Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.mft
File: zs05HGYMPlfFO4fAtS7A0vL0J3U.mft (raw, json)
Hash identifier: CAEK6O76Co2S9Bn8HI17D5ckIfBXAX9Dae0TpFEbgVI=
Subject key identifier: 80:68:D4:33:6A:86:87:04:B1:65:9B:7E:61:39:3F:A9:9D:0D:05:F2
Authority key identifier: CE:CD:39:1C:66:0C:3E:57:C5:3B:87:C0:B5:2E:C0:D2:F2:F4:27:75
Certificate issuer: /CN=cecd391c660c3e57c53b87c0b52ec0d2f2f42775
Certificate serial: 019EB733190447C814BC09C84E0CE1EEEDDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zs05HGYMPlfFO4fAtS7A0vL0J3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.mft
Manifest number: 090E
Signing time: Thu 11 Jun 2026 15:00:39 +0000
Manifest this update: Thu 11 Jun 2026 15:00:39 +0000
Manifest next update: Fri 12 Jun 2026 15:00:39 +0000
Files and hashes: 1: K1WYHWxT9hUhyCzFRd3qp6J1SRo.roa (hash: ofCgYNoPNZP6vNBlI2XsxCW6wFsFBZey/s584doB1q4=)
2: nNBG6JVVM3hu0P20Vu06-SMt-9I.roa (hash: M+TeIwkxE9H/4NhfymMWaPcB1L3//0ChdU6G+C5A8KM=)
3: zs05HGYMPlfFO4fAtS7A0vL0J3U.crl (hash: OG0hCUMqBUlmUfAHSPilyTcm9AvacN37HQM+NOr2BIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/zs05HGYMPlfFO4fAtS7A0vL0J3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:33:19:04:47:c8:14:bc:09:c8:4e:0c:e1:ee:ed:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cecd391c660c3e57c53b87c0b52ec0d2f2f42775
Validity
Not Before: Jun 11 15:00:39 2026 GMT
Not After : Jun 12 15:00:39 2026 GMT
Subject: CN=8068d4336a868704b1659b7e61393fa99d0d05f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:bc:bf:f2:f6:28:cd:5b:39:bf:da:3e:43:df:
21:33:04:c2:81:60:47:0f:9a:5a:26:06:e2:26:cf:
74:92:09:00:79:16:35:6a:ed:fe:f7:31:4a:0c:0a:
3c:d1:c8:ad:d4:b7:4d:e7:34:79:2c:71:4e:0b:14:
c1:88:90:e4:fa:2f:56:0b:26:b9:3c:ba:99:f8:3b:
54:db:bb:e4:fc:de:25:05:ed:8d:86:c5:04:b0:2d:
df:55:8a:f0:9b:4f:27:1b:a9:5e:99:46:fb:4e:0a:
55:04:c0:7e:2f:31:64:9a:18:0c:1b:db:32:ac:d5:
a9:a1:d4:56:4b:5a:a8:f7:46:48:fa:10:35:bd:8f:
2b:2f:3b:96:c9:16:5d:ce:12:39:97:21:d2:d2:9a:
05:77:e4:a1:d0:4b:93:aa:b0:f1:e8:35:ff:47:3a:
f1:20:52:93:1e:f7:a8:65:51:51:a8:77:61:3c:b2:
a8:fe:51:64:26:f1:3f:06:11:2f:74:af:6a:92:17:
08:44:e3:d6:ff:8b:38:78:bf:9d:ce:8d:f9:db:31:
0c:9f:50:08:46:df:db:ce:50:0b:a4:7c:8c:2c:32:
50:14:1f:a6:88:b8:18:85:b6:7d:6b:a6:38:ee:39:
82:d0:eb:8d:cb:aa:6e:4f:40:d7:10:82:ed:60:ad:
6a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:68:D4:33:6A:86:87:04:B1:65:9B:7E:61:39:3F:A9:9D:0D:05:F2
X509v3 Authority Key Identifier:
keyid:CE:CD:39:1C:66:0C:3E:57:C5:3B:87:C0:B5:2E:C0:D2:F2:F4:27:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zs05HGYMPlfFO4fAtS7A0vL0J3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:9a:8a:b3:6b:bf:12:4b:37:41:91:d7:82:f6:7a:76:d6:45:
d6:18:a6:a8:2e:b3:7c:6d:d3:d7:a1:41:54:07:ed:2b:3c:f4:
12:6e:a5:97:81:39:19:5a:68:49:9e:7b:c4:a1:84:cf:b3:11:
26:4d:03:ce:f1:32:35:2a:48:0e:07:41:99:7e:c7:df:d9:9e:
db:14:37:0d:36:17:f9:bb:6a:4c:dd:f9:e4:4d:06:78:58:ce:
6d:88:cb:86:e0:dd:f4:a6:61:71:11:fc:6e:f3:a2:98:b9:f1:
4c:63:f7:bb:6a:fb:c1:1d:83:b3:83:f1:87:6e:7c:35:c3:d0:
d4:56:7a:e9:59:67:25:3f:69:ce:3a:1b:9d:83:2b:38:a1:c9:
e5:71:66:79:19:67:b8:54:0d:6e:67:99:98:ee:85:31:1f:aa:
2c:a2:12:e1:52:bf:44:5d:eb:03:d5:84:02:e9:fb:98:7e:14:
c7:d0:00:df:d2:df:a7:42:46:18:05:f0:dc:50:eb:d1:5b:b4:
84:76:c6:e0:14:ce:68:e5:c4:6e:13:aa:5f:76:c8:12:50:73:
c0:f3:2b:3c:65:76:f9:20:76:5e:06:3f:7c:fe:00:11:f7:36:
ec:98:aa:73:fd:50:31:ba:4d:cc:6b:3f:6b:6c:b0:bb:42:9d:
aa:36:59:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 19:00:20 2026 by rpki-client