Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.mft
File: ZHVxhUcvFtU-62ihQONRP6McMdg.mft (raw, json)
Hash identifier: qz3UHeU3NO8dph/O9eu2rpNbAx1I9u/ei30y2pCtppU=
Subject key identifier: DE:DA:71:A7:98:BE:6A:DF:71:00:E2:4E:D8:EE:9C:BD:68:CE:D6:2A
Authority key identifier: 64:75:71:85:47:2F:16:D5:3E:EB:68:A1:40:E3:51:3F:A3:1C:31:D8
Certificate issuer: /CN=64757185472f16d53eeb68a140e3513fa31c31d8
Certificate serial: 019FAED28C0472C5545C3E98DDAFCD17131F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZHVxhUcvFtU-62ihQONRP6McMdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.mft
Manifest number: 12B0
Signing time: Wed 29 Jul 2026 17:01:01 +0000
Manifest this update: Wed 29 Jul 2026 17:01:01 +0000
Manifest next update: Thu 30 Jul 2026 17:01:01 +0000
Files and hashes: 1: FIc01Lo1yeWxE-xTe7CiddAVpBk.roa (hash: hMcJ6OK+PeXHDyYgCQtCCTDn1eungDLXByvXPV4zXXA=)
2: ZHVxhUcvFtU-62ihQONRP6McMdg.crl (hash: tpRiyA3J0r4SaXnPxum5jzDnHu4WiU7SKBsqGdmjDGU=)
3: n9G4PwDSvg3JXpVqBL9fxfextGk.roa (hash: ISD2QN6R10mZDVwEXSrMdj+oKlZVAdmDz7rQAXDL/g0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZHVxhUcvFtU-62ihQONRP6McMdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 14:03:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ae:d2:8c:04:72:c5:54:5c:3e:98:dd:af:cd:17:13:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64757185472f16d53eeb68a140e3513fa31c31d8
Validity
Not Before: Jul 29 17:01:01 2026 GMT
Not After : Jul 30 17:01:01 2026 GMT
Subject: CN=deda71a798be6adf7100e24ed8ee9cbd68ced62a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:49:20:3d:47:e7:21:5a:7a:13:88:cc:cd:44:
31:ac:24:e6:83:6b:89:8f:1d:39:bb:4a:1a:2e:93:
d9:fd:eb:9b:51:eb:c4:02:82:2c:dc:3f:32:03:93:
68:96:52:b2:00:26:65:31:2e:a5:cb:cc:cd:42:c7:
54:c6:1f:9b:47:c8:93:ec:7f:0a:7b:93:9c:e4:22:
90:81:d4:e5:e5:17:0b:87:d6:7b:4a:bb:20:63:74:
00:11:c4:7b:a7:c4:4a:00:e8:97:43:4e:40:bf:1e:
5c:1d:ce:6b:d2:c7:59:98:b4:23:4b:96:27:aa:d9:
6a:e1:25:50:a8:ef:8d:e7:f0:03:34:f3:21:75:23:
52:77:cf:28:ff:aa:bb:62:2e:38:d9:86:54:8c:1a:
a2:33:ce:47:36:12:91:ed:5b:d3:59:00:91:0d:1b:
b1:b4:f9:97:7e:0d:aa:00:51:60:87:8d:da:de:af:
16:49:01:9f:bc:4c:2a:f7:85:27:a6:f3:07:85:38:
cf:78:82:9a:e5:c0:12:38:2d:ee:b3:f9:56:0e:6c:
f7:b0:ca:06:b2:b3:f0:b4:df:b2:3b:99:73:ea:58:
49:1a:5a:7d:4d:b7:3a:d3:16:85:94:e8:92:f5:56:
20:10:90:17:d0:8f:a7:84:3b:64:a7:d3:91:dc:9b:
16:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:DA:71:A7:98:BE:6A:DF:71:00:E2:4E:D8:EE:9C:BD:68:CE:D6:2A
X509v3 Authority Key Identifier:
keyid:64:75:71:85:47:2F:16:D5:3E:EB:68:A1:40:E3:51:3F:A3:1C:31:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZHVxhUcvFtU-62ihQONRP6McMdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:6d:fd:cc:ea:08:fb:c3:3d:88:90:15:9c:3e:5e:a4:ad:c2:
59:49:41:fa:14:e6:28:9d:a5:14:b6:1d:ae:d5:55:6e:b0:04:
69:94:9d:b9:e8:6a:c9:08:f2:70:4f:20:6e:51:e1:56:79:c1:
ab:35:05:2c:ad:33:db:52:2a:4b:05:1b:5c:ff:b4:9e:ec:57:
54:dc:fb:a4:f0:a5:c2:3c:9a:15:49:93:1c:06:3c:5a:74:cb:
1f:4f:0c:29:0d:cd:56:95:25:11:96:4c:13:d4:ad:03:e4:05:
93:72:fb:03:8c:36:17:47:45:64:6d:a0:eb:ec:0a:13:46:67:
cc:24:bc:4b:eb:df:3c:21:e4:90:e5:ea:6c:fd:ba:c6:1a:00:
d0:8c:98:b7:84:88:2b:b4:3c:8a:be:30:ef:3d:b0:68:e6:7e:
8a:1e:24:e7:11:9f:d6:9c:96:67:6c:5e:1a:cd:bc:d8:37:b4:
9b:0d:ce:e2:91:72:1c:dd:2e:6e:97:e7:58:31:81:1a:f5:7e:
bc:4d:9d:ee:46:42:50:9e:3f:2e:f6:90:0e:ae:64:e7:1e:ea:
3e:b8:71:dc:6e:69:65:78:96:7d:a8:65:1b:ea:14:58:40:7f:
85:0d:48:c3:fe:d0:e8:2d:0a:e0:85:ec:9c:9f:5b:3b:83:24:
f3:52:9d:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 18:46:02 2026 by rpki-client