
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.mft
File: zpWPGB-1B6CiqCGFa4vg1UsRi4U.mft (raw, json)
Hash identifier: UMvMPhg21/ZtHTpfy6vvqJKVM/qUbQxRxwe4fFqDPFg=
Subject key identifier: 04:9B:F6:D7:12:E1:AB:A0:9C:DE:F1:D3:F5:45:8E:55:19:EA:83:A8
Authority key identifier: CE:95:8F:18:1F:B5:07:A0:A2:A8:21:85:6B:8B:E0:D5:4B:11:8B:85
Certificate issuer: /CN=ce958f181fb507a0a2a821856b8be0d54b118b85
Certificate serial: 019FAAF5D109E3B85A59778BA61CB6F8DCA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zpWPGB-1B6CiqCGFa4vg1UsRi4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.mft
Manifest number: 1526
Signing time: Tue 28 Jul 2026 23:01:04 +0000
Manifest this update: Tue 28 Jul 2026 23:01:04 +0000
Manifest next update: Wed 29 Jul 2026 23:01:04 +0000
Files and hashes: 1: 1-XBWrk39wjm3jro7FSlqvzI5eVI.roa (hash: Z3LaUQM+InNYUKwF+whvXLIvQsPhPPfm9Yl6XnItz/E=)
2: 143uR_Opu7Zeu7uxf8rhyVqs6pA.roa (hash: gnOcz10DzYsdv7a3eo6ReHVx6t0LmKA4aY2SFi+8K5g=)
3: 5GRL2xTwlhtB45CKu5VYBHVeCs8.roa (hash: xHs3aoTc2u94fp2p4GMEh09FXKLHJU4FJ23Xwrl2mb8=)
4: LImeWPjRU0bTYqqH-HKe4xkFuc0.roa (hash: zqLkD7GL5OBQzT/9VJg9wwwTHEy5OhmPX5ktJW+mT7A=)
5: zpWPGB-1B6CiqCGFa4vg1UsRi4U.crl (hash: 7I7FQ4jwqNwl2v9tRVR34KTCx549HRmDL64kbUHlZ7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/zpWPGB-1B6CiqCGFa4vg1UsRi4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:d1:09:e3:b8:5a:59:77:8b:a6:1c:b6:f8:dc:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce958f181fb507a0a2a821856b8be0d54b118b85
Validity
Not Before: Jul 28 23:01:04 2026 GMT
Not After : Jul 29 23:01:04 2026 GMT
Subject: CN=049bf6d712e1aba09cdef1d3f5458e5519ea83a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:aa:eb:f9:20:2d:b2:0f:b2:de:e5:53:3f:eb:
21:42:7c:13:a2:91:94:15:95:b8:f0:b7:79:aa:fd:
22:e0:f8:33:ac:37:44:f0:35:d5:53:42:fc:0d:b3:
52:3d:15:a4:7c:b5:24:1a:63:05:50:dd:97:29:85:
57:d4:af:28:3c:90:67:9f:ca:33:fd:05:d0:ea:2e:
fb:4d:21:5f:df:45:31:4b:7b:4b:91:db:f8:71:e4:
7a:bf:c4:a2:f4:d1:e8:4b:d0:4b:a4:ba:2f:9b:cd:
93:5c:8c:9a:f1:1a:5e:59:8e:db:57:d2:20:84:1a:
c9:56:5f:48:0e:bf:0c:b4:31:4c:e7:57:34:32:8d:
c2:4a:a2:af:e2:bb:88:ae:10:03:22:db:ea:ef:e6:
4e:f1:fa:aa:d8:04:2a:34:86:e8:b9:d2:47:5a:5f:
8c:07:a6:81:f8:2f:17:03:fb:7d:64:a0:2d:74:ff:
86:3f:fb:77:96:f0:98:b0:e1:59:c7:ed:0e:0c:4b:
c1:4c:4c:b6:ec:a6:31:26:28:ca:e5:58:10:01:42:
4f:ee:0e:52:eb:a6:2b:3d:8d:f2:f2:12:a5:04:e3:
4e:ad:74:16:5c:33:7a:d1:0f:23:b1:8a:27:85:5c:
1f:51:30:47:27:79:c1:bd:6a:7d:b8:2a:8b:c2:e5:
1d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:9B:F6:D7:12:E1:AB:A0:9C:DE:F1:D3:F5:45:8E:55:19:EA:83:A8
X509v3 Authority Key Identifier:
keyid:CE:95:8F:18:1F:B5:07:A0:A2:A8:21:85:6B:8B:E0:D5:4B:11:8B:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zpWPGB-1B6CiqCGFa4vg1UsRi4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:dc:cc:32:cc:a8:3b:a0:5c:ea:ba:86:d1:6c:63:17:ca:48:
27:25:5f:db:64:c5:38:9d:cb:00:95:f4:7f:4c:fa:4a:7d:83:
f5:af:6b:c7:f2:dc:d7:fa:53:9f:84:4a:b9:96:04:12:65:cf:
5a:a5:f1:11:1c:ee:6d:f1:11:8c:61:0d:c9:74:3b:6e:89:2b:
93:1b:4c:b1:33:43:35:cf:e2:a9:ab:24:a4:af:20:cc:c3:53:
52:dc:00:ce:25:59:bd:75:fa:cc:07:ab:e2:a0:76:8e:86:ea:
1c:27:7a:11:fc:6e:77:97:b2:42:00:c6:2e:30:3e:1a:a7:41:
9e:7a:42:5b:b1:54:cc:2a:14:8d:fd:9d:67:8d:c5:94:eb:43:
83:f2:24:99:85:2c:0e:c2:2e:ef:c7:f9:e9:fc:1f:e0:52:01:
73:50:09:d1:9a:82:74:16:30:ea:fa:5f:40:92:5f:51:0b:29:
e1:d1:2f:b2:28:e0:b0:15:c6:da:7c:11:39:ff:9e:c5:e2:1c:
bf:fc:52:5b:c6:cd:d4:29:97:32:ba:df:b5:f3:11:34:80:81:
fa:ad:9f:4a:59:71:75:ff:26:9f:a8:04:7c:b2:da:0d:6a:37:
04:d7:c3:82:99:cf:37:37:5a:74:1f:af:d5:a7:ee:a0:7b:4c:
0a:47:6c:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:06:28 2026 by rpki-client