Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.mft
File: zm4aIgj6PxufPTj_8fjiw02RHzY.mft (raw, json)
Hash identifier: uMqC2AdghAEvHOiti2zLWUb4y3KUN8ke94NNwEENaVk=
Subject key identifier: 21:01:0B:AB:DB:C3:81:28:39:11:36:AE:AE:3A:F8:D6:67:21:D3:53
Authority key identifier: CE:6E:1A:22:08:FA:3F:1B:9F:3D:38:FF:F1:F8:E2:C3:4D:91:1F:36
Certificate issuer: /CN=ce6e1a2208fa3f1b9f3d38fff1f8e2c34d911f36
Certificate serial: 019F90FF64663F9F25F20BC326629FB17BB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zm4aIgj6PxufPTj_8fjiw02RHzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.mft
Manifest number: 12C5
Signing time: Thu 23 Jul 2026 22:01:24 +0000
Manifest this update: Thu 23 Jul 2026 22:01:24 +0000
Manifest next update: Fri 24 Jul 2026 22:01:24 +0000
Files and hashes: 1: v7WcqpRYWHh239LPGmTnapW7Q_w.roa (hash: xmjmImowRyBXLpG11gkpyM1tBT1YhUEBnShnhTtDYrk=)
2: zm4aIgj6PxufPTj_8fjiw02RHzY.crl (hash: mYY73NGDwCutA3W0wvxDptFsRXiciYh39va5ustnrvU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zm4aIgj6PxufPTj_8fjiw02RHzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:ff:64:66:3f:9f:25:f2:0b:c3:26:62:9f:b1:7b:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce6e1a2208fa3f1b9f3d38fff1f8e2c34d911f36
Validity
Not Before: Jul 23 22:01:24 2026 GMT
Not After : Jul 24 22:01:24 2026 GMT
Subject: CN=21010babdbc38128391136aeae3af8d66721d353
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:98:52:06:f5:a8:6c:50:bb:e2:95:45:d0:b7:
2d:32:c9:23:04:7c:4e:cf:4a:b4:7e:a9:e3:00:f7:
69:6a:40:39:77:a4:30:cd:1d:5e:f4:2f:bb:96:2c:
24:e5:75:37:91:8a:b7:c2:08:69:36:46:ef:98:ae:
92:e3:c0:dc:67:a7:23:2b:a5:12:d0:a7:14:4c:51:
45:70:a4:58:a7:34:8f:3f:16:b6:fb:64:f0:c4:57:
76:92:60:a8:71:a7:b9:20:9f:a9:e6:ba:64:00:44:
f3:aa:8a:81:ca:32:49:9f:63:0b:b6:46:0c:a7:f0:
76:01:92:ac:d5:1c:a9:ba:bc:3e:23:ba:58:5e:2a:
b1:39:c2:8d:3b:f4:03:34:a1:44:43:00:b6:32:24:
1e:c5:77:b3:e7:89:ff:47:06:19:45:e3:c0:ef:84:
8d:3d:c7:66:b5:de:5a:b9:31:56:8f:8b:9b:96:77:
79:38:d5:89:fd:42:ad:d6:93:0b:34:87:5d:c2:9f:
1e:ad:43:ef:46:55:81:f9:33:fb:75:35:3c:ed:32:
75:15:57:dc:fe:ba:cc:74:15:ce:0b:2c:8c:cb:21:
f1:24:18:a0:29:7e:ec:dc:73:03:11:9e:36:39:a1:
6b:81:58:e5:10:b2:ab:78:ff:fe:71:48:b4:e2:ca:
67:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:01:0B:AB:DB:C3:81:28:39:11:36:AE:AE:3A:F8:D6:67:21:D3:53
X509v3 Authority Key Identifier:
keyid:CE:6E:1A:22:08:FA:3F:1B:9F:3D:38:FF:F1:F8:E2:C3:4D:91:1F:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zm4aIgj6PxufPTj_8fjiw02RHzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:b0:24:ad:3c:f1:f7:e9:d1:92:35:28:97:0a:4c:30:62:0a:
cc:e5:5a:36:a9:b7:ae:8d:ee:57:1a:69:ce:de:b4:63:21:1d:
97:0c:52:d5:70:3e:e5:5f:92:ec:ad:20:a7:49:cc:76:61:cd:
6e:d1:80:3f:ac:35:d5:2f:2b:d0:25:db:2d:34:f9:63:de:38:
b5:51:d1:0c:a4:12:50:3e:43:07:84:50:36:c3:a9:41:8a:af:
db:8a:7a:ae:b3:31:e7:3e:d4:de:14:df:a7:32:8b:05:a6:2f:
50:97:46:28:bc:48:2a:49:db:24:a7:d2:2d:bd:fa:41:72:98:
ae:05:63:b7:f4:1f:ed:9f:37:92:9b:34:e5:78:41:9a:8b:57:
09:8d:7e:16:87:7f:f8:a8:c2:13:4f:35:82:78:17:3d:2f:c5:
4f:d2:07:bb:1c:fd:72:a1:15:65:73:d9:81:7f:7d:b9:90:98:
7d:82:48:b0:d6:17:1a:94:60:17:56:5d:23:00:37:c1:d6:91:
ff:d5:94:13:56:d6:74:27:c5:c6:31:43:32:61:6f:31:82:50:
71:c2:94:15:f6:a5:05:b9:4c:20:9c:38:8b:c8:4f:9a:5c:20:
ca:2a:a9:c5:7d:f7:4f:b8:d3:dc:46:5b:a9:03:d9:50:30:c6:
ee:7c:4a:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:52:23 2026 by rpki-client