Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.mft
File: zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.mft (raw, json)
Hash identifier: 2lLbxLV6iZ73hjIn1pMBnkGCqMqxAGvK7WHtDH8NWpc=
Subject key identifier: B2:16:F8:75:C6:17:DD:3E:64:43:87:19:C9:52:33:7E:E4:97:D6:A4
Authority key identifier: CE:A0:2C:07:79:7F:A2:03:A1:E2:49:3B:A0:DD:80:19:9E:D9:BE:05
Certificate issuer: /CN=cea02c07797fa203a1e2493ba0dd80199ed9be05
Certificate serial: 019EB9586D2A47569D3D2B6EE260C2420CA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.mft
Manifest number: 1954
Signing time: Fri 12 Jun 2026 01:00:40 +0000
Manifest this update: Fri 12 Jun 2026 01:00:40 +0000
Manifest next update: Sat 13 Jun 2026 01:00:40 +0000
Files and hashes: 1: TAemyk33p1zXgyxiSJqWPeQVynw.roa (hash: qzyHhOuBo7tPm0yMPXt6srTNFtIZysUY2o24I/uqBiU=)
2: zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.crl (hash: 4vepj8wkxJ2pFfstfMD3mrR1qhN2RmgZrpgi2C2L7X0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.mft
rsync://rpki.ripe.net/repository/DEFAULT/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 01:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:58:6d:2a:47:56:9d:3d:2b:6e:e2:60:c2:42:0c:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cea02c07797fa203a1e2493ba0dd80199ed9be05
Validity
Not Before: Jun 12 01:00:40 2026 GMT
Not After : Jun 13 01:00:40 2026 GMT
Subject: CN=b216f875c617dd3e64438719c952337ee497d6a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:16:7a:ec:34:1d:74:c7:a3:ab:3e:13:cc:c0:
c3:ae:ee:2e:9a:fe:b5:6f:6f:fa:85:70:51:54:43:
87:40:06:6e:c5:75:84:bf:be:0b:f3:85:40:ce:e9:
d8:21:1c:c3:2c:e3:66:b2:4c:06:10:73:ca:ca:e4:
63:c8:f0:da:38:7c:a4:a9:89:68:ec:e6:4c:0f:f4:
64:59:96:02:43:aa:cf:4a:3c:93:66:7a:a8:f9:11:
4c:38:b1:46:92:bf:c5:76:f9:35:f8:7b:f4:48:64:
d4:04:1a:6a:6f:1f:2f:10:43:b5:85:e7:ca:af:71:
0e:94:03:aa:dc:82:64:b1:50:db:87:d8:7a:91:08:
4c:e0:d5:5b:06:24:60:4e:c9:ee:5d:d9:34:bd:6c:
80:74:4d:b7:bb:99:1e:17:40:4d:3a:32:eb:13:28:
7a:73:b8:6f:e9:f3:69:98:0c:fb:bb:6b:fc:90:99:
6d:4f:15:d5:7d:5a:ee:3c:80:3b:4e:b9:8a:ef:0c:
3d:17:29:13:6e:bb:45:66:03:03:5f:f7:eb:71:ef:
21:32:cb:8a:85:24:17:bb:f6:3c:b4:a0:3a:b7:0c:
ab:39:02:f3:bb:89:0f:b7:3b:ef:53:fb:02:8e:82:
0b:81:16:69:98:b4:3e:54:3c:b9:d7:2e:d3:a7:a8:
49:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:16:F8:75:C6:17:DD:3E:64:43:87:19:C9:52:33:7E:E4:97:D6:A4
X509v3 Authority Key Identifier:
keyid:CE:A0:2C:07:79:7F:A2:03:A1:E2:49:3B:A0:DD:80:19:9E:D9:BE:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:88:96:a7:22:b6:37:9a:09:d2:9c:ba:a6:04:a0:cb:42:b5:
79:78:b3:58:1a:9f:a4:9a:44:a3:da:db:24:22:ce:09:19:e6:
48:3d:27:c1:87:da:24:70:48:2b:d2:60:b6:ce:3a:38:4c:1d:
7d:21:4e:d3:3c:b1:0b:db:35:ee:2e:73:17:03:a1:bd:0d:47:
c0:7c:32:92:38:56:b9:4d:03:19:8c:c0:61:67:a2:ca:18:da:
75:20:5f:93:4d:54:36:17:9c:5d:8f:42:ac:5b:e4:e8:58:7e:
19:a1:68:cd:2a:a8:0b:ef:62:8f:ca:3b:b5:61:f6:6d:30:72:
26:eb:25:ae:4b:ac:28:2d:7c:61:ea:5e:d6:1c:ca:48:57:76:
01:9f:b3:73:f5:26:d9:90:16:c9:b8:3a:69:0c:b4:74:bb:ab:
a7:6e:e4:67:a5:69:03:e8:6d:38:8c:c4:45:dc:63:d0:92:67:
a2:60:8d:f4:65:2c:ce:a0:16:5b:41:c5:da:04:03:6e:54:f0:
04:62:fe:d8:d3:f3:89:b9:35:0b:1d:d7:c0:62:b1:20:b4:37:
fe:3e:db:81:97:7b:44:71:73:6b:69:28:57:9a:62:ca:ce:73:
bd:04:11:d2:17:35:66:36:84:1a:e4:e7:66:7a:a2:6e:19:cd:
be:cb:25:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 09:53:53 2026 by rpki-client