Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/7370c4-e4cd-4db3-9b86-e359ae0a6838/1/Zs01lGjIuqmPw8ou8tkFg6aeABY.mft
File: Zs01lGjIuqmPw8ou8tkFg6aeABY.mft (raw, json)
Hash identifier: yAfEelbXd64/9I3FnrKtk23FW/KuqWzLv3eQBzj2ptw=
Subject key identifier: 31:5A:D3:57:59:BF:99:3A:69:5D:FC:5C:1B:7D:FF:9D:EF:B5:45:4F
Authority key identifier: 66:CD:35:94:68:C8:BA:A9:8F:C3:CA:2E:F2:D9:05:83:A6:9E:00:16
Certificate issuer: /CN=66cd359468c8baa98fc3ca2ef2d90583a69e0016
Certificate serial: 019FA9AC5EB9F2F41DB93A3DBDA22B5B3ACE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zs01lGjIuqmPw8ou8tkFg6aeABY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/7370c4-e4cd-4db3-9b86-e359ae0a6838/1/Zs01lGjIuqmPw8ou8tkFg6aeABY.mft
Manifest number: 0256
Signing time: Tue 28 Jul 2026 17:01:13 +0000
Manifest this update: Tue 28 Jul 2026 17:01:13 +0000
Manifest next update: Wed 29 Jul 2026 17:01:13 +0000
Files and hashes: 1: Zs01lGjIuqmPw8ou8tkFg6aeABY.crl (hash: wKpw4Z1AvP17BIXVS9NgtwbI7uhMCzxjao7rNKGOHLI=)
2: rqJldLN-S-H8DV7_BXB9c6fFRDg.roa (hash: 8ct3OMMYCUQEAyF1g7DbkXYuvpJT+cTHy+wjPP6qYuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/7370c4-e4cd-4db3-9b86-e359ae0a6838/1/Zs01lGjIuqmPw8ou8tkFg6aeABY.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/7370c4-e4cd-4db3-9b86-e359ae0a6838/1/Zs01lGjIuqmPw8ou8tkFg6aeABY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zs01lGjIuqmPw8ou8tkFg6aeABY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ac:5e:b9:f2:f4:1d:b9:3a:3d:bd:a2:2b:5b:3a:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66cd359468c8baa98fc3ca2ef2d90583a69e0016
Validity
Not Before: Jul 28 17:01:13 2026 GMT
Not After : Jul 29 17:01:13 2026 GMT
Subject: CN=315ad35759bf993a695dfc5c1b7dff9defb5454f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7f:30:d4:7a:58:24:60:b8:66:0a:8c:b7:09:
cc:d5:28:9e:c1:62:85:23:16:d0:1e:b8:8a:89:55:
0a:33:89:bc:ed:4e:b3:b8:f5:1e:4f:2f:1e:09:9e:
cc:82:30:59:0f:76:7c:52:89:89:a2:1d:f0:f6:08:
83:97:cc:15:dc:6f:db:ca:cb:f2:7c:f2:02:68:ee:
a4:fa:34:a3:f6:38:01:79:7c:92:77:45:a9:7e:7a:
32:e2:33:38:68:4b:d5:d0:58:75:54:b9:d4:4a:8b:
0b:3f:e9:65:86:d6:38:77:73:f4:b3:c5:df:ce:ef:
4f:19:14:6e:4a:30:61:d5:02:ec:83:60:57:49:ab:
0a:52:37:73:af:9a:d2:4c:9b:eb:88:6c:89:6f:b3:
e6:bd:3c:7f:91:ae:9d:64:c4:60:71:37:be:6b:16:
9a:2a:51:cc:cd:4c:49:59:d7:9e:25:1d:ee:4d:6b:
28:09:42:be:a8:bb:f0:a9:dd:c2:01:6b:06:90:ed:
2c:1a:ec:6b:8a:bf:21:ca:81:69:90:71:43:6b:64:
23:b3:c8:b0:ed:f5:0e:20:32:d9:00:7d:ce:45:41:
75:4f:d2:f5:a6:71:d5:6a:a7:25:ac:57:6d:34:ba:
cb:bc:3a:11:65:16:e3:de:a1:1e:a0:d0:5a:b4:69:
c0:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:5A:D3:57:59:BF:99:3A:69:5D:FC:5C:1B:7D:FF:9D:EF:B5:45:4F
X509v3 Authority Key Identifier:
keyid:66:CD:35:94:68:C8:BA:A9:8F:C3:CA:2E:F2:D9:05:83:A6:9E:00:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zs01lGjIuqmPw8ou8tkFg6aeABY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/7370c4-e4cd-4db3-9b86-e359ae0a6838/1/Zs01lGjIuqmPw8ou8tkFg6aeABY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/7370c4-e4cd-4db3-9b86-e359ae0a6838/1/Zs01lGjIuqmPw8ou8tkFg6aeABY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:c0:17:96:03:ea:d2:f5:4a:45:4f:68:04:d1:c4:cd:46:5a:
0a:95:94:0f:5a:df:20:6e:f9:7b:03:6c:5e:ab:b1:fe:74:8f:
9b:06:c0:a0:18:ee:8b:15:0f:73:d5:51:be:b6:30:9b:47:61:
d1:ca:6b:2b:f8:49:67:c6:28:70:fa:f8:f6:78:7a:fa:b7:2a:
45:75:bc:21:f7:b5:d0:e2:35:e1:a2:03:05:7d:54:67:8b:29:
8b:87:c8:f6:50:3e:69:8b:52:86:ad:47:50:cd:e4:cc:48:c5:
43:41:92:00:ed:e9:7b:6d:aa:c3:ce:cb:67:fb:b1:25:65:83:
95:dd:33:61:d4:c7:a6:e5:b8:c0:96:14:26:75:a3:65:09:ed:
b8:aa:d8:5f:e4:f5:66:2d:4f:66:ee:3d:e5:40:b1:f5:be:71:
93:4b:37:f2:a7:ef:3e:9c:51:bf:0d:51:07:37:48:3d:9b:e6:
66:c8:07:c8:bc:88:0c:bb:a0:78:7c:58:c4:b8:d8:4b:2c:a4:
e0:63:fb:be:ac:df:af:9b:ce:c4:43:3a:33:6f:9f:41:1a:d3:
a8:9b:a9:f9:35:81:a3:64:cd:57:47:1a:d6:6f:20:d8:f5:27:
fc:4f:71:36:ca:00:79:0d:3b:4e:94:3a:a4:e3:df:1c:6f:02:
8a:96:69:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:35:19 2026 by rpki-client