Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.mft
File: ZjhRXzKUSWmuADG94C0fTL0NK5g.mft (raw, json)
Hash identifier: tG6rrMusk4OoJC7MB0FSW1zhFQwuaZund56g+CaZ8H4=
Subject key identifier: 76:ED:0E:DC:A1:59:C5:EF:47:67:D0:85:54:4E:9F:F4:DF:69:E8:31
Authority key identifier: 66:38:51:5F:32:94:49:69:AE:00:31:BD:E0:2D:1F:4C:BD:0D:2B:98
Certificate issuer: /CN=6638515f32944969ae0031bde02d1f4cbd0d2b98
Certificate serial: 019F12D4061EC933F708E391770A3BF99E96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZjhRXzKUSWmuADG94C0fTL0NK5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.mft
Manifest number: 04E5
Signing time: Mon 29 Jun 2026 10:01:52 +0000
Manifest this update: Mon 29 Jun 2026 10:01:52 +0000
Manifest next update: Tue 30 Jun 2026 10:01:52 +0000
Files and hashes: 1: EQIS8hUY1cmRXKR2EV3HGZu3pAA.roa (hash: Wp9jKVUnjH19KZBMjioHvcWYEkt9n8/MKYDMHRVjrW8=)
2: U6_BOZR92hnw_a9L4P6TzqeXhec.roa (hash: g5QjwrMvRa/952IazG0KYw2xw/6dTSo8fap6F5NGQ7c=)
3: ZjhRXzKUSWmuADG94C0fTL0NK5g.crl (hash: 73Es5oGMm1vCDR6zIB7AGRm04dtZJzaZqtlyeeEPfsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZjhRXzKUSWmuADG94C0fTL0NK5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 10:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:d4:06:1e:c9:33:f7:08:e3:91:77:0a:3b:f9:9e:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6638515f32944969ae0031bde02d1f4cbd0d2b98
Validity
Not Before: Jun 29 10:01:52 2026 GMT
Not After : Jun 30 10:01:52 2026 GMT
Subject: CN=76ed0edca159c5ef4767d085544e9ff4df69e831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:03:9a:8b:8d:c8:7d:d3:20:f9:a1:82:d6:2e:
13:e1:a0:a4:96:06:47:89:af:c9:0a:a7:ed:4e:82:
bb:a0:a0:6e:fa:7e:32:eb:05:2e:1f:e4:49:09:81:
9f:0f:46:39:a1:af:e3:15:5c:aa:f9:27:fe:3c:d4:
3f:22:68:1d:be:eb:39:ee:13:b7:a4:2d:99:cf:bc:
51:50:d1:f8:27:32:a0:cb:6a:ef:84:31:cd:e8:9f:
a7:0f:75:86:6e:9b:b7:12:36:3f:64:c5:a1:25:54:
a8:60:cd:0a:c2:07:bc:a9:24:93:b9:99:ca:02:69:
f7:48:d1:6f:cd:bd:75:bb:0b:fd:95:de:c3:14:4b:
84:ec:34:ef:f5:06:10:7b:63:bd:92:63:4a:73:da:
85:25:2f:11:db:04:91:c2:9d:8f:09:46:a8:03:9c:
be:65:bc:5e:49:77:b2:06:34:8c:e1:fc:2d:0a:2f:
21:14:26:8d:b1:c1:d1:c5:86:b8:e9:33:45:b6:cb:
d1:ff:97:01:95:fe:e0:04:ea:f4:d4:45:c0:94:22:
58:c8:42:fe:7b:84:13:71:0f:ef:ca:92:53:20:ff:
08:41:1b:93:9d:d5:6a:97:51:64:a5:f9:e6:5d:84:
cb:ed:ca:e5:dc:9e:f3:24:c9:d6:4a:d4:2f:42:fe:
20:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:ED:0E:DC:A1:59:C5:EF:47:67:D0:85:54:4E:9F:F4:DF:69:E8:31
X509v3 Authority Key Identifier:
keyid:66:38:51:5F:32:94:49:69:AE:00:31:BD:E0:2D:1F:4C:BD:0D:2B:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZjhRXzKUSWmuADG94C0fTL0NK5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d9:f7:63:e0:30:56:c1:22:cd:7d:6f:e5:70:89:39:93:1b:40:
ba:60:23:fe:33:74:08:bd:44:7c:7b:76:84:33:0f:8a:c9:f8:
0e:a4:2b:20:c1:59:5d:f5:e6:ef:a5:b9:d3:f6:77:5e:fd:3a:
fd:fa:3d:d5:cd:ca:a8:b7:60:5a:64:ff:ab:88:3b:3e:dd:c7:
5a:4e:4c:bf:81:b6:8d:75:f5:88:7c:1b:1d:ee:9b:dd:b4:1b:
fe:4b:3e:36:df:f4:b2:95:96:f2:ac:ba:ba:c7:3b:45:90:83:
73:6b:5b:1c:e1:ca:91:b8:12:d5:53:da:89:4d:0e:14:0e:99:
55:e2:96:b3:6a:c9:90:a5:bf:72:4c:11:f0:cf:5d:6c:5e:91:
ae:af:bb:8e:fd:7d:e8:c9:30:86:8a:8b:48:b8:07:76:a6:96:
48:52:4f:ff:ce:69:04:70:ce:44:33:ef:38:98:10:fb:8c:46:
0f:40:cf:37:a3:ad:73:46:c6:8d:02:79:6b:be:78:b4:cc:28:
8b:79:84:d1:34:3b:50:d3:1d:46:55:a1:7c:04:3d:d5:4a:da:
04:ed:0c:68:93:18:69:d0:92:45:e0:69:d4:64:c6:22:1d:60:
e5:c3:73:64:25:ed:e7:96:f6:23:14:8a:8c:92:be:4e:21:d5:
6a:f5:a6:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 16:36:30 2026 by rpki-client