Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/sZPxphH_PZUKvZZlLNqgVaNR20U.mft
File: sZPxphH_PZUKvZZlLNqgVaNR20U.mft (raw, json)
Hash identifier: e+4h9s6qYxpsYmXRRb5mB3hLVInVTlxAv8qHleDeDHE=
Subject key identifier: 7F:39:35:DC:9A:55:09:8D:89:23:09:FA:DA:C1:62:5B:E1:3C:DC:44
Authority key identifier: B1:93:F1:A6:11:FF:3D:95:0A:BD:96:65:2C:DA:A0:55:A3:51:DB:45
Certificate issuer: /CN=b193f1a611ff3d950abd96652cdaa055a351db45
Certificate serial: 019FAA87FC1DF956E0F696F2CBBA873AE439
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sZPxphH_PZUKvZZlLNqgVaNR20U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/sZPxphH_PZUKvZZlLNqgVaNR20U.mft
Manifest number: 4D
Signing time: Tue 28 Jul 2026 21:01:06 +0000
Manifest this update: Tue 28 Jul 2026 21:01:06 +0000
Manifest next update: Wed 29 Jul 2026 21:01:06 +0000
Files and hashes: 1: 0o1C4vwLrtJhxZJe2NWXXgCUrq8.roa (hash: 3Fe9Azb+RrHGaKENizsao17NNGxQe5yH/WD4Wqllrkg=)
2: sZPxphH_PZUKvZZlLNqgVaNR20U.crl (hash: VTn9RPDT7ZBS2a4CcupSSlcZJA9dw+v0RhpY70mhV7g=)
3: zzpXRXiaaDaUNJgb8J2uf-9tibo.roa (hash: 6IAZNXyLJkKu4qRWV3DHkLx2sFZt0DSc2M4cQ6BsTRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/sZPxphH_PZUKvZZlLNqgVaNR20U.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/sZPxphH_PZUKvZZlLNqgVaNR20U.mft
rsync://rpki.ripe.net/repository/DEFAULT/sZPxphH_PZUKvZZlLNqgVaNR20U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:fc:1d:f9:56:e0:f6:96:f2:cb:ba:87:3a:e4:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b193f1a611ff3d950abd96652cdaa055a351db45
Validity
Not Before: Jul 28 21:01:06 2026 GMT
Not After : Jul 29 21:01:06 2026 GMT
Subject: CN=7f3935dc9a55098d892309fadac1625be13cdc44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b0:9c:a8:6c:7e:bf:36:91:ef:2b:c4:1f:32:
cb:61:b0:32:44:2c:ed:5a:e3:ca:43:36:3c:24:dd:
e2:2a:a8:bb:08:30:48:56:8b:41:90:a5:92:d4:f4:
ca:c6:c9:be:8a:7a:fb:e0:52:e2:84:25:7a:20:d9:
eb:9d:8b:f7:eb:62:e1:bd:f4:52:28:b1:00:66:f8:
7b:39:d1:78:c8:98:f9:93:c7:b2:78:a9:93:74:c2:
bc:9c:f1:82:82:f1:2d:b4:21:3f:5f:2c:8f:93:9b:
71:32:ec:94:11:b7:ec:cb:a2:b4:a7:71:c7:51:27:
e2:19:62:cd:a4:dd:37:0c:b5:65:2f:0d:73:a4:bf:
ad:9b:9c:58:87:de:90:ef:e8:6c:86:96:c9:14:1b:
fa:bb:3b:dd:da:bd:9e:db:6c:d5:22:36:98:5d:73:
78:46:af:0a:a7:1e:32:e6:17:19:18:74:e2:e6:5e:
16:32:94:4f:0f:9a:a2:b6:b6:79:2a:45:d3:81:e2:
a1:03:2e:a1:31:b2:64:af:de:e9:5c:e5:f0:c6:95:
61:64:94:ff:ac:81:f8:53:93:9e:ee:f9:09:4f:6d:
db:24:d3:4d:e2:2d:1b:dd:91:68:2a:44:d9:d2:a4:
d0:d7:37:bc:5a:ef:59:4c:dd:15:a6:d2:71:ad:40:
13:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:39:35:DC:9A:55:09:8D:89:23:09:FA:DA:C1:62:5B:E1:3C:DC:44
X509v3 Authority Key Identifier:
keyid:B1:93:F1:A6:11:FF:3D:95:0A:BD:96:65:2C:DA:A0:55:A3:51:DB:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZPxphH_PZUKvZZlLNqgVaNR20U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/sZPxphH_PZUKvZZlLNqgVaNR20U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/sZPxphH_PZUKvZZlLNqgVaNR20U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:40:16:ce:ae:13:6b:b4:d1:d0:8b:f0:7c:15:c0:2a:a7:88:
9f:82:5f:cb:0b:4f:5a:a6:a9:d5:4f:c7:27:39:27:1b:23:9c:
e6:d4:19:6b:63:62:18:48:37:f3:49:8e:df:76:fa:9e:09:06:
71:bf:8b:b4:63:18:50:df:f3:01:63:2c:14:d4:a1:38:84:b0:
e9:ee:32:91:3a:6a:4e:5b:6c:c6:47:af:a2:45:06:77:0f:6b:
78:47:77:8f:a3:c5:0b:79:67:ae:14:ad:c6:33:6a:5b:48:e9:
b5:df:a5:82:ef:7e:e4:f1:7b:95:b9:21:46:8b:d0:83:a7:07:
92:15:49:6c:62:32:a6:40:52:c3:87:c9:dd:fe:99:e9:e7:6f:
ee:70:7c:b8:cf:b8:93:a5:ae:c4:04:c9:ea:9a:a9:0c:b5:20:
8f:87:43:6b:fc:f7:a0:52:bc:4e:ca:dd:21:25:54:ec:b1:07:
40:0c:84:80:d2:b3:2e:54:e1:8e:d7:da:39:ee:14:2e:e1:07:
53:b0:3a:7d:8c:8d:f8:ca:bb:56:67:00:eb:35:47:d7:91:6f:
34:3b:87:94:80:cd:a8:c9:52:d5:5c:9c:c0:1a:02:38:7c:40:
11:ce:f0:81:dd:f9:d4:00:df:ff:7e:f2:3f:cf:cd:32:73:e4:
98:8c:78:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:59:00 2026 by rpki-client