Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8b5f1e-4190-48b6-bdc5-7d05f9888e98/1/ZhPZyFZESnCW46hQjK4wf968DNQ.mft
File: ZhPZyFZESnCW46hQjK4wf968DNQ.mft (raw, json)
Hash identifier: Uoy20cjPv2e8xUhOO3I2ornBuYe7WR4Pe3f7OWgQXME=
Subject key identifier: 37:27:2F:22:82:9C:E4:C9:80:B2:98:4A:FA:0E:0A:A3:7A:CD:2B:09
Authority key identifier: 66:13:D9:C8:56:44:4A:70:96:E3:A8:50:8C:AE:30:7F:DE:BC:0C:D4
Certificate issuer: /CN=6613d9c856444a7096e3a8508cae307fdebc0cd4
Certificate serial: 019FAC0833054502BA234E4245D7BF610EA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZhPZyFZESnCW46hQjK4wf968DNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8b5f1e-4190-48b6-bdc5-7d05f9888e98/1/ZhPZyFZESnCW46hQjK4wf968DNQ.mft
Manifest number: 19D6
Signing time: Wed 29 Jul 2026 04:00:46 +0000
Manifest this update: Wed 29 Jul 2026 04:00:46 +0000
Manifest next update: Thu 30 Jul 2026 04:00:46 +0000
Files and hashes: 1: RsnrJKwmL8cQaNh398zcQEeUvVY.roa (hash: LNyFYXYZiYI7HKKoks5EZWi0DK28Q+wkZrR9sNh6HOA=)
2: ZhPZyFZESnCW46hQjK4wf968DNQ.crl (hash: qDwSVHfN2dp6XHdi3smzdy9+YfeF+13QPdD2+94mAsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8b5f1e-4190-48b6-bdc5-7d05f9888e98/1/ZhPZyFZESnCW46hQjK4wf968DNQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8b5f1e-4190-48b6-bdc5-7d05f9888e98/1/ZhPZyFZESnCW46hQjK4wf968DNQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZhPZyFZESnCW46hQjK4wf968DNQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:08:33:05:45:02:ba:23:4e:42:45:d7:bf:61:0e:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6613d9c856444a7096e3a8508cae307fdebc0cd4
Validity
Not Before: Jul 29 04:00:46 2026 GMT
Not After : Jul 30 04:00:46 2026 GMT
Subject: CN=37272f22829ce4c980b2984afa0e0aa37acd2b09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9d:b8:43:3e:fb:b4:d5:0a:3e:76:56:db:64:
f2:8f:9c:06:1f:6d:a2:6d:3d:8d:c7:a3:8e:8b:e3:
29:ab:e3:65:82:e2:5b:c9:eb:6d:da:19:65:90:1f:
c1:d4:4e:eb:e9:2a:15:6e:bd:b8:be:37:17:d0:ff:
b0:8b:ea:c8:f9:b6:0f:77:48:40:f8:66:9f:45:a4:
50:47:1f:73:c8:cf:a4:95:63:70:de:f5:11:68:46:
19:65:b5:23:8c:6c:23:98:c9:e7:3e:41:df:78:49:
a5:39:3c:ec:a3:c7:84:74:ba:f1:6c:83:23:a9:34:
d1:a1:07:ef:10:2c:0d:da:58:0d:73:f4:e1:27:e3:
5f:8d:4f:15:40:fb:a2:11:0d:31:61:d4:e7:5e:6d:
31:96:68:72:b7:0c:57:18:49:96:49:c2:91:ec:d7:
37:92:4b:bc:71:9b:a4:18:84:5d:69:1b:59:05:f0:
a7:c5:5d:fc:c4:c7:ec:08:a0:09:14:dd:17:ff:f4:
ff:a3:3a:ca:11:a3:ea:cf:a3:32:85:f8:33:9d:37:
84:a9:e9:0e:18:dd:5c:1d:40:d7:04:96:d1:a1:a7:
34:27:0b:b1:1f:1e:c1:e6:ba:4f:3e:47:7a:2d:af:
7a:67:76:e5:a9:b0:fa:18:e4:06:65:11:c2:bb:81:
ed:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:27:2F:22:82:9C:E4:C9:80:B2:98:4A:FA:0E:0A:A3:7A:CD:2B:09
X509v3 Authority Key Identifier:
keyid:66:13:D9:C8:56:44:4A:70:96:E3:A8:50:8C:AE:30:7F:DE:BC:0C:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZhPZyFZESnCW46hQjK4wf968DNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8b5f1e-4190-48b6-bdc5-7d05f9888e98/1/ZhPZyFZESnCW46hQjK4wf968DNQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8b5f1e-4190-48b6-bdc5-7d05f9888e98/1/ZhPZyFZESnCW46hQjK4wf968DNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:3b:6d:a3:68:ae:64:23:69:68:e9:a0:21:3f:61:a7:13:14:
88:62:ea:24:f6:3d:48:3e:6d:b4:79:cb:03:8c:f9:72:22:60:
d7:2a:ea:b7:6b:3f:66:39:08:7f:91:5c:a7:a5:38:39:46:fb:
6e:0f:b6:cc:41:0f:aa:9e:86:84:89:25:d9:3d:fa:75:31:72:
92:92:f1:51:1f:5c:52:d8:53:eb:ab:ac:41:eb:8c:28:d0:8e:
8a:d1:b3:45:50:26:b0:17:fc:e2:73:d5:84:f2:50:48:e9:d9:
8e:5b:fe:59:31:5f:62:8a:17:7c:a1:1b:2f:4d:70:58:de:b5:
2b:89:2a:6e:6f:4c:af:6f:48:d8:1b:fd:ff:a2:f4:dc:f1:73:
11:38:5e:08:eb:c1:71:74:6e:9f:50:3a:34:5c:7d:47:1e:b0:
a4:07:87:ce:2e:ff:38:bc:3d:87:17:00:59:cc:ac:c8:0f:af:
cb:9e:bf:3a:38:2e:a7:50:4b:6d:58:45:54:60:0a:e4:3a:1e:
aa:e9:8d:e5:dc:db:30:1a:94:8f:d2:cd:17:32:6b:ff:a5:04:
6c:04:f9:d1:e5:5f:7f:58:37:56:51:e9:72:71:2a:db:07:bc:
21:ce:f1:60:39:50:ee:8a:c5:60:a1:da:cd:ad:44:af:55:e8:
3d:14:df:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:29:05 2026 by rpki-client