Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.mft
File: Zl5NfqijRwyXA-51UUgcNvd0_rs.mft (raw, json)
Hash identifier: LOgjkHJemY6zHTKGDuezVC42xTCCnsxo9PItRW/tuzk=
Subject key identifier: 02:71:BB:67:6E:4E:07:18:70:B8:AD:F4:FD:CE:7E:44:99:DB:C0:5D
Authority key identifier: 66:5E:4D:7E:A8:A3:47:0C:97:03:EE:75:51:48:1C:36:F7:74:FE:BB
Certificate issuer: /CN=665e4d7ea8a3470c9703ee7551481c36f774febb
Certificate serial: 019FAB2C9CE1B42D77676E50CEA16A583193
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zl5NfqijRwyXA-51UUgcNvd0_rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.mft
Manifest number: 16F1
Signing time: Wed 29 Jul 2026 00:00:55 +0000
Manifest this update: Wed 29 Jul 2026 00:00:55 +0000
Manifest next update: Thu 30 Jul 2026 00:00:55 +0000
Files and hashes: 1: Zl5NfqijRwyXA-51UUgcNvd0_rs.crl (hash: M+x5n+I/DN/tOFSzYOS7zC4THqaAIoz3FijsP3eu3Q4=)
2: tXb-ZOETTYTckpb9Qysc1kmvy6I.roa (hash: ecwsDlNutKSR5EQe4HHz/G8gZ+2PHPrWaHUQyPF5OHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zl5NfqijRwyXA-51UUgcNvd0_rs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:2c:9c:e1:b4:2d:77:67:6e:50:ce:a1:6a:58:31:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=665e4d7ea8a3470c9703ee7551481c36f774febb
Validity
Not Before: Jul 29 00:00:55 2026 GMT
Not After : Jul 30 00:00:55 2026 GMT
Subject: CN=0271bb676e4e071870b8adf4fdce7e4499dbc05d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ba:7e:1a:5d:61:02:f6:3a:d7:28:e6:e8:3a:
32:71:ff:9d:b6:10:08:13:27:07:88:c6:70:8d:9e:
7c:36:8a:10:3b:e0:04:05:45:20:b3:46:87:17:a6:
e8:2c:91:fe:4e:6d:6f:59:c7:cd:dd:43:69:8c:72:
aa:e2:03:03:fb:37:ee:45:6a:7b:5b:a4:4b:07:68:
72:85:91:27:fa:3f:15:51:61:9c:30:2b:d7:ca:37:
dc:31:c6:df:67:91:c0:64:66:d8:5a:3a:31:83:d2:
ce:ac:a5:22:6d:e4:4d:7c:c1:a9:b2:1a:ae:d9:d2:
4f:d2:e4:1a:97:59:c1:db:69:77:64:70:4a:cf:72:
1d:d9:ef:47:20:75:1e:08:57:28:0e:0f:da:b9:cc:
34:17:b5:b0:4a:5a:57:76:51:9a:e4:27:5b:f1:d3:
49:8e:b9:04:28:6a:2c:0b:78:d0:7b:2e:af:fd:f5:
45:af:71:78:df:15:de:17:f5:c3:8c:4d:d8:c9:0e:
bc:90:b8:75:a6:a2:6c:1a:3a:fb:d9:84:f4:59:48:
d0:ec:f5:b6:db:90:c9:9b:13:9b:24:9b:46:08:6f:
ed:53:80:51:a0:1e:e5:1d:3e:96:d9:bf:5e:de:3d:
6f:5c:cd:ba:27:9a:ab:4c:2e:c2:b7:cc:fe:5a:1a:
33:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:71:BB:67:6E:4E:07:18:70:B8:AD:F4:FD:CE:7E:44:99:DB:C0:5D
X509v3 Authority Key Identifier:
keyid:66:5E:4D:7E:A8:A3:47:0C:97:03:EE:75:51:48:1C:36:F7:74:FE:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zl5NfqijRwyXA-51UUgcNvd0_rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:f0:53:eb:23:a2:b4:f6:88:7d:88:04:06:25:0b:c5:ad:fd:
25:05:66:e9:82:7d:c0:73:ca:09:d6:f2:65:9e:fb:bb:1b:89:
c1:11:40:b1:c2:ab:e5:3a:3d:e3:86:4d:4a:4e:f5:64:04:af:
86:3a:7e:60:e5:9e:98:63:c4:0f:78:bb:3b:11:ed:36:d1:e9:
62:28:df:01:b3:68:94:94:73:59:9e:d9:75:78:33:4f:d8:34:
88:00:63:68:c5:ad:f4:4d:0f:ab:40:ac:15:2c:ba:44:8a:2b:
70:7b:00:ee:a7:d0:ce:e7:2b:79:34:7c:d8:27:94:f8:40:a7:
21:5c:b7:fb:f3:c7:62:54:b2:07:f8:56:34:76:67:6f:1f:e1:
e3:f5:d0:91:c6:ff:21:20:9a:b7:c0:5e:b3:13:ff:7c:61:e5:
72:69:5c:70:af:db:37:d4:1c:1c:69:5d:c7:98:bf:0f:2a:a3:
e8:e5:b5:92:ae:88:2d:85:43:38:29:39:53:25:51:3c:f2:04:
d9:c8:8c:30:75:a1:28:93:f8:ac:9a:b1:56:28:f3:61:7a:9f:
ea:51:79:00:a3:1e:7a:d6:e5:6e:d7:2a:d1:ff:1d:aa:fe:e8:
e8:e6:e6:ba:b9:17:98:49:ab:1d:6c:11:4b:2d:a5:d0:49:46:
c0:c9:fa:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:01:28 2026 by rpki-client