Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.mft
File: rZr63kGDroAEjWuEgY7sRvaA-iY.mft (raw, json)
Hash identifier: /eswxONsg8BdWYgMeZYen3D0y6+SfxOTULoiEPi2ReI=
Subject key identifier: 6B:90:39:AB:C1:A9:49:33:34:15:A9:FB:11:CA:62:97:6F:CE:D6:46
Authority key identifier: AD:9A:FA:DE:41:83:AE:80:04:8D:6B:84:81:8E:EC:46:F6:80:FA:26
Certificate issuer: /CN=ad9afade4183ae80048d6b84818eec46f680fa26
Certificate serial: 019F0EF6F6BBECEB289A085D133135A173CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rZr63kGDroAEjWuEgY7sRvaA-iY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.mft
Manifest number: 17B6
Signing time: Sun 28 Jun 2026 16:01:33 +0000
Manifest this update: Sun 28 Jun 2026 16:01:33 +0000
Manifest next update: Mon 29 Jun 2026 16:01:33 +0000
Files and hashes: 1: YhV2RPOqPZXVdAMRyoGhsYcqg5o.roa (hash: +2OSyQukbn8Ac2KWdiYjJtwI1C2RFg/LbfJyv2kiAaQ=)
2: rZr63kGDroAEjWuEgY7sRvaA-iY.crl (hash: 9E/lHUUWTaWfqudWQngT7pWYOJjHSjcUMkkx5hEhmog=)
3: zymQ8lQH58g9kZdGDaCuBYAYQI4.roa (hash: UsBi140YQptoK8CMotM0bOiYKyUZpHcPLjWyz1MACI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rZr63kGDroAEjWuEgY7sRvaA-iY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Jun 2026 16:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:0e:f6:f6:bb:ec:eb:28:9a:08:5d:13:31:35:a1:73:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad9afade4183ae80048d6b84818eec46f680fa26
Validity
Not Before: Jun 28 16:01:33 2026 GMT
Not After : Jun 29 16:01:33 2026 GMT
Subject: CN=6b9039abc1a949333415a9fb11ca62976fced646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:44:8d:03:c8:97:32:61:fc:53:7b:ea:ae:a3:
44:54:00:ea:8c:82:68:83:c0:a7:58:08:7b:1c:fb:
4c:93:ec:1d:16:ad:ea:39:2b:9d:e3:5b:6b:74:3a:
93:78:17:7d:d4:5b:79:ff:13:e6:5e:3d:de:99:bb:
7e:cd:c3:82:28:bf:e1:44:12:b9:8d:88:a1:65:59:
9a:d3:da:c1:5a:b8:78:c8:58:5a:2b:e1:d1:ec:ff:
ab:7b:30:0f:47:fc:82:74:b1:a0:66:fe:da:9c:0e:
90:18:c1:c5:47:15:9d:97:cf:00:a9:fd:63:a3:dc:
bc:bb:96:6b:9f:09:93:0b:30:fe:83:15:c4:c2:20:
79:9d:bc:c4:ad:d4:c9:4f:cf:07:55:ca:5b:74:fb:
51:91:7b:e2:d0:5c:99:42:13:f7:7a:19:df:3e:d5:
15:99:34:d4:52:2c:24:de:c5:5f:b9:b7:30:37:e4:
b8:75:4a:93:9b:56:b4:d5:00:31:00:cf:cb:9e:fe:
a3:22:49:00:31:dc:ef:38:24:5a:bf:ca:57:fe:42:
76:62:78:26:04:49:ec:47:c1:ca:e7:88:25:50:68:
ae:c6:9f:0f:2d:9a:69:2c:c8:5c:9f:1f:22:66:ca:
49:a4:48:67:1a:f1:f6:9c:56:c2:e9:cf:d9:4e:aa:
19:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:90:39:AB:C1:A9:49:33:34:15:A9:FB:11:CA:62:97:6F:CE:D6:46
X509v3 Authority Key Identifier:
keyid:AD:9A:FA:DE:41:83:AE:80:04:8D:6B:84:81:8E:EC:46:F6:80:FA:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rZr63kGDroAEjWuEgY7sRvaA-iY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:f2:b9:5a:c8:c3:97:c3:6a:cf:4e:e2:c2:96:8d:ca:89:30:
da:17:26:3a:24:ce:87:a9:4a:d3:44:bd:f5:0a:d7:3a:d6:3f:
2c:e3:ab:b5:66:4b:84:04:12:90:84:fd:3d:ce:14:c0:46:8d:
98:8c:9c:ce:e8:03:1f:b2:ea:04:65:88:bf:a4:e9:59:f7:3c:
45:30:54:76:33:70:22:f9:f9:a5:06:ae:33:db:4d:7e:5e:c4:
62:08:59:92:8d:32:ee:7c:ec:b9:95:b4:ed:e0:bb:82:13:1e:
e6:dc:87:62:40:ee:18:e5:c6:de:ba:7b:b6:e9:0e:96:e7:87:
a4:98:9b:cb:3a:13:62:aa:33:78:a0:19:ae:7b:00:6f:9b:73:
55:92:6d:ee:20:7d:78:35:19:b4:4e:b2:e1:7c:60:9e:71:2b:
ca:a2:c6:e7:00:4d:42:30:4e:af:02:b0:7f:b4:5d:16:55:1a:
2d:45:12:6a:93:fe:b8:0d:fd:b5:54:d7:7d:7e:5d:01:6f:d0:
00:c2:d2:03:02:63:4c:a6:4b:60:8f:ee:41:05:91:f8:b6:2f:
29:36:c3:7b:db:18:cd:62:f0:af:17:75:4b:96:30:fa:b4:35:
0c:0c:d6:c0:e4:f5:02:53:66:02:07:e6:65:22:e0:a6:3a:5d:
d2:ff:46:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 01:15:35 2026 by rpki-client