Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/e8b89c-8268-402b-aa26-ead041774e07/1/Z2WiG1YbqGZc95-_RMMZWd4o8hY.mft
File: Z2WiG1YbqGZc95-_RMMZWd4o8hY.mft (raw, json)
Hash identifier: sS6/Th3Tno+irArfmdejHnlIjT49fakglZ5jrjRyjYg=
Subject key identifier: C3:AB:42:40:7F:08:66:B7:15:F2:E8:83:ED:25:CF:62:E7:24:9A:C9
Authority key identifier: 67:65:A2:1B:56:1B:A8:66:5C:F7:9F:BF:44:C3:19:59:DE:28:F2:16
Certificate issuer: /CN=6765a21b561ba8665cf79fbf44c31959de28f216
Certificate serial: 019F8ED99D4FD650F95765D4CA6E0B4E1AAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z2WiG1YbqGZc95-_RMMZWd4o8hY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/e8b89c-8268-402b-aa26-ead041774e07/1/Z2WiG1YbqGZc95-_RMMZWd4o8hY.mft
Manifest number: 0B11
Signing time: Thu 23 Jul 2026 12:00:53 +0000
Manifest this update: Thu 23 Jul 2026 12:00:53 +0000
Manifest next update: Fri 24 Jul 2026 12:00:53 +0000
Files and hashes: 1: XxbITpOJuSZiY6H9TV5ap_4aUaY.roa (hash: GGGD2/9LfCjCuy4UA1Jhb/88EGXnxXM/rGiFG8eHBow=)
2: Z2WiG1YbqGZc95-_RMMZWd4o8hY.crl (hash: WGcduU9dhawxBPCQULckUqEtSm69fZ1WCIocnzKKiF8=)
3: sj6CcgFQW1xXVqY_4XZQj4z-6A4.asa (hash: VwCG7Y0uTpbjnmJAQtc9+mdH7M+TQGbGHrYZ5OCItWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/e8b89c-8268-402b-aa26-ead041774e07/1/Z2WiG1YbqGZc95-_RMMZWd4o8hY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/e8b89c-8268-402b-aa26-ead041774e07/1/Z2WiG1YbqGZc95-_RMMZWd4o8hY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z2WiG1YbqGZc95-_RMMZWd4o8hY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:d9:9d:4f:d6:50:f9:57:65:d4:ca:6e:0b:4e:1a:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6765a21b561ba8665cf79fbf44c31959de28f216
Validity
Not Before: Jul 23 12:00:53 2026 GMT
Not After : Jul 24 12:00:53 2026 GMT
Subject: CN=c3ab42407f0866b715f2e883ed25cf62e7249ac9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b3:cc:c2:f5:14:f1:57:56:8b:74:4d:72:d2:
4a:09:79:d7:d6:16:72:c0:8d:a0:ed:ed:40:0a:65:
4e:8e:13:e8:ef:6d:53:8b:73:56:e4:da:41:df:ab:
20:83:1d:91:f8:26:bb:67:4c:9e:a5:0a:75:75:7d:
15:6a:61:29:e7:89:19:6b:34:24:4c:63:c1:f4:8d:
e4:6b:45:8c:99:2b:4e:c6:29:b4:65:84:f0:e4:7f:
85:55:9e:ce:3d:6d:ba:12:d8:f1:68:98:4e:a7:00:
e2:83:6b:ca:67:31:c1:5d:ad:b9:d0:57:88:dc:f3:
a1:b2:d7:ae:af:80:9d:fc:22:9b:23:d8:0a:17:40:
cc:20:4b:e4:50:18:0b:06:25:f8:c7:ed:01:13:ee:
45:66:f4:78:42:b3:d5:64:b3:c8:08:47:99:80:e9:
13:2d:fa:d1:ed:4a:cf:bb:b3:a0:75:34:ca:c4:ed:
91:27:ae:b0:4f:b7:89:f3:0d:c1:26:44:8a:85:92:
82:d1:c7:9f:38:0a:a3:56:e9:f2:29:4e:1f:f6:93:
3a:1b:e1:7e:24:8d:ce:b5:88:db:7e:45:b3:69:4c:
63:fe:44:a8:b4:d5:3d:54:ac:03:19:15:ac:cf:4d:
d1:fb:6f:95:e8:e6:a6:fa:b1:fa:6d:98:4c:ab:bb:
81:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:AB:42:40:7F:08:66:B7:15:F2:E8:83:ED:25:CF:62:E7:24:9A:C9
X509v3 Authority Key Identifier:
keyid:67:65:A2:1B:56:1B:A8:66:5C:F7:9F:BF:44:C3:19:59:DE:28:F2:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z2WiG1YbqGZc95-_RMMZWd4o8hY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/e8b89c-8268-402b-aa26-ead041774e07/1/Z2WiG1YbqGZc95-_RMMZWd4o8hY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/e8b89c-8268-402b-aa26-ead041774e07/1/Z2WiG1YbqGZc95-_RMMZWd4o8hY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:13:9c:7e:20:77:ba:61:73:47:c1:9c:4c:3a:10:cd:2e:34:
84:ab:e8:de:9d:8f:43:5c:b3:34:97:2e:89:1e:dd:26:d9:b3:
c2:9e:56:de:d1:98:04:7e:e9:78:56:a4:02:1b:ab:e2:fa:5a:
2f:ab:58:ad:e2:b4:8c:9a:24:3b:3a:d8:38:09:aa:12:c7:be:
f5:01:7d:13:9b:27:21:f4:33:aa:bc:18:03:62:a7:d8:84:73:
9f:85:9d:f3:38:19:a2:2d:d1:c7:60:40:1e:4f:c1:10:61:3e:
b1:a4:10:0c:1b:4a:9b:b7:82:77:0a:f3:f5:81:55:25:a6:9d:
55:e3:69:3d:ba:03:ac:4e:99:f3:34:cf:86:00:24:51:b7:be:
37:61:56:8d:d2:0f:f5:1e:fc:7d:16:39:a1:5e:74:e3:39:0a:
61:7f:ed:25:eb:3e:54:78:68:c3:b5:fb:8e:b3:42:8c:13:d4:
54:d9:cb:6b:f4:b8:99:e3:86:72:66:dc:9c:54:b9:34:87:26:
45:11:b4:89:ea:aa:c0:fa:cf:93:7f:fa:48:3a:8a:72:5e:be:
01:75:e6:a3:8e:14:71:30:3e:2e:16:28:c7:22:9f:73:a7:56:
7c:a7:5b:52:70:80:f1:d8:ee:ba:17:77:98:7f:0c:44:dc:2b:
c0:69:81:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:08:12 2026 by rpki-client