Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.mft
File: Z-MMF5zUKoZBWDI0UBsY7_JRVUk.mft (raw, json)
Hash identifier: q2eDYBhN7dHdxxoaEXVHpCp5zrS7tNyx/TFnHhk1Vdc=
Subject key identifier: 67:94:D8:BA:5C:FD:0A:5A:2E:46:11:62:20:87:2A:2B:45:F8:3F:15
Authority key identifier: 67:E3:0C:17:9C:D4:2A:86:41:58:32:34:50:1B:18:EF:F2:51:55:49
Certificate issuer: /CN=67e30c179cd42a8641583234501b18eff2515549
Certificate serial: 019FAAF62C3724A467A861A610FB2576D3DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.mft
Manifest number: 0956
Signing time: Tue 28 Jul 2026 23:01:27 +0000
Manifest this update: Tue 28 Jul 2026 23:01:27 +0000
Manifest next update: Wed 29 Jul 2026 23:01:27 +0000
Files and hashes: 1: Z-MMF5zUKoZBWDI0UBsY7_JRVUk.crl (hash: bKMJ23o0QrRixSdKGQuPT7N1Q/751HbrbBhfCPTjKTQ=)
2: dI0KgXxJI7glvO_mfsDPmIQ5NkA.roa (hash: F9yFe51qdVbE9AuCXASZZ90BbvMiZC4wn/OYeZyyhEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f6:2c:37:24:a4:67:a8:61:a6:10:fb:25:76:d3:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67e30c179cd42a8641583234501b18eff2515549
Validity
Not Before: Jul 28 23:01:27 2026 GMT
Not After : Jul 29 23:01:27 2026 GMT
Subject: CN=6794d8ba5cfd0a5a2e46116220872a2b45f83f15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:fb:d1:82:6e:c2:e6:d9:28:f9:e0:94:34:e1:
8b:c9:d0:0f:58:08:d1:a8:3d:48:38:d9:80:8e:55:
69:3e:a7:65:e5:b9:ec:90:a7:aa:60:49:c5:83:6a:
e9:c2:15:32:d8:6d:8c:dc:6c:4e:74:94:a2:71:a3:
33:03:4f:e7:24:ba:2b:51:95:94:f6:a4:79:43:4b:
4e:b7:f9:c2:4d:95:46:9a:a0:ef:0a:ba:21:cb:2b:
54:e7:fc:43:f9:7a:ff:1b:e4:c2:da:d4:39:d4:ee:
e4:ba:93:30:2f:96:c3:60:2f:19:6d:a8:7d:d4:36:
2f:28:14:35:f4:01:7f:be:af:d9:c2:af:1f:be:bc:
2b:1b:13:84:b0:ad:0a:19:18:ec:66:00:22:d9:97:
5b:41:56:53:3c:a3:4e:9e:23:10:99:55:1b:6a:49:
b6:68:80:7f:fc:8b:42:0c:48:22:b7:56:d4:5f:28:
6d:6c:bd:d5:51:45:b3:0c:1a:14:43:c4:59:4f:f5:
d9:c6:bc:95:b9:b7:27:b7:91:82:4a:18:93:89:9a:
28:97:23:34:55:ea:45:af:36:43:d3:cb:c9:c1:bf:
b3:81:9b:11:b3:3b:80:84:e4:05:7a:15:cb:79:67:
7f:e9:0f:d3:28:03:84:c3:10:9a:71:2c:c4:71:8c:
5e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:94:D8:BA:5C:FD:0A:5A:2E:46:11:62:20:87:2A:2B:45:F8:3F:15
X509v3 Authority Key Identifier:
keyid:67:E3:0C:17:9C:D4:2A:86:41:58:32:34:50:1B:18:EF:F2:51:55:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:34:78:54:6e:f5:10:ce:d1:1b:1a:ce:dc:43:2a:9c:90:d8:
56:a3:7c:51:f7:9e:0d:a3:7e:a4:cd:2e:d8:23:50:0b:1e:92:
0a:50:20:d8:be:5e:72:bf:4b:b1:bc:1d:e3:47:98:b8:0f:a1:
8a:cc:83:2f:16:a8:b4:c9:49:2b:9c:e5:53:b2:74:9e:b3:72:
53:08:3a:30:1b:44:97:74:a0:2c:c8:6f:4f:b6:be:48:1d:78:
13:00:e2:a5:03:9b:0a:47:97:38:63:45:59:1f:79:b2:08:20:
8f:4c:5c:d5:8f:9b:cf:05:ca:1a:ce:32:f4:dd:17:82:e7:39:
a8:bb:c8:0c:f9:b7:9c:b9:53:f8:c1:8b:fb:10:58:ed:f1:20:
54:21:4d:77:b3:b4:9d:2a:fd:e0:04:a7:79:db:af:29:b0:33:
46:c5:44:9a:be:90:f3:87:94:70:78:6c:19:3c:6f:ea:50:5a:
22:2e:6a:c4:4f:35:8e:01:5d:59:eb:1b:b7:7e:34:96:af:84:
6c:1e:2a:10:ff:4b:25:5b:c8:e5:0e:9c:2e:d2:c7:41:da:fd:
7f:93:96:63:81:97:9a:16:7d:58:5a:ad:81:7a:0a:73:a4:d9:
1d:5a:13:50:72:a8:ba:ab:e7:14:95:1b:17:31:72:d2:bb:1d:
0f:10:f2:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:23:07 2026 by rpki-client