Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.mft
File: zJd-nVKvvEd5nTl1_O6KxRygz2o.mft (raw, json)
Hash identifier: /29DlH52A+EBhziygEUblrND5C4o72nxg+UDYXRzuLw=
Subject key identifier: 99:62:83:D9:9D:95:54:9B:F4:80:3B:4F:24:32:B2:9A:2F:92:27:B1
Authority key identifier: CC:97:7E:9D:52:AF:BC:47:79:9D:39:75:FC:EE:8A:C5:1C:A0:CF:6A
Certificate issuer: /CN=cc977e9d52afbc47799d3975fcee8ac51ca0cf6a
Certificate serial: 019F9090A927C2CFBB1F661B1B9A29FFA68F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zJd-nVKvvEd5nTl1_O6KxRygz2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.mft
Manifest number: 1899
Signing time: Thu 23 Jul 2026 20:00:27 +0000
Manifest this update: Thu 23 Jul 2026 20:00:27 +0000
Manifest next update: Fri 24 Jul 2026 20:00:27 +0000
Files and hashes: 1: Sq1CvQy8o0B9tgh2Xu1eMwRJZtk.roa (hash: HdfFsuae+bs6Px2O/nXidzw9nHeIbmVY360ACfcO/uA=)
2: apKWJZAqjwjRd0dehHbbTa9ZY3A.roa (hash: nVaIovGi66UncedynfpwyGBTPpXsXon+jV7FMQbYQEg=)
3: zJd-nVKvvEd5nTl1_O6KxRygz2o.crl (hash: Ghl0qO8i3b60ccfuOoVBAOxaEP34O890CYdOvZw+Zt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/zJd-nVKvvEd5nTl1_O6KxRygz2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 20:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:90:a9:27:c2:cf:bb:1f:66:1b:1b:9a:29:ff:a6:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc977e9d52afbc47799d3975fcee8ac51ca0cf6a
Validity
Not Before: Jul 23 20:00:27 2026 GMT
Not After : Jul 24 20:00:27 2026 GMT
Subject: CN=996283d99d95549bf4803b4f2432b29a2f9227b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8a:30:f7:69:7d:47:07:c7:72:52:cf:d7:07:
9b:20:b8:bb:a5:71:0f:bb:e7:ed:23:4d:e6:d0:a7:
97:77:58:54:03:af:9e:90:f7:e3:b7:44:c4:a9:49:
16:5b:5c:90:fa:d6:60:39:b5:d2:61:a4:8b:48:3f:
d7:ac:d4:4b:0c:d7:91:d9:3c:04:0b:80:d7:db:3a:
15:9c:24:a7:70:0a:4b:70:e4:bf:26:85:5f:5f:7c:
6f:a1:91:1b:fb:a6:65:e7:da:f0:a0:96:d9:e2:92:
c4:9e:e8:70:a9:88:1c:91:7a:ee:de:19:1c:c7:68:
de:98:14:70:22:b4:c2:2e:c3:c5:0e:be:59:48:a8:
54:bd:d3:9a:90:ce:68:6b:00:09:d5:36:62:d9:94:
4b:6d:ec:82:25:70:82:7a:dc:95:31:bd:3e:16:50:
d8:ce:8f:e0:f0:9d:b8:d4:df:34:fc:16:e6:a5:f5:
ce:f5:de:97:cd:88:c7:4e:2e:38:de:5e:90:80:89:
ae:8d:a6:d2:55:9e:a7:e1:e3:95:ea:5c:17:75:09:
66:da:2d:ab:ba:48:b4:77:97:96:c1:6e:50:94:e0:
07:0d:65:85:01:56:b9:95:4a:96:03:e6:ac:c4:b0:
9c:28:a8:0e:83:a3:1b:9f:5e:57:77:82:1b:6e:ee:
8a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:62:83:D9:9D:95:54:9B:F4:80:3B:4F:24:32:B2:9A:2F:92:27:B1
X509v3 Authority Key Identifier:
keyid:CC:97:7E:9D:52:AF:BC:47:79:9D:39:75:FC:EE:8A:C5:1C:A0:CF:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zJd-nVKvvEd5nTl1_O6KxRygz2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:9a:ea:2b:f4:98:29:55:55:8a:f1:8a:0a:ce:a8:17:b8:7d:
3e:e7:b5:80:81:9a:31:21:0b:84:dd:0c:ef:d9:f1:f4:ab:10:
32:bd:62:e6:53:8b:00:dd:b4:93:26:f5:b1:5b:97:f7:9d:d6:
80:b6:b4:d8:29:9a:f2:da:c2:9b:be:42:7e:15:4f:92:04:f0:
a1:55:1c:69:e5:a7:4d:87:87:87:e7:5f:71:72:ba:24:ae:1e:
30:a3:68:35:82:c5:a6:ff:db:15:63:6b:f1:69:96:cd:8c:fa:
31:8a:83:25:a6:6f:20:cf:a0:30:e2:2a:e4:f4:84:16:be:26:
36:ba:c6:50:29:c4:25:2a:b1:88:3e:21:38:83:37:44:b7:32:
87:ab:90:3b:3b:12:e5:6a:b5:dd:56:0b:17:18:2a:a7:75:b6:
bd:10:f4:af:1b:ee:9c:3f:e8:8a:7c:c7:56:ba:18:6c:74:d9:
09:f9:53:30:70:67:f6:52:a0:8b:dd:4f:e2:8b:6b:5b:d5:2e:
57:5d:86:74:65:5c:8b:46:61:23:9c:a7:7a:af:4c:71:18:3d:
eb:6c:2f:00:ce:1d:cd:a7:69:9b:df:79:06:92:30:82:7c:8b:
5d:f3:ab:d4:a6:20:e3:8b:92:44:0d:5e:98:e1:30:3f:cb:fb:
36:92:e9:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:25:27 2026 by rpki-client