Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/4bba08-be36-47eb-ab2c-6359f92e1d2f/1/zK1o9-irrfRHJiM0OjJWFQciQYk.mft
File: zK1o9-irrfRHJiM0OjJWFQciQYk.mft (raw, json)
Hash identifier: xt6GpUCuIRX18fhePf09NNimRMl4YLO+D+cQavlxEJ0=
Subject key identifier: 4D:31:5A:EF:14:AF:AF:2C:2B:F9:6B:A0:5A:67:AB:ED:33:B0:7C:EA
Authority key identifier: CC:AD:68:F7:E8:AB:AD:F4:47:26:23:34:3A:32:56:15:07:22:41:89
Certificate issuer: /CN=ccad68f7e8abadf4472623343a32561507224189
Certificate serial: 019FA7863B039A7AE5C939665044389C5D42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zK1o9-irrfRHJiM0OjJWFQciQYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/4bba08-be36-47eb-ab2c-6359f92e1d2f/1/zK1o9-irrfRHJiM0OjJWFQciQYk.mft
Manifest number: 0B44
Signing time: Tue 28 Jul 2026 07:00:19 +0000
Manifest this update: Tue 28 Jul 2026 07:00:19 +0000
Manifest next update: Wed 29 Jul 2026 07:00:19 +0000
Files and hashes: 1: GvdosnM4oTQr42AAbs5kaRK7G5k.asa (hash: +q7C0091/BCLWI1y72MQuuHCj669pr/poTHiNIbXYFE=)
2: wEZZX0o5N8nlP47tu1RwoQ2y0AY.roa (hash: ddJPky6VMI6qp8TK3QriFAzhCSzbyfK/JMSPvgj4FCE=)
3: zK1o9-irrfRHJiM0OjJWFQciQYk.crl (hash: 8sKxzWbyh7dsQhlATuCWxSg/OsTeGmkqCMouG/5vnac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/4bba08-be36-47eb-ab2c-6359f92e1d2f/1/zK1o9-irrfRHJiM0OjJWFQciQYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/4bba08-be36-47eb-ab2c-6359f92e1d2f/1/zK1o9-irrfRHJiM0OjJWFQciQYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/zK1o9-irrfRHJiM0OjJWFQciQYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:86:3b:03:9a:7a:e5:c9:39:66:50:44:38:9c:5d:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccad68f7e8abadf4472623343a32561507224189
Validity
Not Before: Jul 28 07:00:19 2026 GMT
Not After : Jul 29 07:00:19 2026 GMT
Subject: CN=4d315aef14afaf2c2bf96ba05a67abed33b07cea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a5:a7:ea:83:ed:dc:ed:ed:ae:4b:06:87:3e:
f6:4c:c7:78:da:97:6f:9a:7b:d0:74:96:96:ea:d5:
13:ae:34:2f:ff:2f:de:ef:83:7e:a5:5b:49:9a:86:
07:ec:8d:c0:bb:88:b3:98:31:ea:b1:d4:84:90:ce:
96:e7:80:df:98:fa:7c:34:ca:8b:83:4a:3c:8f:19:
0f:4f:84:d6:bf:e1:db:36:2b:23:0e:56:b2:b8:be:
99:0c:8a:ce:7b:9d:cb:cb:37:25:05:6f:c5:9e:bd:
3c:bf:02:d2:80:8d:7a:74:9a:a2:1b:f4:1f:9a:72:
05:fa:7a:46:0a:cb:50:7d:2f:b1:95:98:06:65:bc:
19:c7:64:32:c3:f7:77:85:53:b4:d0:80:ee:e8:ca:
09:75:b8:d8:da:46:d9:4d:2b:06:54:79:da:2a:d4:
db:d0:a6:1d:91:b4:21:2a:cb:34:3e:8f:c4:5e:25:
68:28:2d:a0:46:69:01:7f:a1:c7:56:63:6d:cb:ab:
d3:93:59:0a:44:a7:61:50:e1:10:d7:fb:26:e8:2e:
82:f2:8e:d3:32:b1:6a:be:dc:18:5f:3a:6f:0a:17:
4d:64:84:25:be:84:0b:6f:19:38:60:ef:0f:65:bc:
2f:b0:c8:f0:6e:ec:55:2c:fe:fb:fa:b3:a2:36:ec:
a2:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:31:5A:EF:14:AF:AF:2C:2B:F9:6B:A0:5A:67:AB:ED:33:B0:7C:EA
X509v3 Authority Key Identifier:
keyid:CC:AD:68:F7:E8:AB:AD:F4:47:26:23:34:3A:32:56:15:07:22:41:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zK1o9-irrfRHJiM0OjJWFQciQYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4bba08-be36-47eb-ab2c-6359f92e1d2f/1/zK1o9-irrfRHJiM0OjJWFQciQYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4bba08-be36-47eb-ab2c-6359f92e1d2f/1/zK1o9-irrfRHJiM0OjJWFQciQYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:72:98:55:9e:29:c6:b5:cb:0f:9f:92:93:d7:63:34:b8:30:
58:7d:ce:d2:1d:b8:ca:6e:26:94:00:d0:4f:5e:3e:15:95:d7:
ef:a6:d8:88:4d:03:44:12:53:8e:af:28:7c:da:34:50:64:4f:
c2:44:30:c2:ab:3e:a2:63:df:50:be:d0:b4:3c:d4:d6:b7:8d:
e4:8c:8c:14:83:83:af:69:47:63:6b:51:55:8e:12:d5:c4:bc:
82:bb:ab:a1:82:dd:98:34:90:3f:9f:c3:e8:73:d7:9b:6d:fc:
e0:b9:8a:60:b1:47:a5:91:7a:60:c5:65:09:76:f2:f6:07:73:
3f:95:0d:61:b4:ea:81:8d:19:fb:6c:5c:f2:e1:c6:ed:29:65:
45:bd:ae:2b:a0:7f:e4:85:e6:7b:74:66:9b:3d:c5:12:c4:5e:
28:fa:f9:48:88:21:6e:9e:e8:bb:1b:32:ea:55:a8:8a:2c:d1:
eb:48:39:50:b1:82:55:36:dd:38:47:fa:f7:17:86:8c:b4:45:
f6:e8:a3:0d:49:80:72:c9:f1:dc:5a:53:e2:b6:5e:db:1e:e8:
ec:d9:b3:0b:09:ad:8f:44:fb:59:07:0b:ed:de:fe:f8:d7:b8:
b2:55:11:53:6c:4b:cf:10:b2:de:e8:d9:43:a1:7e:8d:66:7a:
a1:17:2f:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 14:49:03 2026 by rpki-client