Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.mft
File: ZRDCbzpPrHAKx7DjSQuPoXXwitg.mft (raw, json)
Hash identifier: Ty9iZl01XzRLv1+tKLruGQigdMzwqLgsuW5Q9zdh8Xw=
Subject key identifier: 8F:2F:6D:69:23:15:33:F8:C3:21:CB:68:A1:46:6D:3B:42:C9:94:6D
Authority key identifier: 65:10:C2:6F:3A:4F:AC:70:0A:C7:B0:E3:49:0B:8F:A1:75:F0:8A:D8
Certificate issuer: /CN=6510c26f3a4fac700ac7b0e3490b8fa175f08ad8
Certificate serial: 019F8F4772102F271342B1C96C9D11539D1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZRDCbzpPrHAKx7DjSQuPoXXwitg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.mft
Manifest number: 19CA
Signing time: Thu 23 Jul 2026 14:00:51 +0000
Manifest this update: Thu 23 Jul 2026 14:00:51 +0000
Manifest next update: Fri 24 Jul 2026 14:00:51 +0000
Files and hashes: 1: ZRDCbzpPrHAKx7DjSQuPoXXwitg.crl (hash: 2/FQJzjVTdQyQJ82oPVcsFsVuIQr5BRLNj4nuFY1Tck=)
2: _6LzupxXASaoZ39swk7m_G9Thtg.roa (hash: xvwqWAO3JPwTFbg3Vo/ega941AhbF1rkG80Zci2/F8E=)
3: fjLqd8nX00J9fe0_2aJ2e9FwgbY.asa (hash: hHImG8Y2r794WFIY//Kga9NCrwxYUH3dsvX+/DPBAtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZRDCbzpPrHAKx7DjSQuPoXXwitg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:47:72:10:2f:27:13:42:b1:c9:6c:9d:11:53:9d:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6510c26f3a4fac700ac7b0e3490b8fa175f08ad8
Validity
Not Before: Jul 23 14:00:51 2026 GMT
Not After : Jul 24 14:00:51 2026 GMT
Subject: CN=8f2f6d69231533f8c321cb68a1466d3b42c9946d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:01:71:df:e8:74:2e:a5:a7:45:83:a3:ac:7d:
00:96:01:9f:ad:0e:9a:7c:7c:78:5d:69:fa:d5:d7:
0c:f8:2a:c1:5f:4f:67:86:ab:74:38:61:23:93:f8:
e2:69:67:5c:cb:ff:c0:32:3d:68:c5:e1:84:da:a1:
d6:18:32:86:2b:58:d5:51:fc:14:4f:e5:b4:96:4c:
50:1a:60:83:0c:89:cd:2f:4d:80:b9:11:06:aa:ce:
ce:e8:1a:b7:54:2c:4a:d5:f6:a4:b1:21:79:dc:9b:
7e:8d:4b:2b:83:17:3b:17:21:62:bc:62:39:e5:0e:
0f:49:1a:61:74:03:8a:7b:87:06:7e:47:ce:a5:d5:
dd:7e:70:96:23:c3:2b:e7:3e:fc:c3:76:fa:b3:4b:
8c:a6:4c:7e:cb:db:26:4c:86:e5:34:fe:94:d6:2a:
b5:69:a0:07:eb:e9:f3:cb:8a:de:04:01:06:65:35:
f6:62:ac:70:2b:23:29:11:62:45:47:dc:de:23:0c:
15:68:a3:48:ce:e0:a5:35:f7:7a:ce:19:e6:47:a1:
32:02:67:2e:96:88:4c:fb:e5:b2:27:6d:29:e7:1c:
b4:18:41:78:79:ea:ea:ce:43:0d:44:08:98:a2:e0:
15:05:20:1b:a0:fe:7f:a3:79:a1:86:ac:04:f4:c2:
2c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:2F:6D:69:23:15:33:F8:C3:21:CB:68:A1:46:6D:3B:42:C9:94:6D
X509v3 Authority Key Identifier:
keyid:65:10:C2:6F:3A:4F:AC:70:0A:C7:B0:E3:49:0B:8F:A1:75:F0:8A:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRDCbzpPrHAKx7DjSQuPoXXwitg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:3f:27:7f:b0:4d:f1:3f:a9:92:df:4c:4a:4b:98:61:74:42:
f8:87:1a:15:d0:41:30:b9:33:6a:0e:01:bd:ed:51:f5:4e:29:
8a:b1:b8:ba:f5:eb:33:4f:d7:2a:15:65:dd:c0:ce:35:8f:3c:
f8:8b:8d:3f:37:4c:5b:af:67:0d:be:d5:21:92:a9:90:c6:97:
fd:1d:2c:3c:40:8d:24:da:45:ad:31:fc:64:a5:ac:de:62:92:
56:71:4c:f5:4f:72:da:ca:1a:59:16:22:17:5f:38:d6:a8:13:
1a:10:47:08:ad:2d:0a:fa:87:2b:9a:09:e6:2a:af:02:ad:97:
f8:89:5b:38:cf:ae:38:82:01:24:61:0b:21:e0:e7:35:2d:48:
bb:28:63:8c:b8:b4:b9:95:8a:f8:cb:df:b4:e1:99:f3:b2:22:
ac:0b:62:cc:8a:57:0c:2f:24:6c:05:d5:4e:8f:fc:b9:db:51:
60:8d:c7:e0:ca:3f:1d:ba:4f:40:9f:1a:f6:06:55:17:e8:04:
67:51:02:cb:e2:97:96:b5:b9:d2:59:3a:55:5e:c2:02:56:b8:
f3:87:49:45:4b:bb:28:dd:55:0e:82:22:b6:e2:94:44:a0:0e:
ab:00:21:e9:6b:7e:f6:5d:b4:40:e7:03:b1:06:e0:13:8e:a0:
7f:ba:55:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:02:53 2026 by rpki-client