Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.mft
File: ZmiQh-eHmQkWh42yDVVWhMIs2dU.mft (raw, json)
Hash identifier: tvjHsm3yopj8GEMyMgPivjh4Cy6f6CQjdyGLch5nmZw=
Subject key identifier: 3E:D5:25:2B:0A:02:3A:B6:5E:48:A1:EE:57:CC:34:A2:26:AC:0F:90
Authority key identifier: 66:68:90:87:E7:87:99:09:16:87:8D:B2:0D:55:56:84:C2:2C:D9:D5
Certificate issuer: /CN=66689087e787990916878db20d555684c22cd9d5
Certificate serial: 019F8FECC3DDF74C6414DFE9E600066BD13B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZmiQh-eHmQkWh42yDVVWhMIs2dU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.mft
Manifest number: 0901
Signing time: Thu 23 Jul 2026 17:01:26 +0000
Manifest this update: Thu 23 Jul 2026 17:01:26 +0000
Manifest next update: Fri 24 Jul 2026 17:01:26 +0000
Files and hashes: 1: C25elKe2pxAvHopmJZwOBFRueMk.roa (hash: Qq1OVKMJ6dN2Sv+dYbNP/bXX/PATPp6T5W6nqB2fjes=)
2: ZmiQh-eHmQkWh42yDVVWhMIs2dU.crl (hash: LUGiFXs/M2FZL0Hj53nMAJ8i+G+c2YBX19vGEmswoEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZmiQh-eHmQkWh42yDVVWhMIs2dU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:c3:dd:f7:4c:64:14:df:e9:e6:00:06:6b:d1:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66689087e787990916878db20d555684c22cd9d5
Validity
Not Before: Jul 23 17:01:26 2026 GMT
Not After : Jul 24 17:01:26 2026 GMT
Subject: CN=3ed5252b0a023ab65e48a1ee57cc34a226ac0f90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f5:1f:d2:f3:f8:5c:55:99:82:e3:4a:4e:96:
9f:30:03:42:96:2d:16:cf:ce:8a:21:c7:76:57:5b:
24:e0:14:b7:f1:9b:b9:fc:b9:71:41:2e:aa:a9:e7:
74:fd:00:ca:90:0c:8b:4d:7c:13:d5:05:8b:8c:61:
f7:01:68:ec:9d:0d:95:c6:aa:c9:bf:13:66:ed:4c:
fb:21:70:80:e0:fc:9b:ea:7d:15:45:24:2d:68:a2:
c2:f5:5f:04:69:a0:40:bb:8a:84:f1:0a:14:e0:94:
59:e8:ce:f1:2f:ea:df:4c:2c:de:c7:c2:32:69:a7:
5a:3e:01:52:77:23:ad:f1:ce:1d:27:be:fe:4e:f0:
2f:01:3d:ee:07:9c:11:83:d5:ea:fd:19:1a:88:95:
a2:90:a4:81:85:38:35:9e:ed:54:14:da:19:f8:27:
96:c4:8e:fa:e1:ff:6d:b6:1a:45:aa:f9:99:69:20:
8f:14:5e:80:63:d9:9d:08:7c:6d:29:d8:79:ae:7d:
2a:21:fb:90:37:74:27:d3:28:35:06:b6:3f:72:bb:
3d:8f:ac:2a:9a:7f:b8:bb:5f:93:fe:54:ca:15:0b:
b9:c4:7c:41:7e:20:d1:23:e6:c3:3e:0f:d5:84:9f:
9e:5e:34:85:ae:c9:c6:c2:fa:37:5f:30:0a:0a:a8:
6a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:D5:25:2B:0A:02:3A:B6:5E:48:A1:EE:57:CC:34:A2:26:AC:0F:90
X509v3 Authority Key Identifier:
keyid:66:68:90:87:E7:87:99:09:16:87:8D:B2:0D:55:56:84:C2:2C:D9:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmiQh-eHmQkWh42yDVVWhMIs2dU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:03:1b:20:8c:5d:bf:36:28:2d:d0:46:a3:9c:86:d6:e1:6a:
1c:c6:d3:2a:9f:ee:94:b4:ed:07:df:76:8c:ad:d5:01:e5:58:
13:6d:d4:8c:e0:21:f7:db:7a:c5:74:21:b1:a6:ba:94:c8:84:
86:c0:79:d5:2a:30:92:16:f3:b8:5d:71:ad:9e:cf:0c:35:34:
e4:5e:f9:56:35:55:4c:98:ff:ed:e1:ba:60:38:27:14:30:db:
3c:7b:4b:e5:50:b7:38:92:28:6e:ef:63:9b:a1:f5:74:26:26:
fd:b3:db:1e:4a:4f:53:de:c7:42:4c:b2:4d:a8:16:de:d6:45:
0e:67:d9:0e:76:c5:62:95:10:30:6e:4f:c9:18:eb:e2:05:6d:
2a:a4:41:93:38:81:c3:39:2a:dc:16:a3:56:a5:dc:8d:30:0e:
81:8d:e0:34:40:5a:0d:41:d0:5c:2a:7f:86:a8:9a:12:ef:e7:
3c:e8:c3:d8:c0:8e:5f:bb:18:a2:62:f3:ef:be:e8:e5:ee:21:
3a:17:a2:17:ff:a9:d1:00:2c:08:ab:df:3f:93:f6:4c:d9:55:
bc:db:df:aa:cc:7f:32:ee:1a:41:53:8b:97:3e:c8:1c:9c:1d:
c3:1a:54:fa:70:ff:db:79:7a:19:8c:f1:a8:80:38:ed:6d:6e:
91:c7:1f:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:43:22 2026 by rpki-client