Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.mft
File: zC61s4u2Lt5cmMv7z_lTKFIYBRY.mft (raw, json)
Hash identifier: b8IJ/AGcI5oxJsVTJUboYc5cJbsWPZ+lUHRdMwypwvE=
Subject key identifier: 43:0B:38:E5:57:CA:59:B0:2A:EB:02:87:12:29:66:DD:6C:D7:E0:0C
Authority key identifier: CC:2E:B5:B3:8B:B6:2E:DE:5C:98:CB:FB:CF:F9:53:28:52:18:05:16
Certificate issuer: /CN=cc2eb5b38bb62ede5c98cbfbcff9532852180516
Certificate serial: 019F946E44DD0B53B052DCF10FF95296346F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zC61s4u2Lt5cmMv7z_lTKFIYBRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.mft
Manifest number: 19DB
Signing time: Fri 24 Jul 2026 14:01:22 +0000
Manifest this update: Fri 24 Jul 2026 14:01:22 +0000
Manifest next update: Sat 25 Jul 2026 14:01:22 +0000
Files and hashes: 1: 8OPf-TYppgb-lWxDdXUmvn4lAOc.roa (hash: hCC9pcZlwckfG4uw3UFpwoter9oKt9FivUAlBWxQl7Y=)
2: L66cmmlC06Wcdn7XL6i2OjeyJz8.roa (hash: 98r7JlYeRTjaXUzjuxu020n7woB7ZmKJCIQsHxK3ViA=)
3: LT0Iyo1R8YEuaI1JHoSd3uYiu4U.roa (hash: doboAOIfjYNyHdw1r6xfrE7hmv8gQ0YwGnxIdc/ApGY=)
4: OxKWVKSu8q5MpbR4mXLRZseiBak.roa (hash: WzjynFG/qnlCwj8eYyliY8fN3o7QhJH4fPJus7/EOTQ=)
5: Wx7zSJ4BFdUre-x5J2lYzvpF4jE.roa (hash: 5usbDenLcJwn1HnlbKVb9xkpHXYP/L2fciKVWt4yeXw=)
6: XNfpJ_jMRsEIETRyReqCXiOLGU0.asa (hash: RC0524eXrry18ALIN/KuXMpYFLI/ZkcUf5LSNtqd4ss=)
7: cOUUKUyq3fFSSy6l5-mjbaxhQhs.roa (hash: KLqb5U6DgNfIS88yDz/06LUw3OWjpinY/pIyqKDYmR4=)
8: zC61s4u2Lt5cmMv7z_lTKFIYBRY.crl (hash: jo5vDgyDvvNzhZtWAwlh8eQAosLyKtOzUGZuQD9lHfU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zC61s4u2Lt5cmMv7z_lTKFIYBRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:6e:44:dd:0b:53:b0:52:dc:f1:0f:f9:52:96:34:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc2eb5b38bb62ede5c98cbfbcff9532852180516
Validity
Not Before: Jul 24 14:01:22 2026 GMT
Not After : Jul 25 14:01:22 2026 GMT
Subject: CN=430b38e557ca59b02aeb0287122966dd6cd7e00c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:80:77:65:f5:ee:50:74:3f:44:55:54:16:6d:
e9:8c:b6:f6:de:0a:eb:d1:41:87:7e:e9:12:c2:d8:
c7:00:71:cd:92:a7:df:2b:db:81:d6:db:5a:09:2b:
f4:38:29:0b:24:f8:e5:d2:38:78:a6:39:90:67:41:
42:65:c6:e4:19:a9:04:eb:33:a2:a9:7a:51:3b:45:
de:d7:6b:1a:3a:2d:f9:e8:db:32:44:b9:f5:ac:a3:
0d:82:7f:35:74:5b:9b:ed:19:c9:4c:e5:9b:e8:34:
4b:e4:85:6c:4e:5a:e2:8e:f3:66:ea:57:81:17:8b:
16:be:5d:67:ad:32:eb:3f:40:6d:90:07:a3:84:27:
e6:17:cf:57:48:49:fa:f1:cf:6d:14:eb:58:e8:ad:
a6:6b:97:24:6d:8e:9f:bd:d3:c4:8b:94:1d:6e:b5:
0b:97:60:df:7a:50:95:ee:a8:76:ab:20:9e:aa:5d:
2a:c7:5e:37:02:be:75:a8:d7:4b:59:c4:26:86:19:
57:4d:c9:2d:f6:fc:a3:4c:d4:ff:fd:b3:42:e8:80:
80:45:59:45:b7:be:5b:d8:66:4d:2e:3f:89:d5:5d:
8e:fb:9c:98:1c:c8:bf:4f:52:e2:7a:49:11:6a:94:
6f:0d:36:4f:01:11:16:ce:ec:eb:13:98:d5:d3:47:
b7:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:0B:38:E5:57:CA:59:B0:2A:EB:02:87:12:29:66:DD:6C:D7:E0:0C
X509v3 Authority Key Identifier:
keyid:CC:2E:B5:B3:8B:B6:2E:DE:5C:98:CB:FB:CF:F9:53:28:52:18:05:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zC61s4u2Lt5cmMv7z_lTKFIYBRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:54:39:c9:14:06:f6:aa:bb:ab:df:4e:24:e4:ab:ac:e0:69:
49:7f:ea:1c:79:f0:b1:81:df:6f:33:ea:02:eb:ea:af:7f:95:
71:d7:ae:ce:1d:7a:61:79:dd:30:cb:4e:e5:74:dc:cf:7b:18:
14:b6:03:bd:d5:9d:40:93:5d:0b:5c:61:69:1a:3c:94:87:61:
5e:8e:76:3e:24:a3:c9:fb:7a:66:23:30:93:de:69:3e:2c:e6:
63:91:d8:e2:0f:b0:02:76:5b:8c:fe:10:f9:58:4b:a7:dd:f1:
89:b2:18:b3:b5:11:48:f9:64:91:d4:42:9f:f0:24:4d:c5:2d:
85:5f:38:d7:3d:8a:04:37:d7:0c:c3:db:85:19:f0:ad:6a:50:
72:b7:59:d4:31:d4:e0:e0:0d:ae:c6:14:69:8e:9d:e2:e1:35:
df:35:90:98:b2:ec:67:de:60:96:2d:89:a8:6c:c8:6c:33:65:
8d:ed:6d:04:75:77:46:cc:4e:ce:6b:13:19:ef:82:59:71:69:
26:c6:e9:d4:65:a1:1c:42:e9:6c:2e:5a:7f:5c:6d:91:c9:55:
ac:b4:b6:f6:2e:67:36:be:3a:94:6b:0e:24:03:2c:8b:28:b7:
04:21:a4:b9:87:c4:72:c2:86:b0:9a:14:4a:c4:b7:aa:1a:be:
74:c9:10:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:09:44 2026 by rpki-client