Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/439cb7-4a36-425e-a084-dcf8ae924993/1/0ZFVeiDTKZYTxwLpmT6dWcObRwg.mft
File: 0ZFVeiDTKZYTxwLpmT6dWcObRwg.mft (raw, json)
Hash identifier: 4vkCOad5J13MoInwPxRzVkIMku1GDxy3QQHLVtOQEIk=
Subject key identifier: FB:57:8B:8D:43:D2:F5:2F:3A:73:F8:5B:57:F9:77:39:D8:FD:5C:72
Authority key identifier: D1:91:55:7A:20:D3:29:96:13:C7:02:E9:99:3E:9D:59:C3:9B:47:08
Certificate issuer: /CN=d191557a20d3299613c702e9993e9d59c39b4708
Certificate serial: 019FAB63C2EE3B75F0E5353134286BB3F96A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ZFVeiDTKZYTxwLpmT6dWcObRwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/439cb7-4a36-425e-a084-dcf8ae924993/1/0ZFVeiDTKZYTxwLpmT6dWcObRwg.mft
Manifest number: 3F
Signing time: Wed 29 Jul 2026 01:01:09 +0000
Manifest this update: Wed 29 Jul 2026 01:01:09 +0000
Manifest next update: Thu 30 Jul 2026 01:01:09 +0000
Files and hashes: 1: 0ZFVeiDTKZYTxwLpmT6dWcObRwg.crl (hash: QyqkzrZhY1HyF3tcISZZeVW5xjZxf2Nmnn4WN8G1TJQ=)
2: sxcdm8hMPFs7hwfFtctneyGAbtY.roa (hash: qSfMKSLLYHXoos50NdW6B+8JG0v//N7ZW2DTOD6cmAA=)
3: zKunQbH1Pi1kuPKcXi66B2kK2GE.roa (hash: IW2iL6xlGt6vOJU5K2L4rfi0KiuOBllyiIH+ctseSa0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/439cb7-4a36-425e-a084-dcf8ae924993/1/0ZFVeiDTKZYTxwLpmT6dWcObRwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/439cb7-4a36-425e-a084-dcf8ae924993/1/0ZFVeiDTKZYTxwLpmT6dWcObRwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0ZFVeiDTKZYTxwLpmT6dWcObRwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:63:c2:ee:3b:75:f0:e5:35:31:34:28:6b:b3:f9:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d191557a20d3299613c702e9993e9d59c39b4708
Validity
Not Before: Jul 29 01:01:09 2026 GMT
Not After : Jul 30 01:01:09 2026 GMT
Subject: CN=fb578b8d43d2f52f3a73f85b57f97739d8fd5c72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:14:82:07:8e:00:7a:a2:ea:6a:95:56:da:e4:
61:92:35:58:42:9e:a7:4f:24:58:f8:9f:63:8b:b4:
be:0d:86:2b:e6:71:b8:da:22:7e:26:30:bf:80:8c:
9f:a3:a6:3e:86:3f:76:c2:01:da:f9:e8:4e:c4:14:
c9:3c:23:75:e9:18:1b:7b:d9:11:57:d4:4e:72:c7:
d0:01:11:92:c5:de:cf:a7:62:cf:d4:be:14:80:29:
48:85:85:66:cb:af:52:de:0b:ab:9b:a3:ef:0c:75:
8f:da:00:eb:ae:51:db:80:73:8f:82:79:8d:25:f0:
b5:c8:a6:48:79:4f:cc:ac:21:da:e8:cf:9b:b4:72:
b5:43:07:5d:71:24:26:e9:6f:8a:5d:47:f4:f7:b1:
6f:a9:5c:d1:a2:8a:7a:20:c5:cd:81:c9:af:0f:2e:
eb:71:cf:83:79:74:bb:52:0d:47:ac:d2:f2:90:92:
7d:68:9e:b2:e6:6e:3e:35:e5:9c:03:ab:ff:27:8f:
7c:86:23:79:61:dd:3e:84:3b:e4:73:6d:68:79:71:
41:6d:fb:d9:4d:8f:af:61:6d:4a:2f:a6:87:b8:8b:
c0:0d:b4:f0:f0:df:1a:97:83:0b:7f:de:31:61:8a:
69:31:2f:46:06:63:e4:d8:de:34:43:71:9a:11:bf:
4a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:57:8B:8D:43:D2:F5:2F:3A:73:F8:5B:57:F9:77:39:D8:FD:5C:72
X509v3 Authority Key Identifier:
keyid:D1:91:55:7A:20:D3:29:96:13:C7:02:E9:99:3E:9D:59:C3:9B:47:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ZFVeiDTKZYTxwLpmT6dWcObRwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/439cb7-4a36-425e-a084-dcf8ae924993/1/0ZFVeiDTKZYTxwLpmT6dWcObRwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/439cb7-4a36-425e-a084-dcf8ae924993/1/0ZFVeiDTKZYTxwLpmT6dWcObRwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:9e:ea:d8:2e:06:8d:6f:25:f8:89:ab:54:3f:7d:ef:98:61:
6c:0c:1e:f3:5d:35:35:67:98:f9:3e:ea:82:9a:1c:dd:3e:b9:
90:b4:b3:7a:4c:69:26:0c:89:e6:4c:9c:9c:85:c9:b6:51:18:
60:fe:9e:4e:d2:42:56:a7:93:69:65:12:75:10:d1:ed:b5:67:
8d:d5:2c:31:59:fc:19:74:33:2b:a8:d3:4e:15:56:ac:77:91:
4f:fd:7e:84:6f:59:76:11:54:6b:b7:36:3f:da:a7:5a:3f:85:
4d:8d:51:ea:a1:6f:6b:e9:e8:a4:89:08:b3:1f:4a:33:d6:7d:
4a:a8:53:29:95:d2:04:64:ff:a5:4c:23:c9:2f:ca:d0:f0:49:
12:4f:86:77:1f:1e:65:af:48:ab:8f:95:82:79:c5:3b:e9:3c:
50:4a:13:6c:60:1b:f4:66:e3:53:39:63:fa:01:50:53:39:60:
c7:d6:17:71:f4:6d:98:dc:6d:73:1a:45:70:92:58:0c:30:bb:
b7:eb:f2:34:4a:89:fe:db:bd:4f:cd:12:1e:cc:d0:34:78:5c:
b4:ed:83:3f:b0:02:18:92:51:8c:b5:e8:0b:fa:e6:68:59:b6:
1e:01:66:1f:6d:92:4d:f5:8d:e5:f8:48:8a:2c:9a:13:65:da:
9d:95:7f:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:27:28 2026 by rpki-client