Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/04ec6b-251a-4eb7-9199-25194525d516/1/zdzhKuUOgKRTTYD3hqgkSXsm-ts.mft
File: zdzhKuUOgKRTTYD3hqgkSXsm-ts.mft (raw, json)
Hash identifier: +bqAHzukB6YyrujobQ3CQJA+hwjAEkCvxX9d+blnvkI=
Subject key identifier: AB:EC:55:E7:6F:86:24:8B:6D:F3:D2:AB:E1:9D:35:E6:23:41:2A:1B
Authority key identifier: CD:DC:E1:2A:E5:0E:80:A4:53:4D:80:F7:86:A8:24:49:7B:26:FA:DB
Certificate issuer: /CN=cddce12ae50e80a4534d80f786a824497b26fadb
Certificate serial: 019FAD1B2BFAAEFA1CCB05FE55B20C0DDFAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zdzhKuUOgKRTTYD3hqgkSXsm-ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/04ec6b-251a-4eb7-9199-25194525d516/1/zdzhKuUOgKRTTYD3hqgkSXsm-ts.mft
Manifest number: D5
Signing time: Wed 29 Jul 2026 09:01:06 +0000
Manifest this update: Wed 29 Jul 2026 09:01:06 +0000
Manifest next update: Thu 30 Jul 2026 09:01:06 +0000
Files and hashes: 1: pYYR9UI_sLtKcyNmvvaeAyGho10.roa (hash: Visrk6MwePbwviSVCYu3l4j6eSQ3jEUFOOu9154zYk0=)
2: zdzhKuUOgKRTTYD3hqgkSXsm-ts.crl (hash: zTjVwwT8VrFmzYUzO/3+B5FLg+plSxvZn9bclIx+qlo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/04ec6b-251a-4eb7-9199-25194525d516/1/zdzhKuUOgKRTTYD3hqgkSXsm-ts.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/04ec6b-251a-4eb7-9199-25194525d516/1/zdzhKuUOgKRTTYD3hqgkSXsm-ts.mft
rsync://rpki.ripe.net/repository/DEFAULT/zdzhKuUOgKRTTYD3hqgkSXsm-ts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:1b:2b:fa:ae:fa:1c:cb:05:fe:55:b2:0c:0d:df:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cddce12ae50e80a4534d80f786a824497b26fadb
Validity
Not Before: Jul 29 09:01:06 2026 GMT
Not After : Jul 30 09:01:06 2026 GMT
Subject: CN=abec55e76f86248b6df3d2abe19d35e623412a1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:91:bf:1d:f1:60:1f:d9:a5:81:5a:3c:26:b8:
43:eb:99:e5:26:97:31:2e:b5:67:78:1a:a8:b5:b5:
53:0b:c2:6e:1a:57:0a:d1:b6:f3:64:24:01:87:bd:
9d:61:30:eb:2b:2d:9e:ec:2f:c6:7d:42:74:5f:5c:
82:b2:10:78:01:c2:9a:27:23:fd:b5:97:4e:26:c8:
ce:b5:42:72:3c:cd:03:6d:65:7e:a6:f1:63:65:2a:
0d:35:60:8c:18:1c:48:b3:73:2a:99:e9:77:ba:22:
1e:14:dc:0c:d0:61:69:98:aa:58:db:4e:93:bc:a3:
45:75:a9:f5:a6:51:74:86:4b:30:cb:60:08:f1:85:
64:2b:51:76:db:d4:45:34:07:4f:aa:78:39:de:cc:
f7:ef:1f:4e:4a:4c:42:cb:cb:6b:70:1e:88:4d:d0:
51:05:a7:25:c8:0f:f6:1d:ed:7f:88:67:a7:50:5b:
37:f4:c2:90:4b:ec:89:0c:6a:7a:72:ef:a5:24:39:
72:59:d1:89:f4:72:14:f0:99:f8:7d:4b:91:57:9f:
8c:c7:d3:29:4e:e7:79:a7:88:b6:66:5e:60:62:cf:
55:d0:df:2d:37:c7:67:f4:71:db:9e:70:d6:e0:c1:
66:67:bb:45:00:ff:9e:4c:50:ca:f6:0a:84:ac:c5:
7f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:EC:55:E7:6F:86:24:8B:6D:F3:D2:AB:E1:9D:35:E6:23:41:2A:1B
X509v3 Authority Key Identifier:
keyid:CD:DC:E1:2A:E5:0E:80:A4:53:4D:80:F7:86:A8:24:49:7B:26:FA:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zdzhKuUOgKRTTYD3hqgkSXsm-ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/04ec6b-251a-4eb7-9199-25194525d516/1/zdzhKuUOgKRTTYD3hqgkSXsm-ts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/04ec6b-251a-4eb7-9199-25194525d516/1/zdzhKuUOgKRTTYD3hqgkSXsm-ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:d9:69:cc:0e:3c:eb:8a:92:10:1b:46:c9:21:21:15:55:bf:
c1:79:65:71:12:b2:a4:5b:c9:33:7b:ef:db:f9:58:cb:38:eb:
5f:57:e2:88:44:b8:98:d1:e8:8d:cc:9e:51:c1:6a:b8:8a:82:
67:42:80:ea:89:66:da:1a:39:55:4b:f8:7c:6c:59:35:e8:47:
86:d6:63:01:d7:1e:18:d0:33:72:42:b6:35:28:92:ea:c7:1c:
62:69:8e:85:37:ad:6f:d8:f8:27:dd:e1:d1:6d:fd:69:e8:38:
68:03:df:f6:a2:e8:28:6b:30:80:9c:65:6b:5d:70:e7:1c:fe:
c7:da:d3:fb:1e:75:3b:e7:b7:20:d8:74:53:80:04:58:65:4a:
53:30:df:3f:8d:7d:fd:f7:0f:3c:11:90:b7:2e:d7:bb:9e:0c:
e8:1c:41:9e:0d:36:59:d4:44:18:8d:97:76:1a:56:fc:13:c9:
16:a0:f3:34:28:43:89:0f:f7:b6:23:da:2a:93:c0:6d:89:56:
5b:93:31:a9:a0:f1:a9:8f:81:c2:11:6e:ff:84:f0:e4:0d:34:
e0:94:61:58:f9:17:0f:bd:97:1c:19:d0:f3:2f:90:1c:6f:5a:
5a:30:b7:d4:81:b1:46:64:34:ef:de:f8:38:ba:00:69:e8:eb:
96:c7:83:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:18:23 2026 by rpki-client