Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.mft
File: ZJn3HhXA84zrolfTAwTtRL6ofFA.mft (raw, json)
Hash identifier: 6XbnWedvKLXbOWxYdRhZ8X4wbGJZIJ6YCXnKFk1+iHg=
Subject key identifier: 8D:F4:C0:0B:6A:C5:76:5A:10:75:95:17:ED:52:86:60:BA:4C:72:32
Authority key identifier: 64:99:F7:1E:15:C0:F3:8C:EB:A2:57:D3:03:04:ED:44:BE:A8:7C:50
Certificate issuer: /CN=6499f71e15c0f38ceba257d30304ed44bea87c50
Certificate serial: 019EB7D80E02E9484E8ABD993488330BEEEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZJn3HhXA84zrolfTAwTtRL6ofFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.mft
Manifest number: 1954
Signing time: Thu 11 Jun 2026 18:00:50 +0000
Manifest this update: Thu 11 Jun 2026 18:00:50 +0000
Manifest next update: Fri 12 Jun 2026 18:00:50 +0000
Files and hashes: 1: ZJn3HhXA84zrolfTAwTtRL6ofFA.crl (hash: H5ePwRCPUraS1QxMLBQtESlBh5RAWtl2b9h4VvUX0XU=)
2: jq3mq-50R-JOu-sxSGPaEm55e08.roa (hash: taGtXrf0l3O9eeA97Wyzm9CoWyPxNXpqgCP99+lV8Hk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZJn3HhXA84zrolfTAwTtRL6ofFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:d8:0e:02:e9:48:4e:8a:bd:99:34:88:33:0b:ee:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6499f71e15c0f38ceba257d30304ed44bea87c50
Validity
Not Before: Jun 11 18:00:50 2026 GMT
Not After : Jun 12 18:00:50 2026 GMT
Subject: CN=8df4c00b6ac5765a10759517ed528660ba4c7232
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:96:05:e7:fe:5a:3d:4f:c3:31:2a:74:db:c0:
bb:8a:d3:11:b1:f8:f4:e1:e6:3f:4a:9f:91:78:0c:
94:9c:f0:bf:c1:fd:7e:64:70:bd:98:aa:69:3d:71:
cb:e3:3c:31:99:e2:90:36:72:e7:69:89:b9:f7:f2:
06:47:4e:fb:8d:9f:da:16:94:66:23:37:05:e1:cb:
8c:dd:a9:0f:3e:28:7e:ac:ea:a5:65:ae:31:1a:d1:
f9:29:5b:dc:b5:d5:50:5d:5a:66:a5:9f:39:08:1b:
44:47:2a:51:fc:89:d3:bc:73:bd:b6:bb:43:f9:2d:
7a:28:0a:3f:11:db:3a:38:ff:87:50:c8:7a:6d:7f:
28:d1:91:23:ec:f7:bf:db:a5:21:58:bd:9c:05:5e:
ee:e8:e0:d2:af:44:36:6c:e9:bf:01:78:c0:b4:57:
b6:0f:9d:d7:41:01:b9:fe:8c:c3:de:82:e8:c9:7a:
2f:8c:b9:29:b2:27:6c:11:fd:95:70:9a:1a:da:60:
d4:1b:ba:ec:e4:0d:dd:2b:dc:76:f8:db:cb:10:99:
51:58:70:7f:d4:6f:6a:e6:d6:e9:f3:0c:95:1c:6c:
81:9d:08:bd:be:16:58:2d:2b:49:25:1b:d3:2d:20:
64:83:29:47:06:59:83:e1:48:68:79:78:bf:b4:d6:
82:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:F4:C0:0B:6A:C5:76:5A:10:75:95:17:ED:52:86:60:BA:4C:72:32
X509v3 Authority Key Identifier:
keyid:64:99:F7:1E:15:C0:F3:8C:EB:A2:57:D3:03:04:ED:44:BE:A8:7C:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZJn3HhXA84zrolfTAwTtRL6ofFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:08:73:b4:8b:68:71:c2:7c:c4:09:da:9c:e2:3b:28:06:96:
e9:45:3c:ee:3b:26:7e:00:21:b2:b0:9b:8c:75:77:fb:df:27:
f3:53:f0:04:17:75:c0:73:57:96:ea:e6:72:37:e2:93:f7:51:
b9:63:7b:2e:fa:ae:1d:12:63:60:c4:be:47:f7:be:94:41:b0:
7f:05:e4:18:1a:3f:af:ef:ac:0d:3d:96:3f:74:4a:e4:2d:0b:
56:8d:1b:87:7c:96:e6:81:0f:33:1b:24:16:fd:d4:5d:ce:e1:
0e:3c:83:0c:6a:d1:aa:39:ad:85:0f:67:fe:a1:ef:cc:52:aa:
3b:04:36:e6:b5:a1:c7:c2:4d:10:a0:65:d7:bd:3e:09:ea:56:
ed:f7:90:99:c2:4a:38:ac:b9:4f:64:65:4e:f5:54:58:71:a9:
db:c8:2f:7b:25:76:01:c4:3e:82:2e:81:77:23:6b:c1:12:c7:
da:3c:4a:8e:8d:45:8e:96:18:9d:e1:0c:9f:ac:7c:f7:6c:0d:
53:a7:22:7a:c0:8a:b9:53:fa:bb:b7:27:0d:a5:ec:ce:49:fc:
fd:74:77:4e:80:f7:ac:c5:6d:c8:5c:96:00:b1:68:73:67:f2:
7a:c0:1a:9b:7c:39:5c:30:fc:97:1e:99:0b:8b:4d:43:90:aa:
9a:fe:15:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ632A4C6UhOir2ZNIgzC+7vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0OTlmNzFlMTVjMGYzOGNlYmEyNTdkMzAzMDRlZDQ0YmVh
ODdjNTAwHhcNMjYwNjExMTgwMDUwWhcNMjYwNjEyMTgwMDUwWjAzMTEwLwYDVQQD
Eyg4ZGY0YzAwYjZhYzU3NjVhMTA3NTk1MTdlZDUyODY2MGJhNGM3MjMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJYF5/5aPU/DMSp028C7itMRsfj0
4eY/Sp+ReAyUnPC/wf1+ZHC9mKppPXHL4zwxmeKQNnLnaYm59/IGR077jZ/aFpRm
IzcF4cuM3akPPih+rOqlZa4xGtH5KVvctdVQXVpmpZ85CBtERypR/InTvHO9trtD
+S16KAo/Eds6OP+HUMh6bX8o0ZEj7Pe/26UhWL2cBV7u6ODSr0Q2bOm/AXjAtFe2
D53XQQG5/ozD3oLoyXovjLkpsidsEf2VcJoa2mDUG7rs5A3dK9x2+NvLEJlRWHB/
1G9q5tbp8wyVHGyBnQi9vhZYLStJJRvTLSBkgylHBlmD4UhoeXi/tNaCkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI30wAtqxXZaEHWVF+1ShmC6THIyMB8GA1UdIwQY
MBaAFGSZ9x4VwPOM66JX0wME7US+qHxQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkpuM0hoWEE4NHpyb2xmVEF3VHRSTDZvZkZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi80ZjUxZWYtYWRjNi00YTFjLTgyZDct
NTc4NWIxNTczYTY5LzEvWkpuM0hoWEE4NHpyb2xmVEF3VHRSTDZvZkZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi80ZjUxZWYtYWRjNi00YTFjLTgyZDctNTc4NWIxNTczYTY5
LzEvWkpuM0hoWEE4NHpyb2xmVEF3VHRSTDZvZkZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQAhztIto
ccJ8xAnanOI7KAaW6UU87jsmfgAhsrCbjHV3+98n81PwBBd1wHNXlurmcjfik/dR
uWN7LvquHRJjYMS+R/e+lEGwfwXkGBo/r++sDT2WP3RK5C0LVo0bh3yW5oEPMxsk
Fv3UXc7hDjyDDGrRqjmthQ9n/qHvzFKqOwQ25rWhx8JNEKBl170+CepW7feQmcJK
OKy5T2RlTvVUWHGp28gveyV2AcQ+gi6BdyNrwRLH2jxKjo1FjpYYneEMn6x892wN
U6ciesCKuVP6u7cnDaXszkn8/XR3ToD3rMVtyFyWALFoc2fyesAam3w5XDD8lx6Z
C4tNQ5Cqmv4Vfg==
-----END CERTIFICATE-----
Generated at Thu Jun 11 23:17:36 2026 by rpki-client