Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/d527f8-e5af-4820-a248-1e66505131ca/1/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.mft
File: ZdZjKVdsnAGzzYKF9LVLAXDYw5o.mft (raw, json)
Hash identifier: F7yQSJIp1Keomuot8BU8cf6/R12IRv33Y/xWF5yljFY=
Subject key identifier: 20:EA:BD:8D:EE:B7:C2:5A:D7:01:6A:8A:B3:24:51:5E:75:D0:DA:F9
Authority key identifier: 65:D6:63:29:57:6C:9C:01:B3:CD:82:85:F4:B5:4B:01:70:D8:C3:9A
Certificate issuer: /CN=65d66329576c9c01b3cd8285f4b54b0170d8c39a
Certificate serial: 019F92B67E4E4CA0540B1D936FD952533244
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/d527f8-e5af-4820-a248-1e66505131ca/1/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.mft
Manifest number: 1686
Signing time: Fri 24 Jul 2026 06:01:01 +0000
Manifest this update: Fri 24 Jul 2026 06:01:01 +0000
Manifest next update: Sat 25 Jul 2026 06:01:01 +0000
Files and hashes: 1: GZsPzmbA--FYrc4SNgLcVzZUS58.roa (hash: gCmBdutjh3s8CjQ+XZ5HjES4JuiIxCATlIX/+TCZL7A=)
2: ZdZjKVdsnAGzzYKF9LVLAXDYw5o.crl (hash: 9J4MHjn944HVvGxUhLL12kqRGUOLlN8Om7ICYLfuUxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/d527f8-e5af-4820-a248-1e66505131ca/1/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/d527f8-e5af-4820-a248-1e66505131ca/1/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b6:7e:4e:4c:a0:54:0b:1d:93:6f:d9:52:53:32:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65d66329576c9c01b3cd8285f4b54b0170d8c39a
Validity
Not Before: Jul 24 06:01:01 2026 GMT
Not After : Jul 25 06:01:01 2026 GMT
Subject: CN=20eabd8deeb7c25ad7016a8ab324515e75d0daf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6d:80:97:1d:2f:b3:6a:6a:fe:e7:39:aa:97:
1b:ab:83:c6:94:7e:c4:c1:6f:21:44:71:d5:7c:b0:
65:40:7a:cc:a8:4e:d7:95:9f:ac:3a:fa:7b:6e:93:
5c:aa:ff:19:1c:22:87:2b:07:87:6b:c4:45:a2:6a:
8a:05:8a:6b:c8:9f:4f:03:0b:46:86:b7:2c:e6:6a:
79:6a:b0:ca:f5:56:5b:f9:7c:3d:0a:17:e7:c7:54:
ac:84:a8:9a:d9:f7:8d:ad:27:5e:05:dc:b1:05:f8:
6f:d1:5d:35:1a:43:5f:ca:36:d8:70:df:77:a6:34:
e1:a3:39:08:6d:f9:0b:37:3e:bc:ca:ca:b3:a2:9f:
63:26:df:b7:b2:31:bd:8b:fc:44:35:ff:62:f9:4b:
f6:21:33:87:62:7a:59:11:6c:dc:b2:0d:6f:b9:5b:
15:34:50:82:16:b1:e8:ac:7f:5a:d3:d1:b4:17:0d:
35:2f:37:05:b5:c8:8a:5a:0f:ca:83:c4:9b:ba:20:
35:07:d0:8a:be:89:1c:84:2c:20:38:3a:49:b8:cf:
dc:b7:61:f9:e8:5f:7f:ac:0a:63:56:8a:c9:cc:8d:
f4:e8:e4:87:b8:9c:84:a3:c9:89:14:8d:fb:02:f9:
f0:2e:3c:a7:87:9c:82:57:bc:b0:3c:95:b4:1e:df:
e8:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:EA:BD:8D:EE:B7:C2:5A:D7:01:6A:8A:B3:24:51:5E:75:D0:DA:F9
X509v3 Authority Key Identifier:
keyid:65:D6:63:29:57:6C:9C:01:B3:CD:82:85:F4:B5:4B:01:70:D8:C3:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d527f8-e5af-4820-a248-1e66505131ca/1/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d527f8-e5af-4820-a248-1e66505131ca/1/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:2a:1e:af:a0:4f:ac:52:f4:a8:01:2e:8b:68:16:12:7b:68:
e5:01:0c:5f:09:5a:6a:c3:68:91:e5:a9:02:14:54:57:2d:a9:
a9:7e:43:6c:42:89:dd:4f:dd:78:25:a6:8e:29:91:0c:b5:1c:
1b:19:29:c8:05:1c:7c:31:68:98:b6:61:12:e4:0f:0c:2c:d5:
47:a0:d2:b2:c2:99:21:40:2d:47:06:50:6b:17:98:67:73:9d:
5c:51:9e:19:82:22:9a:c9:5a:06:5e:21:6f:1c:1a:0f:52:10:
9e:63:f7:6c:23:1f:f1:40:c1:4d:45:11:ae:96:44:ff:89:6f:
03:e3:ad:75:aa:c9:e8:01:58:b8:fb:0a:64:f8:48:a7:40:37:
b8:bb:07:0e:ae:53:bc:8c:62:ed:53:ea:cc:c7:0b:3a:84:ea:
1b:3e:34:74:cf:f4:3e:cf:f9:7f:53:a9:59:16:88:e5:fd:e2:
a0:65:b0:54:c1:33:23:e1:b8:b3:b9:b2:42:37:bc:8a:2a:fb:
7c:22:dc:d4:71:30:ea:c3:95:50:76:f1:99:04:b2:a6:ad:40:
11:4d:f3:7a:41:29:97:cc:33:53:dc:11:11:d2:f3:e5:a7:03:
3c:0d:ba:7b:f1:6e:fc:2d:e7:68:8a:a5:e9:3c:46:87:10:2b:
06:4c:17:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:54:29 2026 by rpki-client