Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.mft
File: zpTDHhXfS3pg5dQN86rBhS6Np0s.mft (raw, json)
Hash identifier: YgnSk5aDYUp0VhYlQbLUHvb8hM2D/dMrvbTOAyHyWjE=
Subject key identifier: C0:47:4E:8B:F3:AF:3C:CF:89:6E:1F:DF:D7:DB:47:02:39:89:41:D0
Authority key identifier: CE:94:C3:1E:15:DF:4B:7A:60:E5:D4:0D:F3:AA:C1:85:2E:8D:A7:4B
Certificate issuer: /CN=ce94c31e15df4b7a60e5d40df3aac1852e8da74b
Certificate serial: 019FAB630C0036B43A26FA6AFBD366C4C257
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zpTDHhXfS3pg5dQN86rBhS6Np0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.mft
Manifest number: 0BD1
Signing time: Wed 29 Jul 2026 01:00:22 +0000
Manifest this update: Wed 29 Jul 2026 01:00:22 +0000
Manifest next update: Thu 30 Jul 2026 01:00:22 +0000
Files and hashes: 1: 2asX8qOaxpLjyUU4myYKc0Ej3nA.roa (hash: xKHvXSgALDQpoGTmF3KkZGpVCQ/XwWuRiWZZZUlqzJ0=)
2: zpTDHhXfS3pg5dQN86rBhS6Np0s.crl (hash: eAOWi7A6smrQTo9XYx7WGxqHmJuObEXMP3Ly2Q2N38o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/zpTDHhXfS3pg5dQN86rBhS6Np0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 01:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:63:0c:00:36:b4:3a:26:fa:6a:fb:d3:66:c4:c2:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce94c31e15df4b7a60e5d40df3aac1852e8da74b
Validity
Not Before: Jul 29 01:00:22 2026 GMT
Not After : Jul 30 01:00:22 2026 GMT
Subject: CN=c0474e8bf3af3ccf896e1fdfd7db4702398941d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3d:be:7f:6e:bf:f4:96:73:6b:a4:0d:21:2b:
4c:f3:30:7a:b0:ca:62:c7:69:a4:2a:39:5a:8d:e1:
12:71:09:7c:92:e2:5c:01:16:c0:66:3f:f1:53:b8:
36:2e:38:94:67:23:50:6f:90:d7:b2:e0:fa:32:60:
59:39:b9:c1:fc:73:33:67:d2:cb:78:54:ff:07:35:
b1:15:1b:4a:00:eb:2d:7c:0c:a6:ac:94:46:65:c0:
0e:73:d3:b2:ea:05:e5:78:91:94:06:d9:7d:0c:6d:
c2:3c:e7:95:2b:5d:6b:fc:1a:16:be:4c:54:bb:6f:
29:6b:05:91:69:56:32:99:ab:1d:94:f2:bd:56:80:
33:c0:c0:ae:97:38:bc:5e:8b:98:58:81:24:12:fe:
33:c8:16:06:d8:a1:4b:ad:35:d4:0e:b9:a6:a9:1f:
94:f0:02:1d:13:59:6f:a2:32:53:7b:28:9d:e1:cb:
50:bd:0d:7b:4c:c1:24:5f:04:fb:8a:56:29:c6:3f:
83:bf:b9:6d:5c:48:fd:4d:06:78:17:33:68:88:55:
e2:be:c4:15:82:20:d1:ea:07:ad:2d:da:fb:6a:6c:
3f:93:20:13:70:4b:a3:87:20:ce:cf:12:33:ae:38:
6d:23:e9:5e:76:db:67:95:ab:84:d8:45:1d:52:0d:
f9:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:47:4E:8B:F3:AF:3C:CF:89:6E:1F:DF:D7:DB:47:02:39:89:41:D0
X509v3 Authority Key Identifier:
keyid:CE:94:C3:1E:15:DF:4B:7A:60:E5:D4:0D:F3:AA:C1:85:2E:8D:A7:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zpTDHhXfS3pg5dQN86rBhS6Np0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:9f:de:17:59:14:6e:36:31:df:9e:ff:f2:51:3d:fd:0e:4d:
c1:bc:d5:97:17:87:0b:0f:3b:75:56:36:03:c8:a8:e8:7a:82:
07:07:08:3f:e0:e9:2c:09:d2:16:45:35:fc:d2:d4:5a:a6:2f:
fb:90:d5:4d:8a:22:3d:8e:a8:46:f6:1a:19:af:cd:18:e2:50:
9f:91:a5:a3:6e:fe:a8:ac:72:49:b8:88:0d:c2:3e:28:e1:14:
d4:9c:93:ad:0d:b1:b4:b3:fb:2d:cc:6e:c9:12:fb:59:67:ad:
f5:3d:44:19:aa:df:ce:50:1d:22:6b:dc:26:5d:51:52:d0:7b:
d0:62:ca:3c:06:c4:11:44:6b:5e:0f:4c:e1:44:f2:7b:e3:df:
5f:f5:d6:df:e0:a0:f6:f7:a8:15:9c:1f:40:84:5c:17:7e:38:
1e:09:b0:39:d7:2e:e0:a2:43:1a:fb:e6:da:6f:a6:09:99:b2:
52:16:11:4a:16:3f:31:e8:c5:19:1d:71:ef:5a:b4:ed:10:64:
bc:0a:d2:c0:83:9c:e2:c7:bf:bc:e1:d1:47:97:f8:b2:bd:96:
9c:a9:a7:c4:f7:9c:11:02:c7:c5:19:1d:92:3e:e6:2c:d6:db:
c6:46:85:dc:a5:f5:fa:16:9f:b8:90:e0:50:25:cc:5a:a9:79:
24:72:a5:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:04:58 2026 by rpki-client