Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/zahD6BKxbexgu3CYykEzEX24R00.mft
File: zahD6BKxbexgu3CYykEzEX24R00.mft (raw, json)
Hash identifier: wLVUEe0TJCMiaz6rOaAvlDtDAJwoFbIpCnqyQenNuUE=
Subject key identifier: 4A:48:CB:67:66:94:10:7A:50:01:72:4E:A2:F0:F9:91:C4:C0:AA:91
Authority key identifier: CD:A8:43:E8:12:B1:6D:EC:60:BB:70:98:CA:41:33:11:7D:B8:47:4D
Certificate issuer: /CN=cda843e812b16dec60bb7098ca4133117db8474d
Certificate serial: 019FABD0FBE4EB528EA7A13B891EC5D2D243
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zahD6BKxbexgu3CYykEzEX24R00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/zahD6BKxbexgu3CYykEzEX24R00.mft
Manifest number: 19D5
Signing time: Wed 29 Jul 2026 03:00:27 +0000
Manifest this update: Wed 29 Jul 2026 03:00:27 +0000
Manifest next update: Thu 30 Jul 2026 03:00:27 +0000
Files and hashes: 1: xAJAqKl5Srwo2ARzZhLG6xPoMEY.roa (hash: zXin4xfG6I9ng2fyOSNQGYSR3toHXgB+MkkZOtI6MnY=)
2: zahD6BKxbexgu3CYykEzEX24R00.crl (hash: cRyz90Zp9vv5exGehcY08acvWFSTDYkBOu587LheFU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/zahD6BKxbexgu3CYykEzEX24R00.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/zahD6BKxbexgu3CYykEzEX24R00.mft
rsync://rpki.ripe.net/repository/DEFAULT/zahD6BKxbexgu3CYykEzEX24R00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:d0:fb:e4:eb:52:8e:a7:a1:3b:89:1e:c5:d2:d2:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cda843e812b16dec60bb7098ca4133117db8474d
Validity
Not Before: Jul 29 03:00:27 2026 GMT
Not After : Jul 30 03:00:27 2026 GMT
Subject: CN=4a48cb676694107a5001724ea2f0f991c4c0aa91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:90:a7:90:38:60:cb:fd:f5:13:8a:0c:40:5c:
b0:58:e8:3b:3a:2c:ab:c4:a1:81:22:b7:64:af:11:
41:9b:7e:b6:82:47:fd:be:78:ee:43:53:c4:d4:a8:
0f:1a:a3:71:54:d4:49:2d:c2:1d:a7:0b:8e:6e:9e:
93:e4:24:c5:31:b5:1d:e4:a8:4d:c2:04:df:c0:c1:
f0:91:89:51:df:ec:33:06:00:79:99:e1:24:cf:50:
77:80:77:9a:40:85:9a:dc:6f:a5:a9:14:49:7a:15:
ce:0c:13:2f:37:6c:e1:37:da:b6:5f:34:c4:f5:9d:
85:91:25:a4:ae:33:b0:4f:f0:ad:94:b3:1e:60:5d:
1f:0b:a8:50:ab:4a:38:94:c2:a8:69:a7:db:8e:24:
94:8c:e8:bc:3e:98:ab:33:b0:5b:a4:33:88:4d:f1:
1e:eb:e6:81:fa:16:6e:dc:6b:a1:68:a5:f0:22:c2:
91:9e:41:7d:a6:9c:0f:db:af:c3:93:85:a6:62:52:
1f:e0:e2:23:c9:86:7e:79:84:2f:73:ab:11:3a:6a:
e3:03:d8:2b:f9:c0:89:e3:19:c4:d4:da:59:8d:d0:
da:15:6d:c1:6d:42:2a:2a:cd:df:2f:c8:53:f1:47:
10:9d:2e:7d:e6:50:b7:e9:db:30:7c:c6:04:82:7c:
63:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:48:CB:67:66:94:10:7A:50:01:72:4E:A2:F0:F9:91:C4:C0:AA:91
X509v3 Authority Key Identifier:
keyid:CD:A8:43:E8:12:B1:6D:EC:60:BB:70:98:CA:41:33:11:7D:B8:47:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zahD6BKxbexgu3CYykEzEX24R00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/zahD6BKxbexgu3CYykEzEX24R00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/zahD6BKxbexgu3CYykEzEX24R00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:3b:66:ef:9d:4f:df:f7:8c:7e:97:96:35:4e:63:26:46:38:
65:86:de:ab:fd:57:59:41:05:c5:88:3e:d7:0f:6e:98:b3:7d:
40:69:72:d7:4c:8f:19:c2:3b:c5:1d:7b:c5:af:b6:49:b2:c0:
15:dc:69:86:28:9c:d1:e4:f9:e1:a3:85:da:be:f3:5a:5c:65:
1f:e8:18:cc:dc:8e:ea:ec:11:69:63:b9:49:3b:53:4f:da:76:
3f:50:28:c1:3f:bc:5f:f2:be:41:58:76:3e:39:ca:b3:56:bc:
8a:1e:c8:9d:5c:86:a2:1b:57:97:fd:cd:37:09:7b:f2:6b:fc:
cb:67:91:d3:ee:b6:7c:57:79:91:25:97:f8:61:84:dd:9f:06:
de:6a:43:d8:11:3f:89:e2:dd:82:bd:45:66:3e:66:e4:50:d3:
9a:8d:02:6a:ad:ca:3c:7c:e9:1b:37:48:38:53:56:7b:46:1f:
c5:f7:01:13:5d:8e:c1:56:3c:11:e4:8c:1d:17:84:eb:c2:1a:
9e:2f:7a:e6:37:a4:c6:94:f5:1f:6f:93:ef:bd:34:b6:f1:c7:
c0:e8:96:b8:80:e2:94:45:dc:01:ef:20:ea:c9:a7:c5:a9:a7:
5f:7d:70:5a:04:79:44:3c:98:72:50:5d:78:09:c3:0c:b4:7c:
03:46:66:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:01:24 2026 by rpki-client