Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/51885b-5693-4892-a1d4-1a19792a1d26/1/zS0OOdePxiAiVaW0rbVFg9ne3c4.mft
File: zS0OOdePxiAiVaW0rbVFg9ne3c4.mft (raw, json)
Hash identifier: btqmbqapQA5aj1tGXSZs84YlHhd0XHDwxNoBNnAdyh8=
Subject key identifier: 83:C2:68:96:58:AA:06:25:E2:E9:25:B4:B3:70:D7:49:96:CB:22:9D
Authority key identifier: CD:2D:0E:39:D7:8F:C6:20:22:55:A5:B4:AD:B5:45:83:D9:DE:DD:CE
Certificate issuer: /CN=cd2d0e39d78fc6202255a5b4adb54583d9deddce
Certificate serial: 019F19437B2B8E844383FD7BC22DD607D870
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zS0OOdePxiAiVaW0rbVFg9ne3c4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/51885b-5693-4892-a1d4-1a19792a1d26/1/zS0OOdePxiAiVaW0rbVFg9ne3c4.mft
Manifest number: 0CAC
Signing time: Tue 30 Jun 2026 16:01:20 +0000
Manifest this update: Tue 30 Jun 2026 16:01:20 +0000
Manifest next update: Wed 01 Jul 2026 16:01:20 +0000
Files and hashes: 1: BzcIlfSqWBkxCx6sQahLAYgQl9U.roa (hash: iEU6LtcxUGPF+befnk/JbzTRId/51aZ7BTsMTWVBJf8=)
2: zS0OOdePxiAiVaW0rbVFg9ne3c4.crl (hash: 1LLFTPwX9b86dvb81urJmT48tYu7WzO4XA8ndbYOeWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/51885b-5693-4892-a1d4-1a19792a1d26/1/zS0OOdePxiAiVaW0rbVFg9ne3c4.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/51885b-5693-4892-a1d4-1a19792a1d26/1/zS0OOdePxiAiVaW0rbVFg9ne3c4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zS0OOdePxiAiVaW0rbVFg9ne3c4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:43:7b:2b:8e:84:43:83:fd:7b:c2:2d:d6:07:d8:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd2d0e39d78fc6202255a5b4adb54583d9deddce
Validity
Not Before: Jun 30 16:01:20 2026 GMT
Not After : Jul 1 16:01:20 2026 GMT
Subject: CN=83c2689658aa0625e2e925b4b370d74996cb229d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:dc:8e:70:9c:18:95:3c:6b:11:6c:6d:52:ae:
4f:d6:95:7f:c7:b8:e9:fb:54:c6:20:16:14:3c:12:
d5:b8:c6:fe:8e:21:d7:92:32:dd:8a:2a:39:73:51:
e7:7a:3a:20:21:0f:b6:ac:23:62:1f:66:a3:51:00:
72:5a:d3:42:f1:d3:d9:d1:22:ae:c8:39:2c:3f:a5:
4e:6d:6a:52:fb:69:75:f8:c4:bd:ad:c4:3c:7d:34:
78:3e:09:86:e8:22:c3:3e:74:cb:2e:3d:61:18:1f:
3b:60:f0:62:cf:2f:f4:ee:13:ba:91:6e:91:70:e9:
2b:59:6c:9b:e7:bb:4d:8c:a5:ef:3c:03:4f:3b:15:
f9:6c:06:1f:3f:f7:61:fb:83:b9:be:d2:84:28:05:
af:7f:ee:f3:3a:2f:cb:e5:9a:4e:f4:da:3d:d2:42:
34:0c:2d:8f:52:80:b1:05:ed:2e:dd:65:c6:05:b0:
5c:b4:cc:3b:8f:c8:fc:d5:e2:df:e3:87:fd:41:bc:
c1:f7:b0:20:51:cc:cc:13:1d:b5:35:58:03:ed:64:
9d:fc:b4:9e:ed:36:0a:aa:d7:ac:be:d9:95:37:55:
8c:85:20:b2:c9:68:1e:02:5f:22:e5:55:25:dc:67:
32:f9:f6:f9:c0:9d:f7:b4:d9:43:f8:02:bd:d0:bf:
8c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:C2:68:96:58:AA:06:25:E2:E9:25:B4:B3:70:D7:49:96:CB:22:9D
X509v3 Authority Key Identifier:
keyid:CD:2D:0E:39:D7:8F:C6:20:22:55:A5:B4:AD:B5:45:83:D9:DE:DD:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zS0OOdePxiAiVaW0rbVFg9ne3c4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/51885b-5693-4892-a1d4-1a19792a1d26/1/zS0OOdePxiAiVaW0rbVFg9ne3c4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/51885b-5693-4892-a1d4-1a19792a1d26/1/zS0OOdePxiAiVaW0rbVFg9ne3c4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:b0:61:a7:b8:db:59:4d:11:c9:23:ed:e7:40:d5:8b:ba:97:
9f:8a:b6:75:42:5b:2f:93:3f:ce:9a:3b:f1:83:20:ce:52:c8:
ad:1d:9b:32:b2:e0:02:66:9d:fc:fd:d7:7c:15:ec:17:57:71:
96:a0:10:e6:d8:67:09:30:2c:c8:92:b8:cf:76:f6:94:d5:a4:
18:ab:1d:b0:24:ef:f2:75:bd:a6:95:27:ff:de:4e:8c:64:ec:
6c:56:fd:84:4a:56:ff:96:80:81:24:77:44:fb:c8:79:49:12:
73:b0:34:9e:85:ce:02:42:a4:d2:25:ac:74:b1:19:6c:02:a3:
51:5b:81:d2:ba:8e:36:21:68:c2:9b:cc:98:08:37:36:70:4b:
eb:26:ea:44:c0:48:a7:9a:5c:ec:fe:7d:d6:4f:64:c6:a0:69:
c8:64:53:23:2d:b4:e3:5e:4d:c0:6c:e8:b0:14:0d:98:ee:aa:
ba:46:36:31:f7:56:03:12:9d:45:54:55:47:52:d5:5d:13:6a:
99:5c:b6:fd:c2:4a:08:32:8e:c9:4f:11:a0:27:f8:e8:bd:42:
eb:56:90:9f:77:25:b0:d5:05:2c:62:d8:59:3d:3c:d5:3c:df:
5d:d5:88:48:a5:27:96:a9:4f:01:bb:eb:10:e9:08:39:c1:33:
02:e9:c6:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:43:13 2026 by rpki-client