Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.mft
File: zNNXkIMM50aalMWbLizLv1420T8.mft (raw, json)
Hash identifier: GOUS6+QkxJJ0KwlnZQTjom1kAud52p6zXj7WEElFVdE=
Subject key identifier: B6:A6:99:E8:7B:67:66:13:BF:06:52:C1:88:B0:8E:83:8A:19:49:9A
Authority key identifier: CC:D3:57:90:83:0C:E7:46:9A:94:C5:9B:2E:2C:CB:BF:5E:36:D1:3F
Certificate issuer: /CN=ccd35790830ce7469a94c59b2e2ccbbf5e36d13f
Certificate serial: 019EFB01F3D0BA40CA85A7B628B6F0E35C6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNNXkIMM50aalMWbLizLv1420T8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.mft
Manifest number: 13F0
Signing time: Wed 24 Jun 2026 19:01:09 +0000
Manifest this update: Wed 24 Jun 2026 19:01:09 +0000
Manifest next update: Thu 25 Jun 2026 19:01:09 +0000
Files and hashes: 1: TUvmrgBE44ev_WdD8HZ7-Tqrsvk.roa (hash: eGtgmPAMsFLuXajQP6UacgNI2KT3PlnsWKJ/DF91EtU=)
2: v87hPEGnMIsf-U-27Xa5aB7InJ0.roa (hash: vpt3+IR1X8NAWDYMxgQL6E8vBwuUgUGdnpH6ThIVLCI=)
3: zNNXkIMM50aalMWbLizLv1420T8.crl (hash: ZVNyovEmvuqOfjXty9V7oNr/oQXvwiWq744tfvbFg5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zNNXkIMM50aalMWbLizLv1420T8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 14:31:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fb:01:f3:d0:ba:40:ca:85:a7:b6:28:b6:f0:e3:5c:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd35790830ce7469a94c59b2e2ccbbf5e36d13f
Validity
Not Before: Jun 24 19:01:09 2026 GMT
Not After : Jun 25 19:01:09 2026 GMT
Subject: CN=b6a699e87b676613bf0652c188b08e838a19499a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:89:87:c9:36:72:09:a0:7d:e5:32:78:27:bc:
e5:87:98:93:78:ed:60:91:60:6c:13:55:b5:8d:bc:
cc:aa:53:29:a6:53:16:fb:62:1c:ee:38:53:d0:59:
b2:92:aa:1a:a2:e2:83:25:e4:5d:13:fe:77:e0:96:
26:32:9f:23:19:6c:cd:d3:a7:25:00:5f:51:eb:e8:
97:04:75:17:79:e4:51:1b:19:4c:cf:ff:bf:ee:0a:
40:08:db:23:cd:f2:73:d9:36:49:4f:ea:29:eb:97:
39:b8:70:76:82:32:fc:d1:94:a4:f0:47:90:13:87:
d9:0e:a6:ac:18:84:5f:b4:a3:90:89:d9:61:18:10:
f7:ba:b9:31:14:39:d8:65:19:03:87:a3:e8:18:45:
87:e8:23:5e:29:01:f5:3e:81:e5:f1:cd:3d:d6:e3:
ee:17:ba:4f:6a:b3:a9:dd:e9:47:22:e7:59:48:11:
fd:5a:a7:69:f3:64:b1:9e:07:18:1d:3a:2f:9e:93:
65:2a:3c:df:94:ea:86:34:73:9b:9d:55:c2:83:fb:
65:98:0b:32:97:bf:b9:4e:d8:8a:bf:8e:f1:37:26:
91:eb:7c:91:35:98:0b:87:df:ff:79:34:e0:7c:64:
6b:97:ba:99:49:70:28:f6:9d:9c:4c:91:f8:ff:09:
c0:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:A6:99:E8:7B:67:66:13:BF:06:52:C1:88:B0:8E:83:8A:19:49:9A
X509v3 Authority Key Identifier:
keyid:CC:D3:57:90:83:0C:E7:46:9A:94:C5:9B:2E:2C:CB:BF:5E:36:D1:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNNXkIMM50aalMWbLizLv1420T8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:13:cb:5c:00:ed:23:58:7a:02:a4:fa:63:fc:72:2e:a4:13:
2a:cc:7d:9c:c3:c9:7b:96:8b:3a:cc:dc:c9:91:3a:df:fb:62:
88:ef:53:53:6e:d9:fd:22:4f:e2:66:6f:67:97:39:4f:b3:23:
a9:c7:d4:62:e5:cb:f6:46:00:32:05:2d:12:ad:3a:b9:b6:7d:
f5:1f:47:c5:53:fc:b8:b4:9d:6c:ef:9c:34:a5:31:19:53:c9:
a5:ef:dc:1d:ff:07:62:f5:ba:f7:12:29:c6:50:3a:81:25:90:
fb:aa:0d:cd:0f:64:0e:91:d0:e9:1f:94:c6:0c:60:cf:0c:10:
30:2d:2a:6c:95:97:47:28:1d:1f:f5:10:6a:93:73:2d:9e:b5:
fe:f9:f2:f6:d6:5c:dd:0f:24:b9:f7:27:a6:b9:65:33:5b:a3:
13:9b:06:af:06:7e:47:6e:87:02:b7:f7:62:2b:20:e6:7a:83:
84:b9:dc:44:54:60:39:f2:01:f3:62:36:24:02:c8:e1:77:77:
2c:6d:58:6b:22:8c:09:b4:73:8a:43:0a:ff:0e:22:3e:ee:7a:
fd:a3:00:8d:c3:41:be:a1:60:66:99:e8:b0:d9:88:1a:e1:08:
59:13:02:e4:1b:79:e5:da:12:8d:d8:4e:cd:04:05:6b:9d:d4:
a3:b9:71:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 21:17:24 2026 by rpki-client