Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.mft
File: zTlHV-FBYgKkAilW2_SNcHRYUgw.mft (raw, json)
Hash identifier: kCCfmDE2SJy7flF6TPjf5dT88N1RP/7GiMFVpO7TJYE=
Subject key identifier: 8E:9A:F9:51:A9:4C:8E:B9:80:C8:0C:E1:82:DE:72:EC:EA:88:55:6B
Authority key identifier: CD:39:47:57:E1:41:62:02:A4:02:29:56:DB:F4:8D:70:74:58:52:0C
Certificate issuer: /CN=cd394757e1416202a4022956dbf48d707458520c
Certificate serial: 019FAABE9DFA8ADB114FCA926782F6E534BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zTlHV-FBYgKkAilW2_SNcHRYUgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.mft
Manifest number: 127E
Signing time: Tue 28 Jul 2026 22:00:46 +0000
Manifest this update: Tue 28 Jul 2026 22:00:46 +0000
Manifest next update: Wed 29 Jul 2026 22:00:46 +0000
Files and hashes: 1: 5GenFMQsSYDx9FcfiAXgf9Uomdw.roa (hash: 4H+3cPhJ7oDZNP6D43X5l+hl9KT5PURFIDgzFceABtg=)
2: 5Zndcb8EJc7nslqP_7KqvtkxJPw.roa (hash: ogNnDwO6cHFOhG9TbGz5GUJ2wMKx53CTMIlKdOAYy7U=)
3: zTlHV-FBYgKkAilW2_SNcHRYUgw.crl (hash: lln+bG6IcOyYOhoey4dOyoVvanFxVgDODqlzJlIF2O8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/zTlHV-FBYgKkAilW2_SNcHRYUgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:9d:fa:8a:db:11:4f:ca:92:67:82:f6:e5:34:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd394757e1416202a4022956dbf48d707458520c
Validity
Not Before: Jul 28 22:00:46 2026 GMT
Not After : Jul 29 22:00:46 2026 GMT
Subject: CN=8e9af951a94c8eb980c80ce182de72ecea88556b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:1d:33:0f:ce:95:a9:ab:b1:ad:78:75:15:85:
0f:e6:2b:8b:78:92:d4:b0:cb:b4:bf:b6:fa:f4:45:
cd:db:71:20:43:c9:25:63:82:17:82:85:94:c8:3f:
ec:18:85:03:c8:1c:d6:4a:da:6c:cd:88:91:a6:82:
f3:8e:3a:a3:81:ed:7d:4c:ad:9e:1f:75:27:1b:f1:
a4:a7:14:94:a9:ef:27:8b:41:fa:9e:de:56:58:a0:
44:98:a0:0e:a1:ee:d1:98:e6:2b:67:16:61:d0:ef:
34:85:fb:36:f6:05:df:a6:a3:be:7f:71:66:f5:5f:
70:18:83:9f:e2:d9:b8:18:db:7a:0d:0b:12:aa:0d:
e2:c2:1e:be:0a:af:53:bd:6d:c4:10:0b:73:40:cf:
17:36:dc:b7:d2:b5:a3:32:07:ad:fb:3a:f4:f1:ab:
65:bb:73:ce:e2:3d:2b:ab:c3:e2:81:a3:da:a6:e7:
47:96:dc:cd:66:c3:51:2e:3f:6a:32:d6:b9:15:e2:
f5:e0:be:70:ec:2c:95:d9:da:6f:ba:1c:99:97:6e:
71:de:e7:a7:92:f5:4f:d2:f4:16:40:f8:ee:29:79:
46:db:fb:b4:f9:28:9b:d4:4e:32:06:db:71:05:bf:
f0:b7:2c:71:a4:a5:4a:82:74:4b:b1:0b:64:83:86:
8c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:9A:F9:51:A9:4C:8E:B9:80:C8:0C:E1:82:DE:72:EC:EA:88:55:6B
X509v3 Authority Key Identifier:
keyid:CD:39:47:57:E1:41:62:02:A4:02:29:56:DB:F4:8D:70:74:58:52:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zTlHV-FBYgKkAilW2_SNcHRYUgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:74:c0:3d:bd:63:4a:98:a5:df:1c:4b:2b:2f:7e:c6:7f:e6:
64:9f:10:8d:ee:0b:e8:02:83:25:8a:0e:86:18:bb:28:85:7c:
3c:3b:ae:3e:86:31:a8:e6:89:77:21:f1:53:5c:e1:5c:eb:77:
85:45:30:2b:c0:4a:33:a5:f2:b5:aa:cb:bd:d4:90:61:21:c0:
a7:55:9a:60:21:c0:90:9f:7c:77:a4:f6:83:cf:80:aa:58:75:
c6:00:b0:59:30:75:52:2b:6c:aa:68:9d:bd:a2:3d:1e:60:a0:
9b:27:2b:80:93:fa:fb:95:41:c4:73:1f:ed:ed:2e:8a:84:04:
87:de:18:89:ab:81:73:e1:19:d3:75:e1:ec:2d:a8:c9:f4:89:
15:d3:ec:6a:7f:a4:94:96:9b:e8:bb:37:e3:90:b7:fb:e9:1c:
13:99:da:b0:f0:67:24:17:22:4e:75:04:4f:a1:89:b4:7b:66:
92:db:78:31:87:8c:fa:cc:51:e0:30:59:69:3d:c2:57:99:c6:
ec:18:8b:f4:b6:9b:da:85:fc:f2:26:10:ee:fc:c1:24:23:3c:
b0:cf:8a:a9:a9:37:f8:75:c4:e7:9b:38:a7:56:8b:1a:14:96:
52:1f:58:f5:94:ac:c7:65:7f:3a:04:dd:af:c8:f7:a9:9f:15:
4a:6e:52:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:57:02 2026 by rpki-client