Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/188d1c-ffe2-423b-87fb-8f9c65ac16c6/1/f4_zrPyu0gPpbekasIxu-2QDGmM.mft
File: f4_zrPyu0gPpbekasIxu-2QDGmM.mft (raw, json)
Hash identifier: kEfx1ZXx2IYiC/2wUD49bS49A13tYzP+wVJE6h2yMRM=
Subject key identifier: 37:56:0F:28:18:78:35:FA:32:06:87:16:12:1D:73:45:67:F5:0B:7B
Authority key identifier: 7F:8F:F3:AC:FC:AE:D2:03:E9:6D:E9:1A:B0:8C:6E:FB:64:03:1A:63
Certificate issuer: /CN=7f8ff3acfcaed203e96de91ab08c6efb64031a63
Certificate serial: 019FA78678D236E3E5376D3B8411CABEBF21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f4_zrPyu0gPpbekasIxu-2QDGmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/188d1c-ffe2-423b-87fb-8f9c65ac16c6/1/f4_zrPyu0gPpbekasIxu-2QDGmM.mft
Manifest number: 8A
Signing time: Tue 28 Jul 2026 07:00:35 +0000
Manifest this update: Tue 28 Jul 2026 07:00:35 +0000
Manifest next update: Wed 29 Jul 2026 07:00:35 +0000
Files and hashes: 1: f4_zrPyu0gPpbekasIxu-2QDGmM.crl (hash: mQig2/wDCnD4CU4RHMHas+5g3QINvU4qx7K1gXrD5wo=)
2: lf4UXwwCiStKMPFSMPyNM0g2zZ8.roa (hash: QmN5YcqljhCgdP2JOMV6nb5xM3S3y5gCkyo63tNhBUQ=)
3: yLl9hut5-79pC7adyuGSTuX_5sU.asa (hash: 61Xj0gQa/Th7F++DmhWcMRLvfxIvqCNmmXnO1BzHxpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/188d1c-ffe2-423b-87fb-8f9c65ac16c6/1/f4_zrPyu0gPpbekasIxu-2QDGmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/188d1c-ffe2-423b-87fb-8f9c65ac16c6/1/f4_zrPyu0gPpbekasIxu-2QDGmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/f4_zrPyu0gPpbekasIxu-2QDGmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:86:78:d2:36:e3:e5:37:6d:3b:84:11:ca:be:bf:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f8ff3acfcaed203e96de91ab08c6efb64031a63
Validity
Not Before: Jul 28 07:00:35 2026 GMT
Not After : Jul 29 07:00:35 2026 GMT
Subject: CN=37560f28187835fa32068716121d734567f50b7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:17:24:71:e3:30:1c:27:fb:1b:4a:66:ac:8d:
29:63:26:71:1b:c0:3e:df:1d:5e:24:7c:f0:0b:1e:
0d:b0:f6:0b:89:f0:17:1b:c2:93:1d:8f:3f:60:c0:
b3:7e:81:57:d8:99:2c:4a:4a:c7:e0:9b:4e:d2:58:
98:75:73:fb:32:10:5b:37:f1:a1:17:73:7b:72:0b:
d4:4a:fe:f2:4f:b5:b6:20:27:9f:cd:06:5f:d8:50:
d6:57:29:b6:51:c7:8f:08:af:b4:02:97:c6:6c:62:
97:56:38:5c:23:bb:71:ed:40:cb:4c:7a:28:ac:7d:
74:88:56:66:54:4e:44:9d:15:3e:20:26:08:12:1d:
da:82:bb:ca:94:f3:b6:13:7f:cf:bb:a9:0b:fe:11:
1c:f2:85:79:d0:5d:82:32:97:2d:68:a6:4c:7f:6b:
87:ad:a4:59:8c:54:04:b6:aa:2a:28:f0:73:ec:ed:
93:4c:0a:5f:d9:7a:ad:b8:b9:02:a5:5f:45:51:1a:
22:44:93:5d:22:eb:9d:0b:a2:48:5f:a3:50:27:9a:
53:06:6e:36:67:60:40:48:86:f1:1e:26:8a:80:3c:
05:97:52:87:c7:e1:b1:af:67:0a:50:42:2e:83:fe:
e3:8a:8b:80:d3:55:c9:b0:ff:07:2f:dd:e1:25:32:
ff:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:56:0F:28:18:78:35:FA:32:06:87:16:12:1D:73:45:67:F5:0B:7B
X509v3 Authority Key Identifier:
keyid:7F:8F:F3:AC:FC:AE:D2:03:E9:6D:E9:1A:B0:8C:6E:FB:64:03:1A:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4_zrPyu0gPpbekasIxu-2QDGmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/188d1c-ffe2-423b-87fb-8f9c65ac16c6/1/f4_zrPyu0gPpbekasIxu-2QDGmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/188d1c-ffe2-423b-87fb-8f9c65ac16c6/1/f4_zrPyu0gPpbekasIxu-2QDGmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:9d:70:d9:25:91:11:55:98:56:44:b5:33:59:f0:35:39:43:
c9:b1:ab:73:16:0f:c0:be:64:c6:75:f9:76:7b:a4:e7:dd:5c:
c4:a1:85:d2:4f:57:d8:42:f8:1e:67:b0:70:ea:51:74:98:55:
16:27:de:bf:62:fe:14:b7:b0:15:9d:6a:a5:71:27:1a:27:cc:
22:90:12:f5:74:81:24:55:3a:39:06:cb:d9:f7:fe:b7:a7:01:
d5:58:34:e5:fb:e1:3a:8f:7b:bb:74:70:8d:2e:14:3f:57:5d:
6d:ac:1a:97:cb:be:b1:97:dc:1e:f5:83:49:29:fd:3d:98:6c:
b5:d3:2e:7d:e8:40:2d:1c:7a:a4:03:df:76:65:76:bf:60:c3:
48:87:09:36:f8:7d:ca:1c:5a:f5:75:f1:4a:3e:0b:dd:7b:81:
d4:f7:1c:45:f9:b6:8d:d7:03:54:0c:ee:ce:cb:72:50:2e:23:
39:ef:c2:c8:ea:9d:d1:6d:ee:4c:58:b3:55:1e:01:8b:7a:37:
37:5f:d4:cc:8d:10:9e:8b:9e:17:29:ea:cc:36:2d:4b:d4:28:
cc:79:79:43:7a:13:a3:d5:6a:83:58:45:40:55:19:cf:a8:19:
7d:5a:4e:0f:45:33:80:ef:8c:65:9f:67:59:1c:14:d6:00:a8:
f6:b4:7a:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 13:33:00 2026 by rpki-client