Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/68a014-7dba-4430-8dde-01c827d6e0fe/1/cZD11fkqSGNiF3pCs9Xv2iDiIOE.mft
File: cZD11fkqSGNiF3pCs9Xv2iDiIOE.mft (raw, json)
Hash identifier: Mpqde6ZdorxTmwNryY9cl2gL3Wj2l6tnfAKaDdxY1nI=
Subject key identifier: 27:DF:0E:1C:80:FA:AD:5D:37:47:AA:53:77:46:22:91:83:A8:8E:AF
Authority key identifier: 71:90:F5:D5:F9:2A:48:63:62:17:7A:42:B3:D5:EF:DA:20:E2:20:E1
Certificate issuer: /CN=7190f5d5f92a486362177a42b3d5efda20e220e1
Certificate serial: 019FACE3A5E09AA3EE3DFF06D2547C7B1C0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cZD11fkqSGNiF3pCs9Xv2iDiIOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/68a014-7dba-4430-8dde-01c827d6e0fe/1/cZD11fkqSGNiF3pCs9Xv2iDiIOE.mft
Manifest number: 1848
Signing time: Wed 29 Jul 2026 08:00:28 +0000
Manifest this update: Wed 29 Jul 2026 08:00:28 +0000
Manifest next update: Thu 30 Jul 2026 08:00:28 +0000
Files and hashes: 1: W0kDwuE8Wzw-iZxK0RP3iilB4OI.roa (hash: LAGYp6tmx7aAjzZBlxGzQ8k1I+/BB+mHmklMRyiCKgA=)
2: cZD11fkqSGNiF3pCs9Xv2iDiIOE.crl (hash: InI4oLSDVxep+0pNt/tFGl7IS8bQbb+x6h5YlON0VIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/68a014-7dba-4430-8dde-01c827d6e0fe/1/cZD11fkqSGNiF3pCs9Xv2iDiIOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/68a014-7dba-4430-8dde-01c827d6e0fe/1/cZD11fkqSGNiF3pCs9Xv2iDiIOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cZD11fkqSGNiF3pCs9Xv2iDiIOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:e3:a5:e0:9a:a3:ee:3d:ff:06:d2:54:7c:7b:1c:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7190f5d5f92a486362177a42b3d5efda20e220e1
Validity
Not Before: Jul 29 08:00:28 2026 GMT
Not After : Jul 30 08:00:28 2026 GMT
Subject: CN=27df0e1c80faad5d3747aa537746229183a88eaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:12:cb:ea:de:10:4c:c0:56:0e:c3:40:d2:f3:
f7:45:c0:31:91:e6:04:41:4d:bd:35:e6:31:7f:f2:
9d:ca:24:1b:b2:ff:58:c2:30:a1:12:fb:25:c2:ae:
d7:42:cd:9b:ba:94:bd:fa:99:50:3a:08:e4:fd:a1:
e5:1b:4d:01:dd:f9:3f:8a:40:e7:17:0b:94:2f:76:
a9:e0:3b:fb:9f:77:88:3f:e4:80:04:93:e5:11:dc:
21:e6:39:ac:5e:4b:64:de:0c:29:07:69:24:87:a9:
06:5a:8c:97:2e:ca:bb:c6:f6:30:ab:97:67:ff:28:
c7:6f:89:54:2b:cf:bf:a0:77:6c:d5:ce:d1:ca:ad:
a4:26:76:ec:9c:61:50:22:94:f4:04:7a:b3:0a:cc:
d5:2b:5e:92:6d:a9:47:78:e3:8b:c8:71:22:75:b6:
99:d8:b3:d8:a2:a0:49:a6:fb:88:6c:54:24:f9:8b:
57:58:ed:7e:a2:59:3f:44:71:f3:d4:3e:1f:bd:04:
c8:57:55:50:a4:d1:a5:2a:fc:0a:3b:33:7f:8b:7e:
b2:60:38:f8:86:cc:bb:1d:f3:5a:9a:70:08:5c:11:
af:f3:3f:ec:6f:dc:67:d4:87:dd:d5:b4:62:13:f3:
2d:47:ea:e4:b2:38:52:32:64:c5:ed:b8:bc:be:0e:
eb:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:DF:0E:1C:80:FA:AD:5D:37:47:AA:53:77:46:22:91:83:A8:8E:AF
X509v3 Authority Key Identifier:
keyid:71:90:F5:D5:F9:2A:48:63:62:17:7A:42:B3:D5:EF:DA:20:E2:20:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cZD11fkqSGNiF3pCs9Xv2iDiIOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/68a014-7dba-4430-8dde-01c827d6e0fe/1/cZD11fkqSGNiF3pCs9Xv2iDiIOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/68a014-7dba-4430-8dde-01c827d6e0fe/1/cZD11fkqSGNiF3pCs9Xv2iDiIOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:a8:ff:06:af:94:43:a7:b4:f0:ff:67:e6:17:24:dc:ef:3e:
ac:8b:58:a5:0d:f2:ac:67:91:e9:73:b2:80:5e:cc:7e:b1:cf:
a3:c6:de:ba:d6:ea:c4:f4:38:51:9f:9e:84:84:5a:7a:94:b2:
d5:ab:e0:17:b1:47:e2:51:a8:7a:6a:9c:ab:87:10:91:ff:61:
1d:46:fc:b2:b8:dc:30:45:bc:63:d9:bb:5c:2a:9b:96:e2:a4:
de:5e:7a:94:c2:98:3b:6c:80:1a:42:1e:d3:7a:48:a1:60:63:
5d:da:d5:f4:e3:64:41:68:21:2a:3d:f4:9f:5e:29:72:29:25:
ce:83:a0:8d:49:84:ba:1a:50:6a:90:0f:03:b1:02:e4:9a:c2:
1d:0c:3b:7d:3a:3a:b7:0b:59:75:7f:b9:6a:bb:0e:08:c7:a0:
a0:52:ff:26:8e:30:e1:36:57:f9:77:50:a9:72:b8:43:6f:e3:
8b:9c:1c:1b:e2:55:94:ee:e8:ae:e1:99:a7:de:94:ca:a3:3b:
38:b0:0a:0c:2f:67:13:66:5c:4d:f7:3e:1c:f2:82:75:a6:b3:
f3:cf:f3:3b:75:e0:16:2a:c6:3f:5b:a7:9c:37:35:af:81:75:
59:4a:31:74:d0:7c:69:6c:0f:a4:09:c1:6a:44:82:26:e0:f9:
5e:77:a6:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:50:09 2026 by rpki-client