Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2a981d-67f5-484e-be1b-ff64a9ba597c/1/ZoKJC37SM0dHjU1l2wlIw9sj6-c.mft
File: ZoKJC37SM0dHjU1l2wlIw9sj6-c.mft (raw, json)
Hash identifier: eyEy7U9Vzd+WdlLm+/z2KdZWOFUQBeiy6N7yZ0lkaBg=
Subject key identifier: AF:89:70:29:54:DF:EC:25:BF:8C:A7:F4:E8:0E:AA:F9:EE:2F:AA:11
Authority key identifier: 66:82:89:0B:7E:D2:33:47:47:8D:4D:65:DB:09:48:C3:DB:23:EB:E7
Certificate issuer: /CN=6682890b7ed23347478d4d65db0948c3db23ebe7
Certificate serial: 019EB87C45A8C1959AFAD2E37B6F5C66BC74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZoKJC37SM0dHjU1l2wlIw9sj6-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/2a981d-67f5-484e-be1b-ff64a9ba597c/1/ZoKJC37SM0dHjU1l2wlIw9sj6-c.mft
Manifest number: 1959
Signing time: Thu 11 Jun 2026 21:00:12 +0000
Manifest this update: Thu 11 Jun 2026 21:00:12 +0000
Manifest next update: Fri 12 Jun 2026 21:00:12 +0000
Files and hashes: 1: J17vSIqgoHZS2f6yqb_8iHjCu5I.roa (hash: ZkWmb6GvJuOMu21GNU2YeN23B5AtCQQY8+AStJbeGm0=)
2: XPQJlFedERmTF9acUC88HcZi7Y8.roa (hash: Np32ynKS0t+KcWpS0Dq9Cf6zaeFo8lW4iSnM2fxcrEY=)
3: ZoKJC37SM0dHjU1l2wlIw9sj6-c.crl (hash: Wu5CMF1rGrgfJrvgJ5sEK+eiJAzt4Z1ZUqtxjMD2qRI=)
4: ipCoEXo6uW0pr_TclF-YMNfjy1o.roa (hash: Vq4dXFhds74U9HS3KjpxidXdPv7ObFMg2YYb+3p543I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/2a981d-67f5-484e-be1b-ff64a9ba597c/1/ZoKJC37SM0dHjU1l2wlIw9sj6-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/2a981d-67f5-484e-be1b-ff64a9ba597c/1/ZoKJC37SM0dHjU1l2wlIw9sj6-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZoKJC37SM0dHjU1l2wlIw9sj6-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:7c:45:a8:c1:95:9a:fa:d2:e3:7b:6f:5c:66:bc:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6682890b7ed23347478d4d65db0948c3db23ebe7
Validity
Not Before: Jun 11 21:00:12 2026 GMT
Not After : Jun 12 21:00:12 2026 GMT
Subject: CN=af89702954dfec25bf8ca7f4e80eaaf9ee2faa11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:81:2e:29:c9:46:ed:a4:23:92:5f:98:9b:9e:
12:aa:96:89:9e:ba:4e:4a:d5:42:89:9a:0d:39:08:
8e:97:1c:11:a8:2a:66:6e:fe:aa:41:38:31:f1:ff:
fa:4e:a8:b6:1b:f0:1b:b9:12:cb:c6:a2:08:05:90:
4a:f4:9e:b8:83:fc:48:ca:05:1e:be:95:d6:13:a9:
de:b6:c6:41:ed:9f:f1:7d:ae:62:d1:20:85:ce:02:
bf:71:8c:6e:97:c8:00:59:1d:71:e3:e7:ee:1e:52:
b1:f7:a7:15:cc:21:63:d1:b3:f4:94:87:26:61:55:
2d:5f:2f:93:df:b7:bc:45:a4:de:de:dc:d7:c6:e7:
5b:8a:d8:0c:6e:21:a0:4e:12:d4:0e:a6:85:f3:9e:
a5:19:86:bb:5d:91:70:8d:6b:db:ed:68:60:bc:c0:
43:81:85:af:fc:b7:65:85:19:0e:40:31:cc:9c:17:
dd:8e:48:58:ed:88:da:c5:2c:f7:0f:30:41:a7:05:
f2:d6:d7:68:75:4a:0e:f9:d2:e3:80:21:09:5b:d5:
0b:e2:85:f9:c5:43:98:75:09:c8:3e:60:17:fe:61:
2f:c3:a1:59:45:d0:a6:4e:be:d4:e3:27:14:06:11:
78:cd:f5:57:fb:65:4f:44:ab:00:ad:d2:6e:42:37:
b3:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:89:70:29:54:DF:EC:25:BF:8C:A7:F4:E8:0E:AA:F9:EE:2F:AA:11
X509v3 Authority Key Identifier:
keyid:66:82:89:0B:7E:D2:33:47:47:8D:4D:65:DB:09:48:C3:DB:23:EB:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZoKJC37SM0dHjU1l2wlIw9sj6-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2a981d-67f5-484e-be1b-ff64a9ba597c/1/ZoKJC37SM0dHjU1l2wlIw9sj6-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2a981d-67f5-484e-be1b-ff64a9ba597c/1/ZoKJC37SM0dHjU1l2wlIw9sj6-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:c4:4a:f2:9e:94:e8:d2:49:94:90:4b:c9:08:da:2b:7d:d1:
df:3a:87:31:a9:60:e9:81:59:f5:90:fb:0e:11:89:f2:dc:2a:
3a:39:04:43:a2:33:35:27:73:28:c6:5e:73:71:43:a1:2c:0a:
61:1c:1e:a6:23:f3:d8:4a:b3:97:bc:c1:5a:22:28:bf:66:5a:
45:09:8a:59:90:6c:89:c7:9d:e1:2a:3c:53:35:fa:4c:63:f9:
c7:5c:16:04:72:11:02:cb:a7:d3:99:0b:88:48:39:42:a5:40:
fa:59:30:be:41:47:c6:1c:be:67:0f:15:6e:b4:06:60:c5:35:
90:e4:08:e5:2b:cc:32:e1:99:90:66:eb:bd:da:fd:4a:16:b9:
f0:c2:4c:4a:50:95:e9:74:b9:70:cb:ad:6d:af:24:21:b5:60:
25:75:67:ec:6a:df:41:19:bf:14:6e:4e:0c:6e:49:c1:d5:c3:
0e:55:d0:75:de:08:ba:35:18:cf:7b:88:6a:28:18:f9:dd:16:
09:bb:17:75:ff:c2:16:16:fa:61:03:30:a5:b7:bb:53:2b:e7:
c4:83:d9:37:2b:49:f2:a0:54:ad:13:d4:f7:dc:14:70:dc:00:
76:e1:37:96:44:f9:33:ff:bb:2f:a5:9f:78:b3:31:e6:b4:34:
d1:7e:6e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 06:10:57 2026 by rpki-client