Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.mft
File: zDnmvkDYASiJbM0TH2WlWtmKQK8.mft (raw, json)
Hash identifier: N2ncfZTKMss2ByxLnwHI9213EnMGJOOrgkp+mzyzD/s=
Subject key identifier: 9B:9F:F7:9F:61:A1:99:CD:B0:46:A0:DF:F5:7E:71:EE:16:5A:3A:15
Authority key identifier: CC:39:E6:BE:40:D8:01:28:89:6C:CD:13:1F:65:A5:5A:D9:8A:40:AF
Certificate issuer: /CN=cc39e6be40d80128896ccd131f65a55ad98a40af
Certificate serial: 019F92B64A59AC3BAF816DD35129CB3B0433
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zDnmvkDYASiJbM0TH2WlWtmKQK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 06:00:47 +0000
Manifest this update: Fri 24 Jul 2026 06:00:47 +0000
Manifest next update: Sat 25 Jul 2026 06:00:47 +0000
Files and hashes: 1: h8MAjW2nwR1TuDpY3gaR4GIp5Is.roa (hash: YMOvJ9hakU4xTrKD5f+aHfr6VChVy5zYjPbZPORV+p4=)
2: hq6cHZZmfTc8iDuXctwL9j8vYGA.roa (hash: gnwIM65nm0H3pqLfxC4cpwXQNNz6WAkiHxWYF953SRw=)
3: zDnmvkDYASiJbM0TH2WlWtmKQK8.crl (hash: Gm/vBMLwbO/aOV4xWRD1+EAP2LOpjYgWx8Tp2MiIjr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zDnmvkDYASiJbM0TH2WlWtmKQK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b6:4a:59:ac:3b:af:81:6d:d3:51:29:cb:3b:04:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc39e6be40d80128896ccd131f65a55ad98a40af
Validity
Not Before: Jul 24 06:00:47 2026 GMT
Not After : Jul 25 06:00:47 2026 GMT
Subject: CN=9b9ff79f61a199cdb046a0dff57e71ee165a3a15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d6:fd:3d:6f:76:2c:92:22:5e:1e:3a:4c:df:
1d:21:a2:fb:7f:96:c2:42:13:19:02:12:5a:2f:41:
a6:a4:9a:ef:77:9a:25:26:d6:35:97:dd:ee:e5:d1:
5f:1a:6c:d9:8b:62:5e:3c:fb:66:df:0f:9a:a7:c8:
f8:90:69:10:95:09:13:d0:5b:41:c0:40:25:b6:09:
49:59:e4:bd:ad:3b:64:9c:24:ce:13:44:ad:7a:6e:
10:8f:de:9c:92:b4:a3:5f:3c:c5:60:4a:61:c3:97:
ba:ee:d4:93:63:d6:49:25:92:41:6e:3a:0c:43:ef:
06:69:f3:fb:75:a2:65:9c:0d:d2:5f:36:43:ee:a7:
87:6c:dd:a7:de:92:72:71:db:2a:5d:82:e8:4a:9b:
53:9c:19:eb:51:de:f1:55:31:c2:73:2c:b5:fe:6f:
ea:a5:28:a1:f0:16:cc:83:9a:2f:c7:14:f0:87:d9:
b2:82:74:b5:31:09:5e:35:14:d8:6e:ef:dd:6f:79:
b9:b0:4e:d1:d1:d3:ef:25:4b:ec:07:b5:43:4b:7f:
4b:fa:c5:17:2f:74:9a:c4:be:b2:0d:35:dc:63:4e:
0b:5b:7a:54:20:a4:cb:d0:fa:b9:f0:b0:92:0b:fb:
b7:51:b8:57:83:dd:1c:8c:55:07:b4:ed:0a:2e:22:
f8:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:9F:F7:9F:61:A1:99:CD:B0:46:A0:DF:F5:7E:71:EE:16:5A:3A:15
X509v3 Authority Key Identifier:
keyid:CC:39:E6:BE:40:D8:01:28:89:6C:CD:13:1F:65:A5:5A:D9:8A:40:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zDnmvkDYASiJbM0TH2WlWtmKQK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:e6:ba:88:77:df:f2:3e:c7:5e:8f:1f:1e:7e:1d:a9:7d:97:
46:fb:38:60:6a:0e:7d:20:ea:c6:26:50:bb:16:ff:5f:16:a1:
9b:57:6f:d0:df:34:ca:9d:2f:3a:d3:a9:77:0d:17:2b:16:d6:
be:33:49:24:58:6e:d2:71:be:f0:ef:17:86:f3:1d:8a:8e:84:
97:19:98:29:62:44:cb:e3:50:ac:02:ad:84:fd:75:fa:97:c9:
e2:84:19:8c:19:bf:ab:dd:ee:af:a5:65:87:ba:8b:d8:68:c8:
d4:df:91:e8:bd:04:c8:d0:0f:e8:a8:bd:e4:20:c5:fb:47:b4:
f4:61:0b:cd:d9:b3:cd:35:6a:37:5e:e6:63:8a:93:3f:9f:13:
2c:a9:c1:b8:ca:e6:0a:2a:63:de:c2:5a:99:ae:61:38:31:b6:
a9:53:c7:36:40:68:67:1d:7c:8e:62:69:f3:b4:e1:8e:03:2a:
cb:28:a8:aa:29:55:fe:4e:d0:ba:d5:ba:bd:36:d3:19:05:cc:
e3:13:3a:43:9f:33:8b:5c:83:33:fa:0d:b5:ff:dd:66:b3:5c:
15:bd:e5:fa:6e:d6:cb:3a:a3:d3:bf:cf:0b:7a:dc:c6:10:38:
69:21:4a:cc:43:84:86:b8:bc:11:13:da:ba:6e:c5:03:8a:82:
90:1a:4f:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:58:18 2026 by rpki-client