Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/550bb2-5a50-4784-8dab-3d0e9fe01bd8/1/_zVCuU4Ii793ruGzOUIxUtrvXg0.mft
File: _zVCuU4Ii793ruGzOUIxUtrvXg0.mft (raw, json)
Hash identifier: QjL4XnccZDV5ynlcHWK3w1mI1THLFJA4CSVo5hCYzvE=
Subject key identifier: A3:C2:3E:E8:B6:98:89:68:15:76:9D:F0:91:44:15:16:EE:1B:80:85
Authority key identifier: FF:35:42:B9:4E:08:8B:BF:77:AE:E1:B3:39:42:31:52:DA:EF:5E:0D
Certificate issuer: /CN=ff3542b94e088bbf77aee1b339423152daef5e0d
Certificate serial: 019FAA506A2BEE781AA756C41169F2313694
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zVCuU4Ii793ruGzOUIxUtrvXg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/550bb2-5a50-4784-8dab-3d0e9fe01bd8/1/_zVCuU4Ii793ruGzOUIxUtrvXg0.mft
Manifest number: E0
Signing time: Tue 28 Jul 2026 20:00:24 +0000
Manifest this update: Tue 28 Jul 2026 20:00:24 +0000
Manifest next update: Wed 29 Jul 2026 20:00:24 +0000
Files and hashes: 1: LXC_nzvi4Cb7lHD4Py9XKzLtC38.roa (hash: M58JQtuK6LdfZlu8eoP3dvPBwwWOzHNzghjNI4pN5m4=)
2: _zVCuU4Ii793ruGzOUIxUtrvXg0.crl (hash: ylKYxlbvPPxDuYWCzNXluSBW1Qlu2Sjz710simAdj9Q=)
3: mGBvIwQwu2rqSEgMM78Outc8oKI.asa (hash: OAcgoQTH6aR8Gafn8lP+RELlUaY4N3e0LLrENbEm6VE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/550bb2-5a50-4784-8dab-3d0e9fe01bd8/1/_zVCuU4Ii793ruGzOUIxUtrvXg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/550bb2-5a50-4784-8dab-3d0e9fe01bd8/1/_zVCuU4Ii793ruGzOUIxUtrvXg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_zVCuU4Ii793ruGzOUIxUtrvXg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:6a:2b:ee:78:1a:a7:56:c4:11:69:f2:31:36:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff3542b94e088bbf77aee1b339423152daef5e0d
Validity
Not Before: Jul 28 20:00:24 2026 GMT
Not After : Jul 29 20:00:24 2026 GMT
Subject: CN=a3c23ee8b698896815769df091441516ee1b8085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c2:6d:1e:1c:a2:f8:08:17:1c:cf:36:a4:2b:
83:6b:b4:6e:47:b7:f0:07:9f:dc:d6:75:c6:bf:21:
55:db:9e:5a:a3:05:c7:5c:93:7c:3a:58:b3:d9:c0:
16:12:f1:65:0b:00:c1:9d:7e:ad:9f:2a:ec:23:4a:
89:5c:ed:12:f4:81:c6:ed:3a:c5:c2:41:f5:c9:ce:
79:c0:5b:d2:38:7b:2b:bc:6a:9d:f9:25:70:2a:66:
f2:3d:f8:a8:d9:43:24:58:1e:b8:cf:0e:b0:51:bd:
06:3f:76:81:5c:cf:bc:4d:63:72:e2:e2:ee:21:d1:
51:2f:c1:f6:7c:af:0f:4c:6e:8b:e4:be:2e:a1:31:
72:e5:66:9e:f9:e3:25:dd:ea:09:31:97:0f:6c:c4:
1d:86:47:8e:97:63:d6:9a:2d:0d:68:03:63:e6:62:
ec:11:b0:9f:e8:51:7a:bc:82:99:ae:88:14:15:94:
ee:9b:61:21:4c:8e:13:31:5d:7d:ae:0e:b0:b5:15:
ec:a7:0e:b8:45:28:f3:c5:d9:bd:ba:0a:43:52:81:
2a:0a:28:d0:fe:d2:94:0e:01:c3:e1:75:7b:84:7a:
3a:41:47:b8:40:83:20:68:0d:27:4d:8d:37:a9:02:
7b:b1:96:64:27:9a:37:e9:29:b8:8f:53:11:84:bf:
10:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:C2:3E:E8:B6:98:89:68:15:76:9D:F0:91:44:15:16:EE:1B:80:85
X509v3 Authority Key Identifier:
keyid:FF:35:42:B9:4E:08:8B:BF:77:AE:E1:B3:39:42:31:52:DA:EF:5E:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zVCuU4Ii793ruGzOUIxUtrvXg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/550bb2-5a50-4784-8dab-3d0e9fe01bd8/1/_zVCuU4Ii793ruGzOUIxUtrvXg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/550bb2-5a50-4784-8dab-3d0e9fe01bd8/1/_zVCuU4Ii793ruGzOUIxUtrvXg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:16:91:44:5d:8c:71:0e:4f:db:35:27:c8:d7:3c:97:9a:18:
fd:81:6e:4b:ae:84:26:39:af:4d:58:95:79:2d:99:0d:f3:63:
b6:1c:4f:00:02:95:82:56:02:8b:ba:b5:54:49:a7:57:7a:96:
3a:8b:db:3d:e9:f7:27:f1:f4:19:15:ea:c8:e6:3e:57:51:17:
d4:fd:4b:e3:1f:e9:8b:12:d7:6d:22:4f:21:dc:20:3c:94:18:
ce:65:ef:f0:e9:b9:70:0a:8b:66:52:e6:51:5a:7a:d4:23:08:
06:f7:ca:d1:c9:6f:62:ac:cc:e5:0d:b9:07:b4:44:2d:80:63:
1e:db:6c:b0:87:16:2d:64:9e:dd:ce:57:b5:75:6d:9d:fd:2d:
07:b0:b6:05:bf:87:29:d4:aa:53:db:3d:b7:21:b8:9a:ee:a0:
3f:bb:d8:66:07:c4:0c:08:25:d9:4f:8b:6d:c5:13:36:05:e8:
c2:1f:40:ba:e7:26:23:c7:ad:ce:0b:37:7c:ba:af:21:8b:67:
b9:b5:11:35:97:03:1c:93:16:a0:9c:ef:6a:10:4f:83:f7:0b:
f7:36:d0:f5:74:0b:80:a3:87:e2:b5:6c:58:f0:c6:c6:63:93:
b3:b8:22:ed:7b:79:b0:cc:2c:4c:04:60:fb:cc:45:23:e0:9d:
c2:19:1f:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:44:44 2026 by rpki-client