Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.mft
File: ZjhRXzKUSWmuADG94C0fTL0NK5g.mft (raw, json)
Hash identifier: qFhoEWx3Us6wc4AwuVWMsxKFYTQbxtsgpKxFv6fi0B4=
Subject key identifier: 3D:33:DC:39:0F:02:FB:21:23:A7:D7:E0:A9:8C:B1:17:65:53:1C:E0
Authority key identifier: 66:38:51:5F:32:94:49:69:AE:00:31:BD:E0:2D:1F:4C:BD:0D:2B:98
Certificate issuer: /CN=6638515f32944969ae0031bde02d1f4cbd0d2b98
Certificate serial: 019FAB636866BFA4D632F88233D5B6FBC359
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZjhRXzKUSWmuADG94C0fTL0NK5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.mft
Manifest number: 0534
Signing time: Wed 29 Jul 2026 01:00:46 +0000
Manifest this update: Wed 29 Jul 2026 01:00:46 +0000
Manifest next update: Thu 30 Jul 2026 01:00:46 +0000
Files and hashes: 1: EQIS8hUY1cmRXKR2EV3HGZu3pAA.roa (hash: Wp9jKVUnjH19KZBMjioHvcWYEkt9n8/MKYDMHRVjrW8=)
2: U6_BOZR92hnw_a9L4P6TzqeXhec.roa (hash: g5QjwrMvRa/952IazG0KYw2xw/6dTSo8fap6F5NGQ7c=)
3: ZjhRXzKUSWmuADG94C0fTL0NK5g.crl (hash: UcnMlY2WvcbyL8Am+yDcto1XEZVD8I/q2oJ4DzmECPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZjhRXzKUSWmuADG94C0fTL0NK5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:63:68:66:bf:a4:d6:32:f8:82:33:d5:b6:fb:c3:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6638515f32944969ae0031bde02d1f4cbd0d2b98
Validity
Not Before: Jul 29 01:00:46 2026 GMT
Not After : Jul 30 01:00:46 2026 GMT
Subject: CN=3d33dc390f02fb2123a7d7e0a98cb11765531ce0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:3a:78:dd:d3:c0:bc:7f:5c:fc:5d:a2:7e:59:
cb:a5:e3:1a:3b:8c:2a:2c:dc:76:60:96:6f:5f:e6:
b3:02:31:73:74:29:e0:f8:c0:d5:b4:b5:79:f9:34:
09:e2:a1:74:aa:21:69:e6:59:8c:76:e6:f8:0b:a3:
44:48:e0:48:31:84:78:c0:52:af:81:9a:7a:40:0d:
c5:81:97:4e:3f:b2:ea:27:14:78:d7:bd:0d:4f:6a:
8b:26:ee:f8:02:2f:9c:1b:84:54:62:7e:e2:6a:c8:
35:af:29:1e:53:26:2f:ef:bd:86:c3:36:69:bc:86:
31:cd:bf:64:2f:88:f5:50:e4:c9:f8:72:f8:ba:3f:
14:5f:30:63:b3:1a:62:f5:15:96:fc:15:b3:c5:62:
43:aa:4f:a3:f4:f8:7e:c1:71:1e:ad:02:3b:43:a1:
0f:1b:ac:84:fb:45:5b:a3:d5:b9:8a:a4:7c:c4:b5:
bd:71:e0:2f:41:0a:0d:63:e2:0d:5c:74:5e:66:84:
91:e7:bd:25:ea:26:fe:a0:13:bb:6b:f2:68:b0:e5:
f5:14:19:e4:47:2d:18:53:d4:c3:71:37:71:1f:f5:
76:d9:df:8b:84:dc:48:4f:04:0a:31:3b:5e:a7:62:
85:0e:ac:5d:b7:fe:ec:da:b7:51:fb:00:bc:3f:41:
fc:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:33:DC:39:0F:02:FB:21:23:A7:D7:E0:A9:8C:B1:17:65:53:1C:E0
X509v3 Authority Key Identifier:
keyid:66:38:51:5F:32:94:49:69:AE:00:31:BD:E0:2D:1F:4C:BD:0D:2B:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZjhRXzKUSWmuADG94C0fTL0NK5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:47:7b:95:96:8e:e0:bc:44:bf:36:57:3a:00:d9:da:19:21:
d2:8f:67:a9:45:34:a6:01:b2:65:e1:bf:4e:13:0e:0d:ce:d1:
8b:f5:5d:c9:26:10:de:a1:8b:9b:46:9a:c3:24:37:1d:bf:9d:
fa:92:f4:9c:cf:36:9a:e7:26:d4:0e:7a:5b:e0:fd:fe:f8:ad:
dd:07:1c:fb:23:b8:83:b7:55:7a:fa:06:84:86:68:83:08:ea:
aa:6a:36:53:58:80:52:d6:24:2a:52:52:7f:0d:c2:58:b2:ce:
e4:08:53:8e:54:23:ec:4f:f6:5c:5c:f1:59:3e:dd:5c:ad:9a:
6b:52:09:29:25:98:59:8a:43:3f:0f:ac:74:38:fe:71:09:4b:
15:57:80:f0:99:d8:83:25:ed:e7:08:95:c0:ed:c5:22:a1:5b:
ea:05:11:a3:6f:c9:6f:cc:55:28:e2:55:01:72:d0:2c:36:61:
da:88:4d:d9:65:fb:ff:a9:2f:e1:3c:72:41:2b:46:ed:04:a6:
bf:da:a9:ee:cb:96:e5:8c:5f:83:c3:5c:94:e5:63:0c:eb:d4:
be:db:12:63:bd:76:4e:7c:c2:b9:5c:8a:78:44:8a:b4:16:cd:
f2:21:7f:1a:f4:f6:3a:6b:76:6a:8c:53:8e:41:d0:27:0a:26:
e6:d6:e7:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:48:18 2026 by rpki-client