Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft
File: zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft (raw, json)
Hash identifier: mC4ST/LzHDzDaQL6n6HoGrNPe0RiCg00l+K23T+4yDw=
Subject key identifier: 3B:B8:22:07:36:1E:BE:BA:24:96:F4:C1:37:D4:A2:83:96:E5:92:10
Authority key identifier: CE:38:47:66:75:10:F4:F2:E5:9B:B1:B3:94:AE:27:E8:DA:D0:DC:97
Certificate issuer: /CN=ce3847667510f4f2e59bb1b394ae27e8dad0dc97
Certificate serial: 019F93C8DAFEC42E4A9D5FB70C3BAA55046C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft
Manifest number: 0978
Signing time: Fri 24 Jul 2026 11:00:41 +0000
Manifest this update: Fri 24 Jul 2026 11:00:41 +0000
Manifest next update: Sat 25 Jul 2026 11:00:41 +0000
Files and hashes: 1: 8SFtp1aCFpYsdLLGD8-X8oWNs5M.roa (hash: vW27EEEHFIjxPNptjKVXW1mndyFG/tHqMAs2SVdYCFw=)
2: BXr8T58hSJEA-WIUlWA_j2WefBk.roa (hash: PXtNEgJxgvpk0g/Oj/zCBk+DYm9a/J1sVkZt5dkYamA=)
3: zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.crl (hash: VsC+CRgap6bgikmiCkTQ+Y4tFxQW31zzo0JH3rx0iyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c8:da:fe:c4:2e:4a:9d:5f:b7:0c:3b:aa:55:04:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce3847667510f4f2e59bb1b394ae27e8dad0dc97
Validity
Not Before: Jul 24 11:00:41 2026 GMT
Not After : Jul 25 11:00:41 2026 GMT
Subject: CN=3bb82207361ebeba2496f4c137d4a28396e59210
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:58:02:c6:bd:26:4d:d9:28:70:d0:66:29:fa:
ba:80:2a:2c:57:f3:d8:5b:45:ba:b0:47:2a:1a:70:
dc:db:ec:23:de:32:fa:1f:b8:33:59:4d:f1:f5:42:
7c:96:3d:b0:65:08:b6:9e:9a:01:ae:9e:c6:ba:2b:
a9:17:33:c7:c4:72:75:73:13:d8:a1:f4:1b:4a:d4:
0f:a2:29:77:ca:43:30:d2:b3:0b:f2:cf:4f:d9:7c:
a8:d6:7d:11:85:54:24:c0:b1:2e:70:1a:57:c9:1c:
a4:f9:83:d2:57:b1:90:54:f5:c6:44:9b:34:15:79:
b4:74:30:a6:e6:80:f6:aa:35:5c:16:07:85:22:a2:
89:45:78:ce:c0:bb:6a:b0:eb:66:59:a7:2a:16:be:
3c:8d:7d:c3:ad:e6:69:b8:01:c0:45:fa:18:16:71:
5a:85:f4:26:cd:7c:ad:7a:d8:fd:26:08:c9:03:5c:
f5:2b:50:b9:68:de:11:cd:16:42:bf:05:95:3b:55:
88:8b:ad:7a:1b:c4:ba:5f:48:4d:01:00:e7:a3:29:
83:9f:cd:a8:8b:40:62:74:4e:c1:71:bb:15:6a:7b:
bc:6d:49:54:c5:fe:be:3d:de:23:99:65:59:4d:8d:
13:49:c3:f5:1f:f0:08:28:20:e1:98:9f:2e:11:69:
1e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:B8:22:07:36:1E:BE:BA:24:96:F4:C1:37:D4:A2:83:96:E5:92:10
X509v3 Authority Key Identifier:
keyid:CE:38:47:66:75:10:F4:F2:E5:9B:B1:B3:94:AE:27:E8:DA:D0:DC:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:70:b7:02:7d:cd:2b:3c:a8:05:41:eb:8c:3f:e2:41:7b:f9:
49:6d:0c:59:a1:6e:77:b3:cd:ba:3b:e4:7f:c3:2d:10:8b:64:
b1:7e:c6:4d:be:ff:46:f1:21:b5:67:49:64:04:13:a2:76:0d:
00:54:3c:60:bf:0f:1f:d1:b7:cd:0e:b4:a5:7d:aa:6c:c7:05:
88:0d:98:71:ea:2d:2a:ec:99:2f:9e:4b:20:86:71:62:b4:7a:
aa:17:db:b6:3d:fd:3d:fd:c4:55:8d:94:0e:be:0d:d2:86:f0:
8a:b7:56:f1:c5:7d:b4:64:08:9d:f3:9b:e8:e9:c3:05:02:1d:
a4:11:cf:34:ae:35:9f:1e:50:da:54:f6:1c:56:06:e2:61:b3:
98:ac:44:cf:ea:29:bf:13:d1:df:9b:83:51:93:cf:96:00:af:
d0:8a:33:35:80:02:3a:1f:70:53:18:2a:c0:9b:c1:b6:3b:c8:
8c:8a:b2:11:20:05:31:39:d7:d7:5f:bf:19:1d:55:0e:79:1d:
ab:c9:39:14:09:af:cc:ab:0d:46:28:54:ae:1f:52:ea:d6:d6:
19:aa:e8:ed:f0:0c:40:b2:6a:a0:fd:01:34:27:f8:d7:f1:b9:
9f:9b:d4:fe:c4:d2:00:8b:5e:e1:d7:ac:f5:e5:56:1d:c0:ce:
26:cc:e9:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:31:05 2026 by rpki-client