Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft
File: 0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft (raw, json)
Hash identifier: 1lc2PQWTB185F1OcE5nSbL05RxmqhLYLj1cZiA4UaP8=
Subject key identifier: 97:34:73:97:93:86:46:04:9F:FB:1E:AB:5B:23:36:A9:B0:DC:21:FA
Authority key identifier: D1:98:83:41:D3:60:78:65:F5:0F:5B:B0:2A:9A:3F:5C:2D:E5:8A:92
Certificate issuer: /CN=d1988341d3607865f50f5bb02a9a3f5c2de58a92
Certificate serial: 019F8FB51FFDE68B62A95F0158EABDF31A07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ZiDQdNgeGX1D1uwKpo_XC3lipI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft
Manifest number: 0528
Signing time: Thu 23 Jul 2026 16:00:39 +0000
Manifest this update: Thu 23 Jul 2026 16:00:39 +0000
Manifest next update: Fri 24 Jul 2026 16:00:39 +0000
Files and hashes: 1: 0ZiDQdNgeGX1D1uwKpo_XC3lipI.crl (hash: 3ip6xfcMwOEnQCExYHY1yELQwLPSWnZZn8veg+xkpfo=)
2: 7jgvwOfbTS9EcboNY_mci-_zFzQ.roa (hash: SGXWMpwVSmLMAKNP+kPKK/+5RwAE6AIl6oVDLelweNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0ZiDQdNgeGX1D1uwKpo_XC3lipI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b5:1f:fd:e6:8b:62:a9:5f:01:58:ea:bd:f3:1a:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1988341d3607865f50f5bb02a9a3f5c2de58a92
Validity
Not Before: Jul 23 16:00:39 2026 GMT
Not After : Jul 24 16:00:39 2026 GMT
Subject: CN=97347397938646049ffb1eab5b2336a9b0dc21fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:61:c9:1c:e6:7b:f6:10:13:ff:b8:bb:36:24:
d2:d5:77:c3:a6:1c:8e:ef:6c:43:04:9d:9f:aa:d8:
0b:b1:07:ee:c7:d0:25:07:99:e4:52:30:2c:8c:f5:
53:bc:47:24:5a:22:05:39:9e:24:06:23:3d:88:8e:
38:2a:1a:24:84:4f:44:dd:78:f5:74:e2:2e:ed:ac:
15:f7:1b:65:7c:18:7c:08:b7:20:8a:a9:76:f0:ce:
e4:d4:77:2c:be:13:f6:00:0a:ff:e6:a9:a2:19:03:
47:a7:0e:7a:9f:3a:e0:b8:7f:e6:9c:52:32:60:06:
56:3b:d7:36:43:3f:90:cf:42:83:31:16:8b:31:12:
79:62:dc:b2:7c:66:88:b3:bd:1d:fd:ac:58:3b:61:
2c:0f:dc:34:02:10:2a:b7:91:f7:8a:32:ea:f7:c7:
65:e1:60:c0:22:76:c5:b4:5f:32:19:e8:1a:7b:b7:
52:2a:77:b7:3b:86:9d:ca:a3:39:e0:4c:be:49:a7:
87:a0:6b:84:f7:fe:60:70:66:a8:24:af:70:33:73:
5e:7f:25:55:91:ef:bf:ce:d3:0f:d4:a0:22:35:c1:
ca:ac:b3:43:55:7d:8a:88:aa:05:79:84:d3:99:20:
ce:90:2b:45:6d:61:5b:0b:ef:9d:6e:4e:8a:f5:a8:
97:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:34:73:97:93:86:46:04:9F:FB:1E:AB:5B:23:36:A9:B0:DC:21:FA
X509v3 Authority Key Identifier:
keyid:D1:98:83:41:D3:60:78:65:F5:0F:5B:B0:2A:9A:3F:5C:2D:E5:8A:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ZiDQdNgeGX1D1uwKpo_XC3lipI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:0e:e7:3b:9c:ac:2f:87:1d:77:d8:b2:8c:bd:7d:78:a0:2d:
0b:91:bc:b6:9a:ad:1d:08:ba:83:92:89:97:b7:d4:9d:c7:72:
33:96:e2:88:66:ea:58:c4:1c:49:48:46:0a:2a:b2:f9:3c:85:
a9:7f:92:d2:dc:a1:74:03:70:d2:48:38:53:4d:c9:be:ce:e7:
8b:8d:f5:aa:43:8e:99:d7:65:8b:0a:12:23:bd:e2:af:7e:b2:
4a:45:13:66:11:8a:7b:86:2b:81:92:92:60:50:8c:af:5e:28:
49:c9:7a:53:9a:98:13:75:94:e6:ab:18:6f:59:99:53:86:16:
25:36:4e:2a:f8:36:29:9b:ab:ed:2c:43:f5:1d:a9:61:f0:87:
41:a5:d4:18:84:e1:de:1d:71:cb:7f:7c:09:4f:c4:19:f6:7a:
b2:dd:46:f5:c5:e1:93:c2:a5:86:d5:ab:e6:75:fd:e8:1d:c9:
15:73:4b:76:59:4f:14:15:86:f1:68:72:27:e3:1b:fa:97:d8:
5d:64:7d:18:c3:f1:1b:7d:6c:2a:3c:18:79:57:c5:17:85:5e:
d8:0c:16:f4:64:7d:42:67:dc:3f:36:a5:0a:71:0d:05:14:e5:
8c:9d:5c:48:3e:26:08:11:e0:e6:a2:90:5a:f9:b0:e0:5c:90:
8a:6b:b1:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:45:11 2026 by rpki-client