Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft
File: zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft (raw, json)
Hash identifier: YTx8043wsYs/NKCRNXwU+/LujfwBM4T5BFLEQnhHojU=
Subject key identifier: B6:2B:D8:40:60:7C:37:FF:05:A8:1B:02:47:0D:32:0D:0A:29:AA:CA
Authority key identifier: CF:12:80:11:9F:44:0E:B9:9C:1E:64:D7:35:F2:DB:1E:FC:F9:38:27
Certificate issuer: /CN=cf1280119f440eb99c1e64d735f2db1efcf93827
Certificate serial: 019FAB2CCEC31E1FECCB4D7C6AFD40093361
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft
Manifest number: 05E7
Signing time: Wed 29 Jul 2026 00:01:08 +0000
Manifest this update: Wed 29 Jul 2026 00:01:08 +0000
Manifest next update: Thu 30 Jul 2026 00:01:08 +0000
Files and hashes: 1: PZvM7OV3HBSDzuz3mBSkNgZPzmc.roa (hash: kJSRxmzdiI7BIFbxUX/bJ1SrkVhLp4C99F6EL5K5kVE=)
2: zxKAEZ9EDrmcHmTXNfLbHvz5OCc.crl (hash: wNgVO5nMZ0WvcEnXxO53Re9whCD0MeuZ7iqnZhzRyu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:2c:ce:c3:1e:1f:ec:cb:4d:7c:6a:fd:40:09:33:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf1280119f440eb99c1e64d735f2db1efcf93827
Validity
Not Before: Jul 29 00:01:08 2026 GMT
Not After : Jul 30 00:01:08 2026 GMT
Subject: CN=b62bd840607c37ff05a81b02470d320d0a29aaca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ee:ad:0c:be:87:02:57:79:06:97:d1:56:ac:
fe:39:96:2d:a1:60:63:06:81:a8:a1:cd:68:a5:17:
61:94:3e:ce:92:20:08:ef:11:ac:04:cd:bd:40:3d:
68:04:1b:7f:ab:80:07:cd:3f:01:71:2e:cf:5b:05:
a2:6f:9f:5e:5e:6e:18:4e:67:bf:8b:6d:56:53:a4:
4d:08:5c:6b:d4:42:29:92:53:f5:87:94:99:c7:74:
9a:71:7c:89:d3:df:00:be:cc:47:35:04:de:ba:1b:
75:3e:ae:4b:e6:69:0f:10:16:68:a9:76:98:96:cc:
b0:91:e3:42:c2:8c:fe:57:93:a1:28:54:f4:84:b7:
b0:1e:c6:82:cc:51:f8:7a:90:8f:d8:49:78:d6:70:
56:f7:45:9d:2f:f6:ee:08:10:31:5b:43:1f:b1:51:
64:72:6f:09:a3:ae:0b:3f:7b:96:39:c4:ec:0b:67:
4e:07:80:82:a9:23:e1:1c:d9:d0:fc:7b:5b:f6:18:
8b:9e:aa:5d:62:f6:bd:07:51:e7:40:09:a6:c4:56:
9b:e9:37:df:1c:26:d5:52:a9:e5:47:34:16:b3:a3:
e6:b0:65:69:b8:a8:19:77:c1:d2:25:78:43:da:85:
1e:f0:90:74:e8:90:bb:35:d1:5a:9b:dd:e8:aa:c8:
27:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:2B:D8:40:60:7C:37:FF:05:A8:1B:02:47:0D:32:0D:0A:29:AA:CA
X509v3 Authority Key Identifier:
keyid:CF:12:80:11:9F:44:0E:B9:9C:1E:64:D7:35:F2:DB:1E:FC:F9:38:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:4c:09:cf:50:91:bc:0d:17:65:49:06:cc:e2:79:ad:4e:b3:
44:72:1c:e8:1d:2f:82:a0:8b:04:42:e4:f6:57:ca:58:45:ad:
68:36:00:17:0d:de:d8:27:6a:b4:ba:89:28:86:cb:9a:72:fd:
a6:d0:73:8a:80:1f:e4:86:d3:31:70:4a:8a:de:f4:8b:1e:ba:
0f:9c:13:33:13:55:59:af:09:7c:fc:6a:d6:90:e2:6f:94:0c:
8d:90:65:80:8f:a1:42:8e:eb:fa:2f:76:61:d6:ce:38:d2:9b:
88:4e:20:57:fe:20:8b:6f:5b:8b:f7:dd:35:49:53:e7:d4:15:
ed:95:42:85:fc:62:5a:3d:06:ca:6b:a2:ce:88:38:33:73:84:
8d:1a:bc:f6:fe:b0:07:ca:7d:5e:c7:82:91:b7:16:39:70:66:
f4:c6:c0:0c:c1:74:29:65:c0:e5:eb:bb:b1:89:52:55:ee:01:
3d:46:38:e9:2c:7b:1f:54:72:52:1d:14:80:c4:b2:ee:c4:16:
f5:7a:d5:33:da:26:fe:1d:90:78:10:14:f7:85:e0:b0:0c:90:
c9:88:c1:61:7a:b5:a9:b1:10:2c:5b:30:1d:20:35:d6:c5:11:
49:69:45:45:bc:9e:ff:75:e1:b7:af:37:55:90:c8:11:f4:b1:
67:db:8a:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:28:07 2026 by rpki-client