Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft
File: Zw5gd5881NA9XlB4QPX6KjGmq40.mft (raw, json)
Hash identifier: RQxQ7JkNGa9tihfse4n8xRWyIaTCzFDXNX+40Y6hVAU=
Subject key identifier: 4E:91:39:D9:97:76:0B:03:D4:DA:40:C2:EE:69:5E:62:E9:75:D4:91
Authority key identifier: 67:0E:60:77:9F:3C:D4:D0:3D:5E:50:78:40:F5:FA:2A:31:A6:AB:8D
Certificate issuer: /CN=670e60779f3cd4d03d5e507840f5fa2a31a6ab8d
Certificate serial: 019FAAF6281AD0CD9CCBC9A326663F6383A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zw5gd5881NA9XlB4QPX6KjGmq40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft
Manifest number: 0833
Signing time: Tue 28 Jul 2026 23:01:26 +0000
Manifest this update: Tue 28 Jul 2026 23:01:26 +0000
Manifest next update: Wed 29 Jul 2026 23:01:26 +0000
Files and hashes: 1: 99ql3Nj_XXqdJBUKyH1zSjprsmk.roa (hash: 8Q5g46XQnTAlgbAY9G1RdWl4ij89rLN6KeETKWp4UX4=)
2: UKvSxhXp6UeN9PA2d7zmzONW8dI.roa (hash: U2Kl3dxAuyKIqhwNvATcE57d94w+8GaKrGRAFwd2pQQ=)
3: Zw5gd5881NA9XlB4QPX6KjGmq40.crl (hash: SMXnMQW73GNudRN32D8kSdCJxyXbYG+a9Ovzur9eDbI=)
4: yGnTUZ-K5iZvv_QJlyjyr1Vifo0.roa (hash: 3NvMCRIYGPgbO9Y+3R7bmJF+C6D6NUF59+RrT9ZBe2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zw5gd5881NA9XlB4QPX6KjGmq40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f6:28:1a:d0:cd:9c:cb:c9:a3:26:66:3f:63:83:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=670e60779f3cd4d03d5e507840f5fa2a31a6ab8d
Validity
Not Before: Jul 28 23:01:26 2026 GMT
Not After : Jul 29 23:01:26 2026 GMT
Subject: CN=4e9139d997760b03d4da40c2ee695e62e975d491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:11:3b:ca:45:5f:a5:f0:4a:37:ed:31:8e:dc:
24:14:7a:6f:0e:e1:b2:05:ea:5b:30:f7:b6:bc:ed:
15:26:8f:f9:9c:e1:eb:48:7d:ea:ad:33:6c:92:34:
87:1d:4c:c0:87:b7:21:75:66:99:f3:5c:52:95:59:
5a:51:1b:03:41:4d:5a:9c:87:e8:5a:67:d6:b5:63:
6a:dd:0e:a8:a2:14:48:f5:3b:77:4f:d7:5c:5d:97:
8f:81:39:0f:d3:16:b6:16:38:8c:72:b4:29:61:f4:
df:20:85:82:05:c4:75:6d:67:03:f0:b0:f8:01:3f:
3d:5e:6b:80:6e:97:a7:7a:86:0a:85:70:61:e8:89:
da:b5:5f:b7:21:15:09:69:d2:5a:b9:fc:95:7d:58:
71:4c:65:cc:89:ff:c6:ab:23:ee:52:22:5a:a5:30:
41:17:58:bd:37:88:2a:8b:57:95:e9:18:ab:6f:53:
60:3d:64:6a:a4:1c:ce:08:af:19:d9:a7:02:c2:c4:
b2:45:5d:77:fa:82:8b:80:a9:a3:9b:b8:c1:d3:ae:
d7:77:7e:c5:f7:29:3d:e4:8a:e2:c9:ec:78:c4:a8:
28:07:44:d9:b4:97:1e:83:9c:4c:26:d2:75:d9:fc:
30:6c:1a:43:a5:83:bb:4a:25:cd:30:82:0c:2a:e6:
d7:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:91:39:D9:97:76:0B:03:D4:DA:40:C2:EE:69:5E:62:E9:75:D4:91
X509v3 Authority Key Identifier:
keyid:67:0E:60:77:9F:3C:D4:D0:3D:5E:50:78:40:F5:FA:2A:31:A6:AB:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zw5gd5881NA9XlB4QPX6KjGmq40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:c9:0b:77:72:37:cf:97:24:0c:61:6d:e0:7e:6d:38:b2:93:
d2:a1:4e:bf:23:2b:96:0c:57:e4:f3:3d:75:0c:95:a2:85:37:
92:44:34:2f:b5:67:25:bc:c7:a9:d8:9b:bd:b4:69:4d:6d:89:
14:09:1b:6d:54:b4:c9:6d:fc:72:57:e6:0f:0d:b4:04:11:21:
e6:17:2e:0c:79:5c:22:59:ce:4e:16:80:39:74:70:e4:7f:0a:
10:7a:db:bb:d3:4c:56:be:26:36:89:97:f0:21:80:b9:c7:6e:
51:d0:1b:b4:99:6e:b4:22:75:58:63:f3:c4:25:03:b0:e1:28:
2b:10:23:3a:90:9b:14:92:fd:ec:15:45:71:d3:ce:0b:f3:6d:
59:97:cc:fe:04:f9:30:25:09:06:6f:d1:73:5b:cd:b3:c9:02:
6a:68:87:8e:72:50:0a:8d:55:a0:eb:83:07:bb:95:85:c2:de:
d7:a6:3a:73:35:fc:a8:92:a8:ab:a3:1b:0b:1d:1a:61:e6:ab:
fa:52:5e:0c:93:95:95:d8:e2:4f:e9:03:4f:d1:e9:52:b5:4c:
3d:b6:19:bf:8a:a2:b7:e3:ff:83:49:8a:d1:64:0f:2b:ae:c5:
f6:fc:f6:d1:30:4a:07:f2:69:71:65:9c:e7:79:5c:68:14:7b:
af:2e:c9:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:53:33 2026 by rpki-client