Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.mft
File: zRJC5sfr2Coj-hoI85br5as0z2s.mft (raw, json)
Hash identifier: JNq7BjmAbxS+AXFoMGx4nsBqGodTAYaCxX53pi0Glvo=
Subject key identifier: 22:11:B7:73:7E:50:B6:71:F2:82:E2:40:FA:C2:5A:0C:5A:71:1F:CA
Authority key identifier: CD:12:42:E6:C7:EB:D8:2A:23:FA:1A:08:F3:96:EB:E5:AB:34:CF:6B
Certificate issuer: /CN=cd1242e6c7ebd82a23fa1a08f396ebe5ab34cf6b
Certificate serial: 019F9549E8389E3CEF2136600A2020D812EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRJC5sfr2Coj-hoI85br5as0z2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 18:01:16 +0000
Manifest this update: Fri 24 Jul 2026 18:01:16 +0000
Manifest next update: Sat 25 Jul 2026 18:01:16 +0000
Files and hashes: 1: nOWsqCuFuUl88d8fe68oh7ATL8Y.roa (hash: 3ZcPCRJToIBazA6ZM2eZ5k1Cl21KURsg9GhtHBDZCsw=)
2: vyrrFLAQmM4kpL-C4kzXL9B0pEk.roa (hash: uDR2ErZozryJ4og8nKltQlCSGLY9GDhP6CrAdfmEEk8=)
3: zRJC5sfr2Coj-hoI85br5as0z2s.crl (hash: /oOQJagLgSRJbYDc2lrLrgs+SaYnp+Wnnh2JEFJBR1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/zRJC5sfr2Coj-hoI85br5as0z2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:49:e8:38:9e:3c:ef:21:36:60:0a:20:20:d8:12:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd1242e6c7ebd82a23fa1a08f396ebe5ab34cf6b
Validity
Not Before: Jul 24 18:01:16 2026 GMT
Not After : Jul 25 18:01:16 2026 GMT
Subject: CN=2211b7737e50b671f282e240fac25a0c5a711fca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:37:84:f3:66:f2:2a:3c:20:70:e4:57:7b:d7:
f5:70:ac:8f:2c:3b:11:87:89:f9:4c:54:c3:a1:c7:
be:37:91:bb:d0:92:a2:f3:e3:f7:54:47:f9:9a:b0:
d1:fa:de:d2:6b:da:5c:02:a2:57:0d:6a:c4:6b:be:
75:53:79:5a:9a:48:96:8b:2b:aa:d3:9c:60:db:a8:
81:a6:49:73:96:2b:92:d0:ad:d1:b5:36:2d:0a:62:
fa:29:fb:61:0d:8f:c3:3b:c2:89:ec:bd:81:ec:f4:
fe:0e:fb:35:13:64:12:69:18:96:48:fe:1d:34:ff:
13:ef:0a:59:f9:f9:74:8d:78:b2:0c:1a:54:9e:93:
4c:07:38:5b:f6:c7:75:9d:37:3e:2a:06:99:57:60:
9a:d2:dd:67:95:ea:e6:f3:f4:93:d6:e4:86:5a:f4:
c0:9e:e7:68:06:98:65:7e:fe:5b:59:f0:1b:8f:71:
78:4a:31:6e:42:f1:b5:d2:71:cd:5f:d8:ae:0c:24:
5b:b5:aa:15:22:b4:16:7c:49:54:b4:2a:a8:7f:b8:
50:5e:3b:eb:b5:f4:0c:2d:60:6f:db:c4:a9:6a:ed:
aa:93:c3:26:eb:ed:8c:fa:01:91:84:d0:1f:6d:2b:
1e:4e:c0:ef:24:4a:c3:7c:81:d7:fa:69:cb:0d:72:
23:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:11:B7:73:7E:50:B6:71:F2:82:E2:40:FA:C2:5A:0C:5A:71:1F:CA
X509v3 Authority Key Identifier:
keyid:CD:12:42:E6:C7:EB:D8:2A:23:FA:1A:08:F3:96:EB:E5:AB:34:CF:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRJC5sfr2Coj-hoI85br5as0z2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:78:66:26:fb:85:30:0d:3b:b1:d1:5f:68:2f:94:15:d5:c0:
a6:ce:93:27:53:f6:a1:34:5a:0c:e4:dd:ff:7c:14:c0:88:ef:
9f:cc:a3:c3:f2:7f:89:86:1e:54:7b:c6:c3:86:3f:78:c6:f7:
6e:a0:72:f3:87:29:ce:e1:51:37:e1:b4:e7:de:3c:cf:d3:15:
7d:07:d6:5b:15:7f:5b:ab:79:eb:23:d2:71:f5:b8:6d:c5:b0:
f9:f7:b6:4a:0a:49:1d:f3:97:ea:b1:48:64:48:77:71:5a:8b:
29:3a:60:95:25:3e:61:4d:c9:fc:74:81:74:78:18:5a:65:91:
5e:bc:b1:ee:a9:c6:97:d8:84:5a:87:99:c5:ce:0c:2a:a3:84:
ad:3f:d9:a0:ce:a0:39:c9:ad:d6:5a:94:14:45:91:fa:bd:c1:
65:b3:bd:28:f5:a0:c3:41:60:fc:57:d8:dd:84:a5:c8:ef:c4:
ff:98:47:ca:ed:1e:f7:af:a0:6c:2b:55:64:03:57:73:96:5a:
4b:92:4f:a5:fb:4f:20:44:89:b3:a6:af:fa:46:3b:de:22:16:
ed:1e:56:09:60:f4:97:6d:2f:1b:82:db:e1:bd:2d:2b:db:38:
3c:84:7a:e6:3d:3f:59:f1:d3:b9:89:28:83:03:84:77:5c:f8:
a9:7a:84:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:57:25 2026 by rpki-client