2839508f1fd711e8e97b
Validity
Not Before: Jul 24 00:00:38 2026 GMT
Not After : Jul 25 00:00:38 2026 GMT
Subject: CN=9be6b803c927a45ab9bf830a9dd325be3c3fc9af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:87:15:61:72:4e:a1:73:61:c8:7a:37:22:a0:
5b:b0:27:b5:c5:ed:9a:cf:c4:0b:9b:fe:dc:2d:83:
38:7b:82:44:05:a4:5d:d1:08:cd:42:d4:9d:ad:d7:
0a:60:1f:a1:45:39:cc:2c:44:4e:76:b6:d6:9c:33:
a4:3c:9b:20:ab:3b:d5:03:dc:8b:ce:f3:4f:a2:9e:
5a:a3:56:bc:97:6c:33:44:db:19:a6:42:86:3e:20:
f0:0d:25:26:fb:02:2f:cc:0a:02:95:a2:6d:10:ee:
59:a1:4f:3c:37:c2:b0:fe:95:bc:60:13:36:06:cc:
fd:1e:10:6c:9a:40:e9:ac:d8:b3:83:22:1c:ab:6c:
ae:1b:75:cd:eb:1e:b7:d1:92:34:f3:93:5e:a7:71:
d5:c8:d7:4f:4c:cc:8d:c9:8b:df:71:e5:0d:4e:61:
e4:49:a4:ae:0a:51:f5:c1:6c:66:ed:29:bb:ad:85:
7e:0b:5a:6c:d1:cc:06:c5:28:ee:3d:d6:c4:3c:c5:
ab:53:bd:78:a1:a3:85:e7:ce:45:04:3f:bb:24:1d:
22:ed:de:0a:d1:60:88:ef:d4:db:fe:49:41:a4:bf:
06:73:bd:c0:f6:23:49:23:77:15:9e:13:06:be:c6:
f6:58:98:73:c7:ce:02:1b:01:5b:fd:46:3e:17:63:
4f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:E6:B8:03:C9:27:A4:5A:B9:BF:83:0A:9D:D3:25:BE:3C:3F:C9:AF
X509v3 Authority Key Identifier:
keyid:66:5E:17:C0:8A:CD:C7:7E:94:4B:28:39:50:8F:1F:D7:11:E8:E9:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zl4XwIrNx36USyg5UI8f1xHo6Xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:7e:9e:03:b6:6c:a0:ef:5d:4b:8c:b7:c4:d7:df:3f:e2:39:
2f:cb:4e:da:a9:fc:17:0a:ae:86:0c:e1:2b:34:b7:6e:09:51:
9e:fe:55:32:a5:8c:bd:cf:c1:65:17:6e:21:47:ac:aa:cc:4d:
73:cd:b9:59:1f:a2:d4:6d:b0:ef:0c:90:98:0a:c4:bf:79:c7:
85:74:e7:52:67:9c:cd:4d:35:f2:73:c2:6a:4d:a0:ff:bb:77:
33:d6:be:2e:74:69:38:3b:c7:1f:3a:40:8f:d6:e1:f6:d2:90:
41:da:01:28:38:c6:b6:f5:0a:2e:59:cd:f6:e3:b3:1d:fe:83:
41:09:d3:da:3c:51:55:30:93:51:32:81:e5:cd:24:5d:06:8f:
2e:ea:24:0c:6d:a0:91:1a:46:fa:77:b2:77:f0:07:d1:14:f9:
67:c2:91:f5:74:76:1f:1a:10:0c:3d:14:32:c4:1d:d8:57:a1:
ce:65:39:c5:df:55:12:bf:28:b5:a9:5c:ba:90:85:7b:fb:06:
78:86:4e:76:8b:81:70:a9:d4:7a:ec:7b:98:95:f2:8b:97:ed:
e2:3e:52:e1:3b:d0:71:f1:4a:fc:1e:3c:f5:1b:62:2d:fe:9b:
6c:01:79:55:f7:7a:cd:0e:af:4d:79:56:58:fc:d0:62:47:47:
7a:58:28:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:31:58 2026 by rpki-client