
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft
File: ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft (raw, json)
Hash identifier: GitweSrx6yhUumUsONEFzyFP3worD+vQ+UW+muK66Ak=
Subject key identifier: A7:65:D9:DC:11:45:91:43:E7:14:24:82:74:60:86:27:2A:FE:2B:AF
Authority key identifier: 64:39:5D:6A:1A:28:88:D9:C3:56:EE:D3:27:89:E6:27:D2:3D:51:6E
Certificate issuer: /CN=64395d6a1a2888d9c356eed32789e627d23d516e
Certificate serial: 019F92ED7DAA4E1F5AF85EA78A017A1C4F78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZDldahooiNnDVu7TJ4nmJ9I9UW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft
Manifest number: 19C7
Signing time: Fri 24 Jul 2026 07:01:05 +0000
Manifest this update: Fri 24 Jul 2026 07:01:05 +0000
Manifest next update: Sat 25 Jul 2026 07:01:05 +0000
Files and hashes: 1: ZDldahooiNnDVu7TJ4nmJ9I9UW4.crl (hash: g6pfftMBbqDQlIXeLsuqegVYbEFUIuHLyPUjLNN4ZaY=)
2: ftUP8AhWyKSCfDygp2EvHTO8Boo.roa (hash: ewSYxaolal/Z6l87pd6PUdDa+voxm7gfdPqRbZdlcCk=)
3: h7hfu83GdfBNM7Zx2PElKBPYyGY.roa (hash: HsgzFT58UTHg7xZoI81l8ngXvJujr6TYdyM2zeg4nXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZDldahooiNnDVu7TJ4nmJ9I9UW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:7d:aa:4e:1f:5a:f8:5e:a7:8a:01:7a:1c:4f:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64395d6a1a2888d9c356eed32789e627d23d516e
Validity
Not Before: Jul 24 07:01:05 2026 GMT
Not After : Jul 25 07:01:05 2026 GMT
Subject: CN=a765d9dc11459143e7142482746086272afe2baf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:df:7e:29:95:92:ed:29:84:d3:c8:1b:76:ce:
b2:e3:5e:1e:b0:7b:fe:a5:a5:af:6a:67:ef:a0:c0:
33:30:8b:bf:67:00:c8:70:e2:df:de:ee:b9:0e:43:
05:2e:1a:d2:5a:83:6d:53:0c:6b:48:5d:12:92:85:
ed:6f:7e:d6:cd:aa:27:a2:cf:91:ee:ea:71:40:92:
ca:8d:14:8a:b8:ae:d7:6d:43:22:b0:9f:b3:49:ea:
f4:5a:5f:d2:db:93:4d:23:d3:80:4f:2d:11:e2:a0:
b0:56:26:b1:10:35:75:00:ce:0b:f4:d3:90:fe:07:
4d:30:33:17:d1:03:0b:83:19:78:ba:40:33:7b:3f:
1c:10:55:77:62:71:d0:17:73:5a:4f:57:b0:92:79:
9d:c3:55:21:87:93:a4:af:c3:bf:35:7d:ed:f4:04:
ab:5f:0a:37:93:5c:7d:57:58:e5:f8:6b:ad:dc:48:
95:e4:e7:85:d9:0d:77:6f:59:70:2d:5b:54:3f:a0:
42:26:44:67:8c:fb:91:ec:2f:68:b9:b0:73:fd:76:
64:18:76:b2:f1:89:0f:78:ab:81:3c:5d:ca:e4:81:
ba:d9:c7:b8:1f:99:f4:60:5a:cf:dc:5c:d8:6f:38:
5b:1f:37:93:85:90:da:30:d9:7a:57:ef:49:b8:2f:
ba:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:65:D9:DC:11:45:91:43:E7:14:24:82:74:60:86:27:2A:FE:2B:AF
X509v3 Authority Key Identifier:
keyid:64:39:5D:6A:1A:28:88:D9:C3:56:EE:D3:27:89:E6:27:D2:3D:51:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZDldahooiNnDVu7TJ4nmJ9I9UW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:0b:76:64:ab:ef:3d:69:c3:1a:6e:68:e2:76:0f:88:ee:5e:
db:6f:0b:77:dc:3a:5b:f2:21:d0:d4:77:35:af:8e:73:ff:54:
72:eb:51:07:8b:ae:a1:29:8a:d9:c3:6a:94:2c:f9:cf:b3:c2:
e3:39:70:51:38:2c:c1:96:ce:6f:1e:3e:d5:93:2e:9a:e2:19:
0f:e7:e5:ad:f7:96:5c:0b:24:66:9e:51:ef:22:a1:c1:0f:64:
da:6b:ac:cc:7d:49:19:c7:df:18:b0:f0:c8:13:21:71:7a:e9:
8f:d7:c7:34:0f:ee:b4:4c:c9:2c:6d:64:19:50:86:ef:84:be:
9a:62:67:4d:28:6a:91:74:4c:aa:99:ea:11:ac:7f:f5:1d:27:
9d:f6:f6:1a:ad:af:ff:b6:84:02:b7:90:6f:4f:f0:e2:05:36:
6c:55:89:8a:51:23:d4:9e:61:78:f2:0e:5c:65:c6:29:01:e4:
cc:32:c3:eb:cd:9d:0d:19:1c:e8:72:60:8f:49:24:93:d0:0b:
d4:1f:9d:f0:ca:00:2b:a4:92:0b:b9:db:ff:1e:da:dc:9b:ce:
7f:aa:94:8b:e9:0c:c4:cb:16:1b:0f:71:e3:85:83:e2:00:1b:
9c:e5:88:0a:0a:d6:23:be:af:ec:43:e5:f5:9b:d9:42:8b:09:
fa:28:9a:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:03:26 2026 by rpki-client