Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/b30c04-eefa-4531-90d0-0144fd77ebe4/1/Z7qXndCNvgPBdIoCL6ZlTTYRlA8.mft
File: Z7qXndCNvgPBdIoCL6ZlTTYRlA8.mft (raw, json)
Hash identifier: oV4UKmp/HqtXXIlYB8T3swEt9T0QrCK/eAmPp4Lmot4=
Subject key identifier: 16:98:E3:DE:DD:0C:82:39:23:D0:DD:A0:6A:54:3B:F5:FF:06:F7:8C
Authority key identifier: 67:BA:97:9D:D0:8D:BE:03:C1:74:8A:02:2F:A6:65:4D:36:11:94:0F
Certificate issuer: /CN=67ba979dd08dbe03c1748a022fa6654d3611940f
Certificate serial: 019F8E34943D97755393DD4D702BEE626CAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z7qXndCNvgPBdIoCL6ZlTTYRlA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/b30c04-eefa-4531-90d0-0144fd77ebe4/1/Z7qXndCNvgPBdIoCL6ZlTTYRlA8.mft
Manifest number: 015A
Signing time: Thu 23 Jul 2026 09:00:38 +0000
Manifest this update: Thu 23 Jul 2026 09:00:38 +0000
Manifest next update: Fri 24 Jul 2026 09:00:38 +0000
Files and hashes: 1: CuP-Ha4tOWBJT0pI4E4cOyq4rrs.roa (hash: PnhyGfN8Xq/cQidLwJYXET+Yc1KaRnRUtuvyvf2jYVs=)
2: Z7qXndCNvgPBdIoCL6ZlTTYRlA8.crl (hash: lz0ksCIl1w2saG4ZON56gLu16FbGxyMShJAZMdqEq+4=)
3: Z_qYOE4e2l4gEvD0IWAegIDMPig.asa (hash: eWA5Ad2XFQpR/DOWcwIfkGbSUhBVracuKwSeTKFgw50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/b30c04-eefa-4531-90d0-0144fd77ebe4/1/Z7qXndCNvgPBdIoCL6ZlTTYRlA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/b30c04-eefa-4531-90d0-0144fd77ebe4/1/Z7qXndCNvgPBdIoCL6ZlTTYRlA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z7qXndCNvgPBdIoCL6ZlTTYRlA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:34:94:3d:97:75:53:93:dd:4d:70:2b:ee:62:6c:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67ba979dd08dbe03c1748a022fa6654d3611940f
Validity
Not Before: Jul 23 09:00:38 2026 GMT
Not After : Jul 24 09:00:38 2026 GMT
Subject: CN=1698e3dedd0c823923d0dda06a543bf5ff06f78c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b2:21:5a:a8:86:81:5c:1c:5f:3b:69:0e:5a:
ef:31:cd:c5:cc:cd:7a:06:b5:9b:49:db:8a:06:25:
be:de:2f:e2:df:bb:2b:bf:c8:6b:02:af:d8:81:ef:
64:83:65:37:dc:33:1a:81:8a:d7:f1:c8:dc:e5:b7:
39:bc:a7:54:89:0d:09:1c:6e:44:c8:e0:b2:c1:ac:
00:b5:29:1e:56:67:ba:2f:e8:5f:c4:c4:00:54:b2:
0f:2c:fe:23:46:9b:b0:c3:06:6d:9f:78:91:81:34:
d7:d1:a2:77:ce:b8:e2:5c:c1:d7:b3:e3:18:06:6b:
71:50:15:4c:ee:1d:ab:f9:73:f6:c1:2e:6c:d8:65:
6d:19:e4:ac:59:34:42:5d:ac:c3:5c:1e:d6:16:c0:
18:66:f2:15:f4:fb:3e:1f:c2:2e:36:6f:71:54:b9:
30:82:47:79:6b:09:e2:61:b5:49:e3:35:4d:f1:53:
23:5a:88:23:a8:d0:b7:bc:20:5d:54:a0:45:be:f4:
8e:10:47:d1:0a:c2:8f:a8:af:cf:cc:1c:fa:b5:5e:
83:70:da:e9:8f:e9:7b:ca:32:98:2b:ec:de:8f:d3:
56:fc:40:80:a3:82:dd:bb:b2:bb:90:1c:cc:ef:6b:
4c:80:1b:7d:3e:ac:50:12:72:55:6f:9a:b1:f7:81:
77:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:98:E3:DE:DD:0C:82:39:23:D0:DD:A0:6A:54:3B:F5:FF:06:F7:8C
X509v3 Authority Key Identifier:
keyid:67:BA:97:9D:D0:8D:BE:03:C1:74:8A:02:2F:A6:65:4D:36:11:94:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7qXndCNvgPBdIoCL6ZlTTYRlA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/b30c04-eefa-4531-90d0-0144fd77ebe4/1/Z7qXndCNvgPBdIoCL6ZlTTYRlA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/b30c04-eefa-4531-90d0-0144fd77ebe4/1/Z7qXndCNvgPBdIoCL6ZlTTYRlA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:ff:c9:49:4c:91:94:cb:0d:a0:05:33:68:06:85:b4:c8:59:
3d:27:9b:41:f0:22:cb:54:5e:be:9e:d8:c3:3a:d1:09:78:14:
2b:9b:3b:32:32:a2:c2:d2:b6:55:5f:18:83:56:5d:be:8f:b4:
88:20:f9:3f:a6:af:fb:b8:ba:da:29:b3:67:e7:d5:6c:27:54:
af:8a:3c:45:37:11:ea:49:d2:45:e0:be:c2:ad:9b:bf:b8:4c:
0a:dc:70:54:b7:62:3a:de:8b:7f:6c:05:8b:11:db:81:e9:7a:
e5:62:32:b9:fa:c6:98:10:b7:70:3b:c9:1a:9b:a0:4c:22:8c:
53:bc:fd:c1:fd:96:f2:2a:64:d7:57:94:55:60:3f:ab:76:e1:
59:7a:68:af:63:9d:fb:70:14:12:1a:67:bd:54:0e:90:80:71:
c4:9d:dc:66:6e:aa:e8:54:4c:17:9e:3e:55:b3:39:29:1c:38:
64:f1:13:b1:a9:e4:15:53:a5:97:1a:10:64:36:5a:ec:95:3c:
ca:ba:eb:0e:9e:12:35:e4:4e:1c:44:b4:90:bc:85:2c:cb:34:
d2:5f:d9:2a:da:db:1d:49:1f:c1:1f:68:3d:aa:aa:f3:04:1b:
54:41:03:50:9b:7a:14:8c:86:4e:c3:9b:65:67:36:40:0b:30:
31:a0:93:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:07:05 2026 by rpki-client