Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.mft
File: zVpTWTWkvHhsHddbfxCH8T8-CHQ.mft (raw, json)
Hash identifier: XLkhwVGbJndkjxgcRbfnz12N8hVIGj3GZ5UQMuZiJPg=
Subject key identifier: F7:43:4E:11:DF:6D:45:DA:80:01:AE:62:67:F9:D5:72:85:FD:90:24
Authority key identifier: CD:5A:53:59:35:A4:BC:78:6C:1D:D7:5B:7F:10:87:F1:3F:3E:08:74
Certificate issuer: /CN=cd5a535935a4bc786c1dd75b7f1087f13f3e0874
Certificate serial: 019FAB632C149B42E22B06C38700BBAACA89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zVpTWTWkvHhsHddbfxCH8T8-CHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.mft
Manifest number: 148A
Signing time: Wed 29 Jul 2026 01:00:31 +0000
Manifest this update: Wed 29 Jul 2026 01:00:31 +0000
Manifest next update: Thu 30 Jul 2026 01:00:31 +0000
Files and hashes: 1: HY8y2aUxH2zl7Z8uEFKyCs4_DZE.roa (hash: pgB+L4R4Q18tDhMP8CyO3Aai8GigL3mxjQcI8MoXdXI=)
2: cKZJLTzeqYRhpsddyswZAoLcpsE.roa (hash: HgvgjBFasTjpcgFlyoecgapQ0MDuq029z3qYeWnH2Zk=)
3: zVpTWTWkvHhsHddbfxCH8T8-CHQ.crl (hash: mxulTx9xvrX/hzjiutNJUnb+qZ6eG9yfKBRlJfXVpdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/zVpTWTWkvHhsHddbfxCH8T8-CHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 01:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:63:2c:14:9b:42:e2:2b:06:c3:87:00:bb:aa:ca:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5a535935a4bc786c1dd75b7f1087f13f3e0874
Validity
Not Before: Jul 29 01:00:31 2026 GMT
Not After : Jul 30 01:00:31 2026 GMT
Subject: CN=f7434e11df6d45da8001ae6267f9d57285fd9024
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6a:03:6c:5c:2d:cf:d7:4c:ba:3f:02:d0:db:
1f:e6:fc:98:18:cd:ea:e2:08:ad:0a:97:97:ca:54:
4b:6d:7c:29:0f:9d:db:73:07:61:ca:fc:74:f3:30:
3b:3b:8f:1d:91:6c:c1:42:03:19:19:05:83:81:f3:
25:69:13:1a:74:fc:3e:c9:61:03:e3:28:d2:da:ba:
18:99:3b:71:27:11:60:0a:b4:19:aa:f3:b9:2d:a6:
be:18:bc:d9:3d:ab:d8:e5:4b:f5:5e:b4:42:4b:ea:
3a:c4:70:15:a5:d7:61:1b:ff:b8:f7:00:f4:7c:32:
d2:ea:6b:ca:a4:f7:ef:63:38:ca:a0:f6:70:d3:ce:
67:b8:f1:c0:6f:df:0a:81:79:c1:22:ef:97:c0:a9:
67:b2:05:6e:ea:fc:b0:1f:53:14:72:b9:4c:ca:4f:
4a:1f:b4:d2:7d:5f:20:7f:ab:b6:9a:00:ac:21:aa:
d0:28:2b:e8:61:27:86:0a:cf:a3:51:d6:e5:31:03:
72:31:1c:c7:f6:38:5b:14:0a:b5:ca:e6:9c:29:7f:
6b:51:3e:79:1c:90:3e:c2:5a:56:53:a3:3f:90:06:
07:83:ea:a2:fa:44:61:d7:fd:e8:3a:fa:17:88:b7:
fd:ae:6d:02:c4:35:4c:3b:ff:a4:5c:d0:cb:e1:90:
d6:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:43:4E:11:DF:6D:45:DA:80:01:AE:62:67:F9:D5:72:85:FD:90:24
X509v3 Authority Key Identifier:
keyid:CD:5A:53:59:35:A4:BC:78:6C:1D:D7:5B:7F:10:87:F1:3F:3E:08:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zVpTWTWkvHhsHddbfxCH8T8-CHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:c7:90:f3:15:a0:29:b2:04:ab:b0:33:f3:da:34:1d:19:22:
f1:ff:0a:6f:12:11:2c:5f:2f:76:99:93:00:64:7a:06:23:31:
d7:b7:42:c0:f1:b1:1a:f0:2f:5a:19:a7:b4:b1:bb:67:69:84:
cb:37:c5:db:b6:fb:a6:09:99:4b:36:94:26:43:4f:65:02:39:
7f:c6:3c:e8:58:41:22:40:53:55:c7:59:f7:aa:cc:06:28:71:
41:8c:77:26:18:53:a4:58:53:8b:88:03:d9:4d:6f:bf:54:c6:
e5:05:7d:90:a0:3f:d4:a8:ce:35:57:ad:e5:f8:25:76:20:59:
80:67:a2:0f:c4:52:43:50:7b:1e:b5:e8:d7:4d:86:08:7f:88:
a3:eb:2e:b4:c8:4e:3a:04:e4:cf:0a:23:f9:91:a7:8c:73:4b:
2e:e9:52:89:a8:4a:c3:40:dc:45:0b:bc:0b:7d:ed:2a:76:f4:
4a:f5:38:2c:e8:49:a9:54:c6:9e:4d:17:f1:eb:f9:82:67:66:
33:c8:90:b8:e1:4d:d1:a2:40:ce:d5:95:3b:40:ed:20:8b:e6:
b5:c5:36:9a:1c:71:76:6d:1d:cb:fe:f5:63:2e:57:f4:91:a5:
a5:c0:d2:a2:6f:0e:98:6c:69:87:b7:cd:32:c7:6b:26:a2:1c:
00:b9:d4:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:13:04 2026 by rpki-client