Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.mft
File: znGAxLrTz0JaUGcuHLep0qx44gw.mft (raw, json)
Hash identifier: +p52xxpNWReESyQoShLIrahP0czJ9l+odq9oATtiAEA=
Subject key identifier: E1:72:48:1C:C4:D3:AA:4D:45:44:FA:21:52:3C:3D:2D:E4:09:DE:20
Authority key identifier: CE:71:80:C4:BA:D3:CF:42:5A:50:67:2E:1C:B7:A9:D2:AC:78:E2:0C
Certificate issuer: /CN=ce7180c4bad3cf425a50672e1cb7a9d2ac78e20c
Certificate serial: 019FAB2C3247B2ED77C1AA419BA2C3FD9EDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/znGAxLrTz0JaUGcuHLep0qx44gw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.mft
Manifest number: 167B
Signing time: Wed 29 Jul 2026 00:00:28 +0000
Manifest this update: Wed 29 Jul 2026 00:00:28 +0000
Manifest next update: Thu 30 Jul 2026 00:00:28 +0000
Files and hashes: 1: CmEbUhenhDmMKvHKSkFpe9LG8X0.roa (hash: Jsb+hfYBWXp4dm2lj3dTAoFqYAK6O+6kl4dBC77ANZE=)
2: GtNJ0lmoQ9ZuqCpl3-J4Re7um1k.roa (hash: OD5qNfz5l9josRO/cRdoZZIkXHpha2NNc9udJTgh6/s=)
3: SQ9ZxRxAMd1xoAu9tA2c2yS9YUQ.roa (hash: MYiap9ADnfYQb/YwxbWyM4PVhhzPTbhg8edINlxn310=)
4: znGAxLrTz0JaUGcuHLep0qx44gw.crl (hash: AbBqIyRQV/f3ZfjRCWMKlI27MkNGUD7M4aGmlYLyicA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.mft
rsync://rpki.ripe.net/repository/DEFAULT/znGAxLrTz0JaUGcuHLep0qx44gw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:2c:32:47:b2:ed:77:c1:aa:41:9b:a2:c3:fd:9e:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce7180c4bad3cf425a50672e1cb7a9d2ac78e20c
Validity
Not Before: Jul 29 00:00:28 2026 GMT
Not After : Jul 30 00:00:28 2026 GMT
Subject: CN=e172481cc4d3aa4d4544fa21523c3d2de409de20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0e:f0:5f:15:cc:5b:b0:6f:65:42:af:e8:51:
1c:e6:30:da:f7:6e:78:ea:0f:18:2a:8a:f2:47:5a:
5b:c3:da:7c:fb:1c:e6:24:5b:d5:0b:f2:c4:67:d1:
a8:b5:07:e9:78:f0:1c:40:98:a7:61:a1:d0:0f:3f:
c5:c9:fc:36:0f:fa:4c:e0:f5:f7:a6:8a:d0:a0:74:
4e:fb:ae:05:66:30:e3:f1:b2:69:c0:9e:70:b9:88:
ad:10:c3:0c:c5:4b:98:15:68:e0:9b:22:7e:46:fa:
d3:1d:43:19:4c:f2:58:d5:7c:c2:07:7c:b9:90:00:
8b:b8:5c:5c:3d:1a:e4:60:11:f8:ee:93:82:86:c1:
b0:dc:c8:0d:ef:07:5b:29:b1:f4:3a:f7:b1:99:45:
27:56:93:07:64:8d:e7:80:a3:ac:f5:49:71:8a:4f:
9e:66:73:4d:54:56:70:2b:02:a7:01:cd:13:5a:2f:
9c:8e:ef:20:04:f3:00:d4:22:10:29:1e:59:59:4f:
52:0e:17:80:78:de:33:74:a1:d1:bf:dc:fb:0a:cb:
f0:21:5d:28:f2:33:f2:0b:b1:86:d9:df:31:cf:8f:
16:3d:a8:6c:7d:73:37:e2:80:16:35:25:b6:73:44:
50:ed:6a:c6:42:42:63:ec:27:c0:99:5c:2e:e9:30:
09:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:72:48:1C:C4:D3:AA:4D:45:44:FA:21:52:3C:3D:2D:E4:09:DE:20
X509v3 Authority Key Identifier:
keyid:CE:71:80:C4:BA:D3:CF:42:5A:50:67:2E:1C:B7:A9:D2:AC:78:E2:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znGAxLrTz0JaUGcuHLep0qx44gw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:01:17:df:8e:1b:13:33:3e:f3:d5:a2:0c:04:fb:c3:6f:60:
ec:86:c1:39:44:de:b4:fb:01:74:67:a7:02:7b:9c:8c:39:06:
98:62:87:15:3e:d5:e5:b6:d2:9b:a9:b2:19:47:71:f5:37:0f:
f5:69:d7:27:4b:8f:83:06:20:5d:0f:10:8b:c3:aa:43:80:be:
22:61:22:1b:5a:93:c5:42:63:1f:8e:5f:a6:33:df:81:82:c4:
a0:fb:5b:ae:fc:00:5a:ab:8d:b0:3c:0b:66:1b:29:84:ee:a7:
ce:d2:84:9b:c3:48:4d:a3:df:20:87:88:6d:5e:6e:93:7d:b3:
08:e7:82:79:6a:a1:63:84:e2:12:5a:e7:d8:0d:1c:1c:65:64:
27:b4:21:e2:c1:5b:7c:ce:95:98:50:35:1a:18:59:c0:b6:95:
b7:ff:39:eb:fc:4b:79:6f:38:7c:b3:bd:92:2e:9f:a5:b6:13:
4a:dc:b3:b4:9c:42:e5:c5:46:61:e9:70:98:5f:c3:2e:8a:91:
b5:4f:d2:0d:45:af:41:35:95:3f:74:c8:25:c1:b2:4b:37:90:
78:34:da:57:10:d1:e3:45:ed:ea:d3:b6:19:88:9d:02:5b:56:
41:3a:30:0f:2f:4f:7c:bf:90:d2:53:2e:1f:52:67:73:6f:48:
1d:26:c5:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:25:13 2026 by rpki-client