Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.mft
File: ZHVxhUcvFtU-62ihQONRP6McMdg.mft (raw, json)
Hash identifier: VZBySNCY0d6+tUroTa2rTwtakwRllTNX2vq1ZldnDLU=
Subject key identifier: 1E:2C:E2:64:61:CF:71:42:B7:6B:B6:08:4C:73:50:A2:CD:55:59:23
Authority key identifier: 64:75:71:85:47:2F:16:D5:3E:EB:68:A1:40:E3:51:3F:A3:1C:31:D8
Certificate issuer: /CN=64757185472f16d53eeb68a140e3513fa31c31d8
Certificate serial: 019FACE452EC6F14407286605BA960347BC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZHVxhUcvFtU-62ihQONRP6McMdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.mft
Manifest number: 12AF
Signing time: Wed 29 Jul 2026 08:01:12 +0000
Manifest this update: Wed 29 Jul 2026 08:01:12 +0000
Manifest next update: Thu 30 Jul 2026 08:01:12 +0000
Files and hashes: 1: FIc01Lo1yeWxE-xTe7CiddAVpBk.roa (hash: hMcJ6OK+PeXHDyYgCQtCCTDn1eungDLXByvXPV4zXXA=)
2: ZHVxhUcvFtU-62ihQONRP6McMdg.crl (hash: AmqoBCu7BT+KqNWxXmE9Jq+RVOQ+qro4Re+C3bT+b5A=)
3: n9G4PwDSvg3JXpVqBL9fxfextGk.roa (hash: ISD2QN6R10mZDVwEXSrMdj+oKlZVAdmDz7rQAXDL/g0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZHVxhUcvFtU-62ihQONRP6McMdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:e4:52:ec:6f:14:40:72:86:60:5b:a9:60:34:7b:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64757185472f16d53eeb68a140e3513fa31c31d8
Validity
Not Before: Jul 29 08:01:12 2026 GMT
Not After : Jul 30 08:01:12 2026 GMT
Subject: CN=1e2ce26461cf7142b76bb6084c7350a2cd555923
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b8:7a:24:b6:3e:f4:9c:36:24:11:40:f8:2c:
02:8e:53:7e:d7:10:5c:3b:c2:04:24:8f:57:a4:04:
44:70:0e:07:26:5a:3a:0f:df:2a:f7:cb:13:cd:8c:
47:2c:fd:3b:9a:21:b3:97:7d:96:9b:a3:8f:e9:5d:
26:7e:2e:46:dd:ea:d1:47:9c:39:58:1b:13:e1:f2:
63:b7:5f:5d:5b:de:f1:84:60:d2:fe:79:29:bf:3c:
4e:6f:ad:98:7e:e8:a8:79:af:e1:be:f7:72:34:62:
b3:ea:44:b9:86:f4:3d:75:13:e1:4f:2b:5e:de:1c:
85:a0:c2:c4:6c:b0:3d:3b:89:f9:7f:e1:3d:cd:bb:
f3:d3:09:51:b3:6f:f9:53:82:45:64:e5:be:bb:65:
98:c1:35:30:9a:d5:13:22:90:dd:c4:9f:d9:4f:df:
47:b7:8f:a1:d7:be:be:0c:ee:f4:30:e1:6f:d5:e3:
38:b7:cf:ee:d2:79:8e:ed:30:a6:99:97:28:74:b6:
36:f0:84:ca:ed:0a:04:40:f8:c9:96:16:e2:e7:8c:
47:3c:17:23:04:96:5a:1a:b4:24:9c:7f:70:5c:e5:
e0:05:fe:5c:8d:6f:d1:12:83:24:14:03:e7:74:22:
38:18:74:d9:65:97:0c:ba:8d:55:18:55:a9:48:6f:
29:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:2C:E2:64:61:CF:71:42:B7:6B:B6:08:4C:73:50:A2:CD:55:59:23
X509v3 Authority Key Identifier:
keyid:64:75:71:85:47:2F:16:D5:3E:EB:68:A1:40:E3:51:3F:A3:1C:31:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZHVxhUcvFtU-62ihQONRP6McMdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:e6:5c:72:36:49:15:5e:f7:69:80:04:8c:a7:43:e9:e1:ce:
2a:99:86:68:8c:48:28:4d:1b:6b:9d:ec:17:3d:b2:11:e6:3c:
4c:00:e1:35:32:82:9a:43:86:c5:f1:d6:0f:e3:1b:8e:15:26:
c1:04:ad:43:cc:f4:84:e7:5a:db:a4:b0:8a:7a:ea:ab:e1:8a:
fb:d3:b2:91:ed:91:ff:39:e9:92:f5:7a:b6:a5:97:d5:91:98:
3c:0d:e6:ad:79:4c:08:e5:8a:62:3a:13:43:e0:26:1d:6c:ca:
2c:e5:b3:0b:59:2b:1f:19:27:89:ee:79:3f:44:8e:d0:3f:88:
68:e9:4f:83:6e:2f:16:c8:d0:71:8c:cf:54:2a:10:17:f6:7a:
32:0b:f1:4d:6a:d7:05:bd:4e:ca:1b:4a:1a:c5:49:38:d7:35:
df:e9:12:a8:8c:5b:61:60:a1:40:45:47:5f:d7:c1:94:88:ed:
a6:f4:27:a9:92:3f:4e:7a:36:71:5c:17:44:8d:07:e1:87:e4:
44:07:09:81:6c:09:63:0f:59:5b:65:24:97:ef:63:1b:6e:ab:
cc:c6:26:bc:15:77:ef:0c:8a:aa:e8:4f:36:54:1c:45:02:44:
6c:c9:ad:a3:f6:7a:82:f4:a3:fb:52:15:ff:5e:94:fb:89:d9:
a7:7c:08:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 17:35:34 2026 by rpki-client