Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/ZC8kHMyieCtfxAfhu696l6mEdGA.mft
File: ZC8kHMyieCtfxAfhu696l6mEdGA.mft (raw, json)
Hash identifier: Kq29j9ULzv1AIRj2NYo3vaFaO7rP0xn5o6j/4cecX/M=
Subject key identifier: CA:DD:FC:CF:69:E1:CF:06:78:77:24:15:C3:31:1F:CB:A3:97:87:05
Authority key identifier: 64:2F:24:1C:CC:A2:78:2B:5F:C4:07:E1:BB:AF:7A:97:A9:84:74:60
Certificate issuer: /CN=642f241ccca2782b5fc407e1bbaf7a97a9847460
Certificate serial: 019FAAF56AD0601504FDA508D9AAB1A9EE3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZC8kHMyieCtfxAfhu696l6mEdGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/ZC8kHMyieCtfxAfhu696l6mEdGA.mft
Manifest number: 0B08
Signing time: Tue 28 Jul 2026 23:00:38 +0000
Manifest this update: Tue 28 Jul 2026 23:00:38 +0000
Manifest next update: Wed 29 Jul 2026 23:00:38 +0000
Files and hashes: 1: ZC8kHMyieCtfxAfhu696l6mEdGA.crl (hash: 8qYP0RwHCDDjGoMHsrI2HpzaqrCwEYpYYzZrazxmfNc=)
2: ekOzOiDdfxxEUE52B61ICsigaF0.roa (hash: 6fj4c7wjlH2wB374dMtlshl1OSG/zfWE+ZknbaJj2LQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/ZC8kHMyieCtfxAfhu696l6mEdGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/ZC8kHMyieCtfxAfhu696l6mEdGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZC8kHMyieCtfxAfhu696l6mEdGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:6a:d0:60:15:04:fd:a5:08:d9:aa:b1:a9:ee:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=642f241ccca2782b5fc407e1bbaf7a97a9847460
Validity
Not Before: Jul 28 23:00:38 2026 GMT
Not After : Jul 29 23:00:38 2026 GMT
Subject: CN=caddfccf69e1cf0678772415c3311fcba3978705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:58:7d:36:c8:d1:33:05:07:97:35:12:aa:ca:
65:95:48:ee:32:c8:f5:f4:75:22:16:88:8e:59:af:
7d:d1:68:bf:c8:d3:b5:eb:46:0e:99:18:55:47:19:
f5:d3:0d:e5:33:88:f7:4a:e2:1b:23:64:b7:d4:e3:
e2:a8:6c:15:e2:25:6e:38:28:59:e3:b4:f5:57:d4:
96:82:b1:22:e9:18:19:93:83:8b:c4:c9:ca:75:ec:
1a:63:73:ae:c1:79:e2:f7:17:97:eb:16:58:a6:cb:
14:a5:ee:17:ad:34:12:16:40:da:41:99:ef:fa:d3:
b1:15:ff:b5:a3:ba:10:b4:08:d5:f5:35:b9:fc:5d:
5c:2a:b9:6d:33:b6:5b:f0:23:ea:7f:59:9e:fa:22:
fb:b7:58:23:12:03:a7:e1:1b:b3:97:c7:b5:51:1e:
8b:94:03:4f:22:65:88:95:2c:04:b1:11:01:4c:62:
ce:a1:d8:e7:86:cb:15:c6:45:3e:9c:42:fc:4c:50:
d8:d9:02:24:80:25:50:bc:b3:49:3e:fb:ca:f2:69:
e2:57:91:f1:49:b1:ed:44:a7:63:23:8c:83:52:b5:
05:54:c3:0b:95:61:d2:5f:02:ca:f5:87:da:f0:28:
58:6b:67:7f:b6:e6:ab:24:e9:74:90:55:04:23:6e:
6f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:DD:FC:CF:69:E1:CF:06:78:77:24:15:C3:31:1F:CB:A3:97:87:05
X509v3 Authority Key Identifier:
keyid:64:2F:24:1C:CC:A2:78:2B:5F:C4:07:E1:BB:AF:7A:97:A9:84:74:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZC8kHMyieCtfxAfhu696l6mEdGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/ZC8kHMyieCtfxAfhu696l6mEdGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/ZC8kHMyieCtfxAfhu696l6mEdGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:a9:67:a1:0e:35:30:2b:98:83:94:ae:a4:df:30:25:81:49:
23:38:62:bc:25:33:9e:6f:52:23:0c:40:62:60:45:6a:1e:9d:
0e:06:78:e6:36:d2:25:79:49:b8:29:b5:51:76:6b:aa:8b:bf:
7d:24:3a:2d:9f:a9:28:7d:5b:0d:30:04:21:df:cb:f6:c9:63:
18:d7:f2:e5:9f:75:32:00:3c:bf:56:13:92:41:8f:ef:7d:b1:
c5:d2:2a:98:27:fa:0e:6d:a5:a7:83:11:31:be:09:41:47:ae:
65:3d:66:a3:38:52:34:b0:2f:1c:1f:0a:22:10:72:ff:0b:e2:
f7:ba:8d:b4:bb:61:85:2c:66:e1:18:c3:84:77:65:7f:be:fe:
a1:2f:bc:fe:01:68:e3:5c:7d:91:5b:bc:57:b8:a3:3c:1b:23:
92:f6:2e:08:35:7c:60:b8:4c:49:25:51:c9:81:3b:87:96:70:
22:b9:8d:3f:cf:44:f6:06:4e:bd:3a:30:30:5c:8c:bb:62:c0:
e0:f6:e1:00:ee:c7:91:8b:52:33:78:74:19:10:bd:13:f8:26:
ab:e9:82:1d:cc:9e:20:f3:b5:4b:d0:ea:60:06:48:44:d4:33:
fc:ce:5c:02:79:f4:11:85:b7:6a:81:4b:8d:b8:c7:21:d8:4f:
4f:33:39:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:49:33 2026 by rpki-client