
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.mft
File: 4Z2wxbLZYQ71hul_uh_Kh1AG89o.mft (raw, json)
Hash identifier: rAJWGIRVZ9hIDgzxXAvWkomsC4y/QN7uZILVeJs0KKk=
Subject key identifier: A0:27:0A:7E:D1:5F:AC:52:5D:B5:62:ED:A7:7A:42:9B:19:4B:6F:6E
Authority key identifier: E1:9D:B0:C5:B2:D9:61:0E:F5:86:E9:7F:BA:1F:CA:87:50:06:F3:DA
Certificate issuer: /CN=e19db0c5b2d9610ef586e97fba1fca875006f3da
Certificate serial: 019FAB99F8C7953881A372D948C60FADB313
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Z2wxbLZYQ71hul_uh_Kh1AG89o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.mft
Manifest number: 1507
Signing time: Wed 29 Jul 2026 02:00:22 +0000
Manifest this update: Wed 29 Jul 2026 02:00:22 +0000
Manifest next update: Thu 30 Jul 2026 02:00:22 +0000
Files and hashes: 1: 4Z2wxbLZYQ71hul_uh_Kh1AG89o.crl (hash: nWWLJ88oynEcFPZzszZElGYO7AjZdFW2v2c0VJAHdw8=)
2: NdV1685pUzzupc5kE5-ldMdSDxg.roa (hash: ueorjyehMNjdQkD1BLlElPr49sGyaBsEZXRjheGpYAA=)
3: ObqCC5ItaIb9zSaMr1gSLuQWW7g.roa (hash: z8qeiKJfszyHlpziW66XElBOILDVztPeTixCMaYCXnk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Z2wxbLZYQ71hul_uh_Kh1AG89o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:99:f8:c7:95:38:81:a3:72:d9:48:c6:0f:ad:b3:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e19db0c5b2d9610ef586e97fba1fca875006f3da
Validity
Not Before: Jul 29 02:00:22 2026 GMT
Not After : Jul 30 02:00:22 2026 GMT
Subject: CN=a0270a7ed15fac525db562eda77a429b194b6f6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7f:4a:95:81:34:37:fb:eb:54:81:19:20:f7:
74:03:1d:98:e3:62:00:52:53:b4:d7:08:a6:6f:13:
13:cc:96:23:a2:f5:28:03:c5:04:48:1d:65:bd:37:
79:7c:af:a1:0c:5d:ed:4d:87:1f:f0:65:fd:8d:1c:
bd:a6:93:5d:fc:31:3e:30:83:be:1a:94:8f:e5:74:
ca:6e:1a:d1:bc:43:17:19:04:85:29:86:6f:89:f2:
f0:7f:f5:0a:57:35:48:dc:97:03:62:af:32:35:c9:
88:e0:5e:dd:3f:96:28:d6:d1:2a:6d:ca:78:af:e3:
85:e8:03:cf:8f:7c:d5:b0:48:4c:64:8a:5a:79:4f:
cc:56:0c:3d:b8:ae:54:52:01:2e:25:85:77:8b:f9:
2d:f5:81:f7:a3:04:ec:b9:7a:f0:38:c5:44:97:5b:
a0:9c:a5:37:e3:7e:4f:17:3b:10:0d:f6:b3:1c:03:
0c:4a:23:41:fe:3f:80:18:34:0e:2f:96:17:77:17:
fc:cb:33:2e:a9:06:82:45:02:68:03:43:0f:04:19:
59:9a:b6:2b:a6:13:0b:cc:a3:a2:bb:fa:8c:e0:12:
95:e1:3a:e9:e6:f5:e0:f0:f1:ca:9c:84:cd:88:2d:
20:a5:02:97:5b:5c:9f:dd:4d:bb:f3:b0:80:c9:24:
ec:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:27:0A:7E:D1:5F:AC:52:5D:B5:62:ED:A7:7A:42:9B:19:4B:6F:6E
X509v3 Authority Key Identifier:
keyid:E1:9D:B0:C5:B2:D9:61:0E:F5:86:E9:7F:BA:1F:CA:87:50:06:F3:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Z2wxbLZYQ71hul_uh_Kh1AG89o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:60:83:a6:73:8e:ee:70:36:80:3a:a6:65:e6:94:04:c2:b2:
86:ee:ba:65:40:bd:f3:35:9b:5b:71:a1:33:46:1f:0f:96:fa:
45:8f:70:a9:b7:25:25:b0:c2:fd:c8:b0:c0:94:48:28:f2:04:
d6:7e:e8:bd:f2:d6:ab:8f:5e:d5:8c:9d:cb:d2:98:9b:74:f2:
96:38:b2:9e:9a:a6:0e:bd:fd:09:84:19:b4:32:4b:0b:5d:0d:
8b:66:b7:77:19:ae:a4:02:6e:fc:9b:57:2d:9e:6b:11:ad:04:
43:cc:15:4d:83:c1:f3:d4:57:7f:a5:14:43:2c:06:d7:f5:2b:
68:0e:9f:da:bd:85:7c:b5:07:06:86:49:6d:29:f7:65:9c:ee:
55:ce:b2:9f:23:65:0a:1b:00:62:3f:32:ac:28:27:70:3d:5e:
a4:9c:8c:b9:c1:53:51:21:6c:be:12:9e:58:f0:9a:76:86:09:
b5:e8:e3:e0:32:0b:ca:07:a8:38:5d:a3:53:f2:ab:79:8d:3d:
c7:3f:71:b7:68:25:ab:53:09:65:21:ae:2c:5f:c4:bd:8c:0a:
a6:bb:ae:c3:37:d7:09:74:13:51:47:37:06:32:51:4d:33:19:
e0:bb:cc:4d:3c:c3:ae:fd:be:ed:6d:c7:8a:cc:81:f1:da:64:
8e:db:53:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:13:22 2026 by rpki-client