Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.mft
File: zNNXkIMM50aalMWbLizLv1420T8.mft (raw, json)
Hash identifier: NobxbLaLc7SjL8gxnaQVzvebsfY8wR+doSoQ9CTxlpc=
Subject key identifier: BD:C8:C1:2D:52:5F:91:09:BA:47:81:85:C4:70:70:5B:7E:79:B7:F9
Authority key identifier: CC:D3:57:90:83:0C:E7:46:9A:94:C5:9B:2E:2C:CB:BF:5E:36:D1:3F
Certificate issuer: /CN=ccd35790830ce7469a94c59b2e2ccbbf5e36d13f
Certificate serial: 019FA8D010C9026C03ED3FF600753C0CA70E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNNXkIMM50aalMWbLizLv1420T8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.mft
Manifest number: 144A
Signing time: Tue 28 Jul 2026 13:00:35 +0000
Manifest this update: Tue 28 Jul 2026 13:00:35 +0000
Manifest next update: Wed 29 Jul 2026 13:00:35 +0000
Files and hashes: 1: TUvmrgBE44ev_WdD8HZ7-Tqrsvk.roa (hash: eGtgmPAMsFLuXajQP6UacgNI2KT3PlnsWKJ/DF91EtU=)
2: v87hPEGnMIsf-U-27Xa5aB7InJ0.roa (hash: vpt3+IR1X8NAWDYMxgQL6E8vBwuUgUGdnpH6ThIVLCI=)
3: zNNXkIMM50aalMWbLizLv1420T8.crl (hash: zaNyA9pdCinR2EQhSaMM2qZRDXC+GTwo9vkWcUQY/gI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zNNXkIMM50aalMWbLizLv1420T8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:d0:10:c9:02:6c:03:ed:3f:f6:00:75:3c:0c:a7:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd35790830ce7469a94c59b2e2ccbbf5e36d13f
Validity
Not Before: Jul 28 13:00:35 2026 GMT
Not After : Jul 29 13:00:35 2026 GMT
Subject: CN=bdc8c12d525f9109ba478185c470705b7e79b7f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:21:93:9e:2b:14:8c:11:f0:95:30:fe:88:03:
1a:05:3f:89:0f:68:ee:03:8a:15:75:94:c6:88:d4:
2b:8e:71:ab:af:2b:56:ba:ce:98:01:ff:b5:82:61:
86:2f:0d:35:98:28:da:a1:38:80:f0:87:43:40:0a:
cd:63:96:b1:5f:8e:91:a2:0c:8f:d3:6d:57:c7:32:
a2:84:7b:45:c9:dc:bf:7a:89:d7:56:55:85:0a:19:
79:db:a1:b2:8b:17:39:16:6c:35:4e:22:6c:ba:7d:
a2:5c:98:28:8b:af:9c:67:c5:6f:90:36:66:2b:8e:
76:e8:53:bd:9e:8f:4d:e5:68:ca:81:7d:f2:5e:c3:
30:f1:b5:4b:e5:6d:0f:02:4f:7e:18:46:93:07:14:
f3:5b:e1:a6:49:32:1f:52:12:2f:02:5c:16:f0:98:
21:93:ff:84:42:4b:86:56:9e:a4:00:45:2f:fe:d2:
6c:56:cc:af:c6:1d:57:30:f3:f6:f3:70:9f:80:c7:
8e:6c:7f:b7:d0:31:6e:32:7b:e8:2e:03:74:a9:c5:
2b:4c:74:45:79:cc:0f:92:84:9b:b7:06:66:4a:4e:
de:f5:57:96:4f:fe:b6:56:09:f4:3e:b5:8f:42:75:
b5:69:4c:14:59:0b:16:cd:40:fa:d6:49:9b:61:19:
1f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:C8:C1:2D:52:5F:91:09:BA:47:81:85:C4:70:70:5B:7E:79:B7:F9
X509v3 Authority Key Identifier:
keyid:CC:D3:57:90:83:0C:E7:46:9A:94:C5:9B:2E:2C:CB:BF:5E:36:D1:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNNXkIMM50aalMWbLizLv1420T8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:37:76:19:51:28:4a:16:c8:16:91:7d:b5:e3:2e:00:b4:c8:
b0:73:36:75:b1:c6:c1:c8:8f:f4:87:36:6c:10:bb:76:c7:11:
85:e9:bf:6a:59:96:53:3e:1a:49:7d:c3:e7:2f:ff:e7:f7:36:
d2:ed:3e:cf:ea:a0:69:df:a7:f5:68:03:bd:b6:21:dd:ac:26:
61:56:43:9b:88:15:90:25:16:bf:34:d6:e5:34:49:20:45:3b:
e2:b5:0e:a0:37:2c:89:e4:04:7c:44:d2:46:14:04:60:47:63:
17:ee:fd:b3:15:44:54:9a:9b:50:ee:10:7d:e8:ed:24:85:23:
fe:35:76:8e:08:8d:a3:86:96:03:c6:b4:63:2e:fe:a6:bc:1a:
72:cc:24:27:3d:1e:1c:cd:ca:06:9b:63:04:57:95:84:15:71:
d9:5f:1b:f4:29:32:ee:ea:ee:ee:69:c4:62:67:c0:e0:f8:55:
f4:35:e6:0e:8d:1d:61:eb:87:d3:b6:1c:fd:e6:5a:ae:07:64:
0c:b2:53:3d:71:f3:6f:1e:53:2b:09:d4:84:87:df:c3:3c:db:
7b:42:c2:c6:3f:48:08:a0:7f:39:a5:88:23:a2:ed:de:03:9d:
ba:c5:2a:fa:b5:e1:30:dc:d2:95:ec:3c:0d:dd:23:16:b6:fc:
f9:c2:b8:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:50:37 2026 by rpki-client