Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/55c2a0-49df-4d96-988f-4f9d04010710/1/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.mft
File: Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.mft (raw, json)
Hash identifier: LSdAVw2GKVADvaWWj1WQLnxWvByDy8+gB00N2V1UZ5s=
Subject key identifier: 40:CE:AF:2B:8B:34:28:E7:D1:15:1D:E3:AD:BD:04:36:ED:FF:07:75
Authority key identifier: 67:5F:BE:4B:1F:00:23:3E:D7:67:99:00:71:F0:45:90:C9:0C:88:7D
Certificate issuer: /CN=675fbe4b1f00233ed767990071f04590c90c887d
Certificate serial: 019FACACA9A30666C87E461E3D9B3D4774B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/55c2a0-49df-4d96-988f-4f9d04010710/1/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.mft
Manifest number: 126D
Signing time: Wed 29 Jul 2026 07:00:24 +0000
Manifest this update: Wed 29 Jul 2026 07:00:24 +0000
Manifest next update: Thu 30 Jul 2026 07:00:24 +0000
Files and hashes: 1: 1IAT8p5zJE7Cjb7zerrnkgwwgBo.roa (hash: JK2Pcklbnx9Qld5WIKxmuBJj4g+yCjwGVY5ntHTVBjs=)
2: Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.crl (hash: VC6scvKWBd0cjuqob5HU3hHGtSoaBNTtBWrLCKWmxAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/55c2a0-49df-4d96-988f-4f9d04010710/1/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/55c2a0-49df-4d96-988f-4f9d04010710/1/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 07:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:ac:a9:a3:06:66:c8:7e:46:1e:3d:9b:3d:47:74:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=675fbe4b1f00233ed767990071f04590c90c887d
Validity
Not Before: Jul 29 07:00:24 2026 GMT
Not After : Jul 30 07:00:24 2026 GMT
Subject: CN=40ceaf2b8b3428e7d1151de3adbd0436edff0775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:02:a7:70:38:38:a3:a3:1a:25:d6:05:78:81:
60:a8:01:ea:fd:cb:41:73:ec:b9:57:42:de:21:c0:
79:c3:90:1b:98:d4:de:0b:bd:e5:b4:75:af:2e:e2:
c1:4f:6d:d9:ef:6f:6c:a2:17:2c:3d:1f:79:1f:e8:
df:c8:bd:e9:91:fc:57:e8:13:8b:41:2e:4a:64:0e:
da:6c:01:ad:ae:94:e5:11:14:6b:24:83:eb:fa:11:
a7:ee:b6:ac:5c:77:12:ab:2d:4b:91:99:28:c8:a4:
cc:1a:1a:ca:56:61:23:73:12:a0:37:85:c8:fd:42:
9e:6f:9e:40:56:59:47:7c:69:cb:f3:69:cd:fa:c6:
45:48:c6:24:1b:16:a5:2d:fd:3c:6b:f9:77:90:72:
29:75:cb:a8:1c:19:f4:c4:4b:8a:71:71:ac:bc:5e:
66:64:63:78:d5:3d:8d:17:c2:48:00:38:18:30:88:
fe:34:bd:d1:14:df:5c:13:e2:55:66:ac:c9:a3:8e:
38:ab:9e:a9:80:2b:75:90:3f:10:6f:7c:5f:59:ab:
df:cd:be:bc:ec:cb:7c:bc:34:ab:54:10:c2:60:59:
f0:5e:4b:6c:9c:b7:be:7b:7f:91:eb:d1:d1:a2:fc:
03:c3:a6:bb:9f:52:e8:21:a2:b2:74:03:6a:3e:be:
ac:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:CE:AF:2B:8B:34:28:E7:D1:15:1D:E3:AD:BD:04:36:ED:FF:07:75
X509v3 Authority Key Identifier:
keyid:67:5F:BE:4B:1F:00:23:3E:D7:67:99:00:71:F0:45:90:C9:0C:88:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/55c2a0-49df-4d96-988f-4f9d04010710/1/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/55c2a0-49df-4d96-988f-4f9d04010710/1/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:63:de:06:d4:c0:e0:c5:a1:36:2a:45:a1:a2:81:ae:95:89:
cb:df:71:81:73:47:92:53:e2:9e:fb:d7:f1:a6:05:c9:30:8d:
b7:25:38:2e:28:2b:13:aa:8a:3d:a2:97:d1:2d:3d:ca:01:39:
be:ff:bc:e1:1f:83:46:23:0d:d3:57:d3:93:27:98:4f:9e:e2:
64:d4:0b:0d:30:65:38:8a:6d:18:02:09:79:57:76:4e:28:bf:
1a:dc:d2:f0:d3:60:2f:31:9c:78:e7:a2:4c:ff:67:bc:5f:9e:
bc:d2:78:a4:42:94:c9:65:84:e6:59:e8:86:cb:1a:19:cf:53:
39:d7:55:91:6a:b4:4d:33:13:49:fd:87:87:c7:14:aa:e5:35:
98:3e:0b:9e:bc:13:61:f5:1a:e0:35:84:22:6b:09:ed:f1:a5:
61:ce:7f:80:83:aa:33:d3:d2:9c:1e:9f:67:d1:d8:9a:58:3d:
f7:42:01:5f:62:8e:52:72:a9:fc:94:93:56:d5:f2:52:4b:55:
70:c8:b6:f3:d9:58:91:aa:a3:f1:c6:40:08:3f:3e:6e:ad:26:
22:9c:06:0e:bd:15:db:e8:ff:c3:91:49:34:c6:1e:91:6a:60:
0b:2e:7c:24:19:ad:dc:d3:9a:6c:53:f9:87:cf:fe:3e:9d:01:
4a:42:aa:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:17:19 2026 by rpki-client