Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft
File: Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft (raw, json)
Hash identifier: Lr01NsUHWeV87aDeBsIn2dVccwHeXKBhRespuxlUe/g=
Subject key identifier: B4:12:5D:C6:96:16:6D:FD:3F:3D:1D:F9:EB:A2:B1:2A:62:6E:E8:3E
Authority key identifier: 67:C3:9D:38:F4:68:D9:C1:2D:8F:F5:0D:5B:9F:92:65:A1:E5:A8:D0
Certificate issuer: /CN=67c39d38f468d9c12d8ff50d5b9f9265a1e5a8d0
Certificate serial: 019F189E5376FD50453FEEA39AFAACE77978
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft
Manifest number: 085E
Signing time: Tue 30 Jun 2026 13:00:56 +0000
Manifest this update: Tue 30 Jun 2026 13:00:56 +0000
Manifest next update: Wed 01 Jul 2026 13:00:56 +0000
Files and hashes: 1: Z8OdOPRo2cEtj_UNW5-SZaHlqNA.crl (hash: /5sVOH9gFzgnvpFsmtixtQ9YRIUVs4Lu4EkoT9xIF/8=)
2: n0ts-ZAT1lOETjQar-r7dG5m8B4.roa (hash: H4GnEfKzurSyqgM4XWV1rjv75zWH0JewFqcCuzz38h8=)
3: nLzsFW6CONi5zC8LKebEmG6bkUs.roa (hash: Ei42PABtEQiBezF6APijJVL3Obf1B6slA5sKgQd9xQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 13:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:9e:53:76:fd:50:45:3f:ee:a3:9a:fa:ac:e7:79:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67c39d38f468d9c12d8ff50d5b9f9265a1e5a8d0
Validity
Not Before: Jun 30 13:00:56 2026 GMT
Not After : Jul 1 13:00:56 2026 GMT
Subject: CN=b4125dc696166dfd3f3d1df9eba2b12a626ee83e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b7:cb:e4:e1:e8:61:91:35:b1:e9:d8:71:00:
ec:fa:d0:61:de:1e:76:63:93:65:40:37:49:48:38:
88:26:d5:60:4c:b1:ce:31:c9:0b:87:1e:25:06:e3:
c8:e7:12:bd:f8:c2:57:63:30:62:bf:d0:31:cc:64:
8e:ef:d8:ae:b9:13:9a:45:2e:82:7f:f6:30:34:f1:
27:17:3d:b3:84:97:62:f2:8f:84:93:a3:07:dc:f9:
15:00:cf:d6:86:34:6f:cf:bd:07:ad:22:f4:ea:08:
29:11:70:96:9a:b7:07:85:be:b2:07:10:9e:e6:87:
19:3f:4b:70:73:66:53:c4:86:eb:84:2b:c5:88:b3:
8e:66:1a:7e:f9:b4:c4:c6:4c:c0:fc:2c:92:c6:cf:
f1:87:94:b6:5b:4a:5c:0a:01:cb:0d:8a:49:ca:54:
0a:5f:09:12:22:5a:e5:69:f5:dc:ce:31:53:eb:85:
0c:24:bf:02:95:4b:36:3b:3f:17:dd:ba:a8:1f:33:
7a:43:54:51:13:02:c1:17:9d:1d:a6:9f:8c:c8:6c:
0b:eb:13:0d:80:d0:40:c9:ab:d1:4c:10:6b:80:f1:
17:22:61:ea:55:40:a6:6d:3a:ac:b7:b6:9b:ba:a7:
85:68:68:33:22:af:48:63:80:2e:62:ed:75:45:01:
e2:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:12:5D:C6:96:16:6D:FD:3F:3D:1D:F9:EB:A2:B1:2A:62:6E:E8:3E
X509v3 Authority Key Identifier:
keyid:67:C3:9D:38:F4:68:D9:C1:2D:8F:F5:0D:5B:9F:92:65:A1:E5:A8:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:6d:6d:c3:6d:53:a5:76:94:d1:53:c4:f3:67:01:07:69:20:
c7:07:cb:6f:1f:fc:0f:d1:e8:30:17:c2:ee:b0:ad:d2:33:97:
4c:2f:4d:ad:bc:73:8c:fd:13:51:bb:c6:d1:21:cf:38:3c:ee:
b6:1d:b5:76:ee:1f:ac:29:7f:32:03:e9:51:ba:e9:70:ff:d6:
9d:02:99:e6:94:f8:69:39:14:35:f2:8e:1e:3b:8f:c4:23:2c:
48:ad:69:c2:e7:a3:7f:a4:3d:e6:17:b7:af:6a:a3:25:9c:49:
9e:9e:62:f7:06:5a:9f:9f:ab:57:f1:7d:ae:45:5e:f8:bb:09:
04:7d:55:d0:78:78:42:92:41:d7:d8:e4:b6:f8:7d:5f:9b:63:
e3:6b:61:d5:94:0a:6c:27:f1:cb:6d:62:c6:29:b1:45:bf:77:
f9:a8:7b:56:4d:d6:1b:6c:70:8a:c3:3e:59:12:f4:a7:2c:86:
11:1d:42:65:e5:4b:c3:3a:ce:79:fd:62:55:09:d9:a1:8f:0e:
7e:f2:35:15:30:13:e5:7a:ea:07:d0:8d:c3:61:e7:a3:5e:88:
bc:4c:51:a2:6f:df:4c:14:57:04:74:a0:bd:04:0e:3b:ba:aa:
25:7a:54:3e:31:7f:2e:ed:96:36:80:46:a4:82:1e:ff:0f:98:
a6:9e:9e:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8YnlN2/VBFP+6jmvqs53l4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3YzM5ZDM4ZjQ2OGQ5YzEyZDhmZjUwZDViOWY5MjY1YTFl
NWE4ZDAwHhcNMjYwNjMwMTMwMDU2WhcNMjYwNzAxMTMwMDU2WjAzMTEwLwYDVQQD
EyhiNDEyNWRjNjk2MTY2ZGZkM2YzZDFkZjllYmEyYjEyYTYyNmVlODNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrfL5OHoYZE1senYcQDs+tBh3h52
Y5NlQDdJSDiIJtVgTLHOMckLhx4lBuPI5xK9+MJXYzBiv9AxzGSO79iuuROaRS6C
f/YwNPEnFz2zhJdi8o+Ek6MH3PkVAM/WhjRvz70HrSL06ggpEXCWmrcHhb6yBxCe
5ocZP0twc2ZTxIbrhCvFiLOOZhp++bTExkzA/CySxs/xh5S2W0pcCgHLDYpJylQK
XwkSIlrlafXczjFT64UMJL8ClUs2Oz8X3bqoHzN6Q1RREwLBF50dpp+MyGwL6xMN
gNBAyavRTBBrgPEXImHqVUCmbTqst7abuqeFaGgzIq9IY4AuYu11RQHi3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLQSXcaWFm39Pz0d+euisSpibug+MB8GA1UdIwQY
MBaAFGfDnTj0aNnBLY/1DVufkmWh5ajQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjhPZE9QUm8yY0V0al9VTlc1LVNaYUhscU5BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS81ZjVhY2MtMzY0Ni00NDNkLTlmN2Ut
MjdlOWJlYjMyOTRiLzEvWjhPZE9QUm8yY0V0al9VTlc1LVNaYUhscU5BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS81ZjVhY2MtMzY0Ni00NDNkLTlmN2UtMjdlOWJlYjMyOTRi
LzEvWjhPZE9QUm8yY0V0al9VTlc1LVNaYUhscU5BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVm1tw21T
pXaU0VPE82cBB2kgxwfLbx/8D9HoMBfC7rCt0jOXTC9NrbxzjP0TUbvG0SHPODzu
th21du4frCl/MgPpUbrpcP/WnQKZ5pT4aTkUNfKOHjuPxCMsSK1pwuejf6Q95he3
r2qjJZxJnp5i9wZan5+rV/F9rkVe+LsJBH1V0Hh4QpJB19jktvh9X5tj42th1ZQK
bCfxy21iximxRb93+ah7Vk3WG2xwisM+WRL0pyyGER1CZeVLwzrOef1iVQnZoY8O
fvI1FTAT5XrqB9CNw2Hno16IvExRom/fTBRXBHSgvQQOO7qqJXpUPjF/Lu2WNoBG
pIIe/w+Ypp6e3g==
-----END CERTIFICATE-----
Generated at Tue Jun 30 23:35:00 2026 by rpki-client