Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.mft
File: zTlHV-FBYgKkAilW2_SNcHRYUgw.mft (raw, json)
Hash identifier: N5uTBHKroxA6cp42CCDDKlDIIyEiF/FMYNjnATuBmuM=
Subject key identifier: 2D:99:0B:C9:86:99:B4:05:4E:B1:55:4C:48:CB:0E:76:6E:A4:1E:EC
Authority key identifier: CD:39:47:57:E1:41:62:02:A4:02:29:56:DB:F4:8D:70:74:58:52:0C
Certificate issuer: /CN=cd394757e1416202a4022956dbf48d707458520c
Certificate serial: 019EFB01F87787A674F688C470E16B5427AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zTlHV-FBYgKkAilW2_SNcHRYUgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.mft
Manifest number: 1223
Signing time: Wed 24 Jun 2026 19:01:10 +0000
Manifest this update: Wed 24 Jun 2026 19:01:10 +0000
Manifest next update: Thu 25 Jun 2026 19:01:10 +0000
Files and hashes: 1: 5GenFMQsSYDx9FcfiAXgf9Uomdw.roa (hash: 4H+3cPhJ7oDZNP6D43X5l+hl9KT5PURFIDgzFceABtg=)
2: 5Zndcb8EJc7nslqP_7KqvtkxJPw.roa (hash: ogNnDwO6cHFOhG9TbGz5GUJ2wMKx53CTMIlKdOAYy7U=)
3: zTlHV-FBYgKkAilW2_SNcHRYUgw.crl (hash: hxlqeY9Yc43blO62BDTSYSmcjWx4kSf11LNLB+tA5uQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/zTlHV-FBYgKkAilW2_SNcHRYUgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 14:31:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fb:01:f8:77:87:a6:74:f6:88:c4:70:e1:6b:54:27:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd394757e1416202a4022956dbf48d707458520c
Validity
Not Before: Jun 24 19:01:10 2026 GMT
Not After : Jun 25 19:01:10 2026 GMT
Subject: CN=2d990bc98699b4054eb1554c48cb0e766ea41eec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:ed:b7:2a:95:e8:30:c2:93:8e:3e:94:4a:c2:
70:4d:fd:ec:b2:f9:ab:c0:13:f5:4f:69:94:0b:1f:
b6:ae:41:79:02:ad:f8:98:9e:7a:3f:d9:f1:0a:f1:
33:13:c2:7a:9b:6d:6e:36:6a:d1:63:7d:08:80:1a:
c7:21:5d:23:70:10:ad:fb:e9:c8:e9:65:32:6c:77:
47:c2:b5:fc:4d:03:3f:a4:c4:25:b8:95:27:3b:41:
b8:94:28:51:ba:6b:bd:dc:ad:39:f4:10:a5:5b:47:
16:a0:32:bf:a7:a9:58:50:35:73:b7:87:fb:7b:f7:
68:b0:63:f6:42:cf:0c:e6:e7:0e:a2:b3:10:52:8d:
03:74:47:18:fe:6a:a8:37:1f:1a:78:fb:9c:4d:5e:
a3:85:10:3b:20:d5:d6:47:c1:bf:8a:b4:89:74:62:
94:2a:d7:94:a1:b4:7f:b0:05:2f:19:f0:10:19:e3:
66:28:c2:f7:4f:73:b3:85:78:69:6a:1a:85:3d:6c:
6d:50:28:0c:23:c9:16:1b:ef:31:a5:3c:1b:bb:a8:
ec:1e:1c:9c:19:f1:6d:de:97:18:7d:f9:76:fc:03:
a5:c5:ce:f7:3b:7b:26:6f:ba:fe:82:3b:94:cb:52:
c1:cb:80:d9:a9:e9:a2:6b:b6:78:0e:7b:3b:f0:bb:
74:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:99:0B:C9:86:99:B4:05:4E:B1:55:4C:48:CB:0E:76:6E:A4:1E:EC
X509v3 Authority Key Identifier:
keyid:CD:39:47:57:E1:41:62:02:A4:02:29:56:DB:F4:8D:70:74:58:52:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zTlHV-FBYgKkAilW2_SNcHRYUgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:40:b8:7d:9d:53:92:bb:74:ad:2f:22:05:70:93:ee:f1:4c:
67:41:b7:4d:db:bf:14:db:5d:d4:97:30:13:3e:93:55:46:aa:
39:81:be:71:cb:9e:61:9d:b9:5c:5b:95:2c:6c:5c:ed:c3:5d:
fd:41:f5:e7:5c:d5:37:e4:52:76:50:67:ac:40:b4:27:7d:6d:
00:21:54:0e:bb:ea:15:44:d4:2d:b4:c7:27:56:4b:6e:b6:3f:
2f:1e:b2:29:e3:be:c4:9a:41:1b:40:f2:8c:25:3e:be:33:b8:
ad:be:45:16:f3:0d:e7:37:3c:cc:58:21:84:94:f6:91:77:97:
81:10:ef:e3:77:20:66:24:60:5c:55:55:52:61:e6:02:9b:ee:
e8:69:c8:d5:62:8f:4c:ad:e5:95:15:75:0b:28:05:f2:6c:b6:
db:88:08:07:aa:88:86:fb:04:67:e9:a4:a8:2c:6c:2b:eb:e4:
0e:6d:4f:c0:22:33:4b:9c:f4:23:dc:df:9a:05:67:b0:53:67:
44:fa:e8:4f:22:28:bf:5f:91:f6:aa:ca:0c:51:2a:1d:19:cb:
ea:5f:3a:79:98:fa:55:0b:e6:e5:21:05:2b:7f:56:cd:de:78:
94:bc:61:8b:5c:2e:12:c7:f4:cb:c6:44:bf:67:2e:97:6c:0c:
5b:c6:91:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 21:20:12 2026 by rpki-client