Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.mft
File: zEDZYkKwgu_ltPIliCCzBZOWGY0.mft (raw, json)
Hash identifier: CVSju8VFWtXfWwpOUZDJy+ocFIlezh3oJ25MvJV8Fgo=
Subject key identifier: 4E:68:D3:75:D6:C2:BC:EA:25:F5:B5:C4:4E:49:C8:31:41:99:F0:47
Authority key identifier: CC:40:D9:62:42:B0:82:EF:E5:B4:F2:25:88:20:B3:05:93:96:19:8D
Certificate issuer: /CN=cc40d96242b082efe5b4f2258820b3059396198d
Certificate serial: 019F8ED907CC4400DAD9BC2F2EAA12DF43ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zEDZYkKwgu_ltPIliCCzBZOWGY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.mft
Manifest number: 19C6
Signing time: Thu 23 Jul 2026 12:00:15 +0000
Manifest this update: Thu 23 Jul 2026 12:00:15 +0000
Manifest next update: Fri 24 Jul 2026 12:00:15 +0000
Files and hashes: 1: 98fyEBb-PIBiroCj51bzkd-V_i4.roa (hash: 2RN0v3XP/euGb82/ECdLfjWteqkCXDXBbJynvO0cBWE=)
2: y97Q2cCIA4p_jfA1RbOfelZQKOo.roa (hash: oRmoVnYM94QBjpHDaFRFV+BA4jZYdHdlmrs4oEppUqA=)
3: zEDZYkKwgu_ltPIliCCzBZOWGY0.crl (hash: aysRZJHSY8p9Pdm0az4ETQH2UfTg7POg/pcWWbIzq88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/zEDZYkKwgu_ltPIliCCzBZOWGY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 12:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:d9:07:cc:44:00:da:d9:bc:2f:2e:aa:12:df:43:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc40d96242b082efe5b4f2258820b3059396198d
Validity
Not Before: Jul 23 12:00:15 2026 GMT
Not After : Jul 24 12:00:15 2026 GMT
Subject: CN=4e68d375d6c2bcea25f5b5c44e49c8314199f047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:23:0c:51:e3:ae:90:01:b4:38:d9:55:04:50:
57:dd:e0:eb:e3:c8:0c:fd:54:43:01:bb:29:36:36:
96:de:f1:b3:36:f1:91:5c:dc:7f:93:9e:2c:08:ae:
cc:e5:21:c3:49:2f:ac:bd:c1:22:9a:f7:48:e2:b3:
9a:32:20:a2:7b:1a:d1:71:e1:fd:85:b0:d0:e5:2b:
3e:57:a7:cc:26:62:b2:39:c3:05:d8:19:7e:3b:97:
e2:73:e1:3b:e1:52:de:fd:8a:72:60:38:75:67:4c:
30:98:2c:a9:73:6d:f9:74:06:dd:1d:84:d1:2f:a3:
75:05:56:28:02:7d:16:be:2b:bd:8d:ed:52:cc:f4:
1a:62:57:e2:06:83:a0:17:5b:20:7e:fd:e6:19:60:
9a:a8:28:ea:aa:7e:6a:d3:41:c9:df:ff:ff:11:ed:
6d:ec:a7:24:83:06:ac:50:ca:e3:16:6f:5a:3f:41:
b9:30:49:28:1f:30:34:20:b5:17:72:8b:e9:6e:e2:
40:ea:96:5f:20:92:d1:8e:87:1c:62:91:49:2a:a8:
5b:ec:0c:d1:19:a8:8f:47:67:5e:78:22:6c:a2:78:
54:bf:a2:c0:3a:7f:26:b6:da:9a:f4:e7:ae:21:3f:
21:fb:89:12:91:67:63:db:1b:cf:fb:03:c3:15:b6:
19:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:68:D3:75:D6:C2:BC:EA:25:F5:B5:C4:4E:49:C8:31:41:99:F0:47
X509v3 Authority Key Identifier:
keyid:CC:40:D9:62:42:B0:82:EF:E5:B4:F2:25:88:20:B3:05:93:96:19:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEDZYkKwgu_ltPIliCCzBZOWGY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:e9:c2:13:46:87:67:5a:69:a8:8f:74:7d:45:d7:38:b9:37:
4a:39:d5:12:78:01:57:00:9f:ef:cd:99:99:90:95:99:95:0e:
b8:5b:b3:f0:b2:5b:e3:41:75:b6:09:cf:d7:f6:0f:d4:d0:be:
43:0c:e2:a9:7a:b7:c9:5d:b2:65:03:a5:19:3a:38:d6:88:65:
bb:19:df:16:c0:7a:b7:1c:b3:e4:a6:4d:39:df:91:7b:25:a0:
ba:d9:f8:38:1b:2a:e4:c4:87:ec:87:f5:06:dc:4c:e2:55:84:
3f:7b:5d:c8:2e:84:82:ba:d3:70:8b:b3:a1:a8:30:15:85:4b:
91:b9:b1:aa:65:a5:cc:b1:6d:1d:27:7b:09:80:83:8d:37:83:
20:2d:62:5e:72:92:7a:6a:0a:f4:28:03:bd:f6:41:73:26:b9:
ab:32:f3:9f:7a:87:54:4e:00:25:1f:c9:4a:8a:28:34:88:55:
15:df:87:87:b0:0a:8d:5a:e8:f0:2b:ed:c1:8c:84:e9:f4:45:
c0:21:04:11:96:77:9f:ef:39:1d:14:d0:84:e6:bd:fd:6a:d3:
f7:00:8d:22:32:da:c7:a3:50:5c:e9:61:63:31:4a:39:f3:2b:
49:a5:d8:e4:40:62:c7:29:c1:3f:1a:54:67:79:e8:61:39:8a:
fb:bb:e9:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:15:24 2026 by rpki-client