Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/04ec6b-251a-4eb7-9199-25194525d516/1/zdzhKuUOgKRTTYD3hqgkSXsm-ts.mft
File: zdzhKuUOgKRTTYD3hqgkSXsm-ts.mft (raw, json)
Hash identifier: qoTHtSMCy8gElsKl0o6qtima9d8sYQJopWoXzSJgu9k=
Subject key identifier: 2F:1A:E6:74:9E:D4:3D:70:98:29:A7:34:AB:C0:DE:3B:26:DA:CD:68
Authority key identifier: CD:DC:E1:2A:E5:0E:80:A4:53:4D:80:F7:86:A8:24:49:7B:26:FA:DB
Certificate issuer: /CN=cddce12ae50e80a4534d80f786a824497b26fadb
Certificate serial: 019EB9C674F14CBCC2B0AA278A707CC88538
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zdzhKuUOgKRTTYD3hqgkSXsm-ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/04ec6b-251a-4eb7-9199-25194525d516/1/zdzhKuUOgKRTTYD3hqgkSXsm-ts.mft
Manifest number: 57
Signing time: Fri 12 Jun 2026 03:00:51 +0000
Manifest this update: Fri 12 Jun 2026 03:00:51 +0000
Manifest next update: Sat 13 Jun 2026 03:00:51 +0000
Files and hashes: 1: pYYR9UI_sLtKcyNmvvaeAyGho10.roa (hash: Visrk6MwePbwviSVCYu3l4j6eSQ3jEUFOOu9154zYk0=)
2: zdzhKuUOgKRTTYD3hqgkSXsm-ts.crl (hash: UdoA+NWfeUDK09E2VaT2dkDRGUdztwAhri+ySKlWfis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/04ec6b-251a-4eb7-9199-25194525d516/1/zdzhKuUOgKRTTYD3hqgkSXsm-ts.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/04ec6b-251a-4eb7-9199-25194525d516/1/zdzhKuUOgKRTTYD3hqgkSXsm-ts.mft
rsync://rpki.ripe.net/repository/DEFAULT/zdzhKuUOgKRTTYD3hqgkSXsm-ts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 03:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:c6:74:f1:4c:bc:c2:b0:aa:27:8a:70:7c:c8:85:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cddce12ae50e80a4534d80f786a824497b26fadb
Validity
Not Before: Jun 12 03:00:51 2026 GMT
Not After : Jun 13 03:00:51 2026 GMT
Subject: CN=2f1ae6749ed43d709829a734abc0de3b26dacd68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:0a:e8:b3:bb:e0:0c:e9:da:56:8a:c7:20:fc:
9b:d5:63:49:79:d2:29:14:24:e4:f7:d7:d6:18:ce:
cd:60:66:bc:4c:e2:9a:19:fe:a4:5d:b7:25:08:f5:
67:e6:ca:f7:a0:ed:d1:ef:be:f6:14:de:fa:81:41:
6f:a3:af:09:97:cd:47:d0:63:b3:62:ce:1a:9f:03:
a2:1d:ab:ad:3c:9f:21:b5:de:2a:cb:5f:14:38:9d:
72:a1:0e:ff:74:dd:13:d2:18:26:bc:2f:3b:b1:8e:
54:12:e9:6a:86:8a:b6:03:3c:dc:9a:6c:07:a2:85:
0b:81:ff:26:a0:26:2a:77:1e:9d:67:c6:8d:ae:5d:
66:a5:27:6c:42:0f:62:56:53:fc:dd:1b:6e:c6:df:
e0:f2:bd:93:bf:e6:e4:bc:52:10:e8:f9:e3:99:82:
c1:c2:fb:2c:a3:d7:85:42:21:f4:1e:d2:ec:60:19:
98:36:e3:77:23:e2:2f:bf:5c:ef:d6:b3:d1:e7:54:
e4:37:be:3d:1c:01:af:76:49:43:cc:9b:67:16:44:
bb:e8:62:76:fa:8d:96:c6:df:83:47:67:a0:bc:e9:
dc:3c:a7:62:08:62:9b:d3:ef:33:f5:e4:d1:97:31:
1b:88:db:1a:8e:95:92:dc:7c:ab:14:df:4b:72:bf:
eb:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:1A:E6:74:9E:D4:3D:70:98:29:A7:34:AB:C0:DE:3B:26:DA:CD:68
X509v3 Authority Key Identifier:
keyid:CD:DC:E1:2A:E5:0E:80:A4:53:4D:80:F7:86:A8:24:49:7B:26:FA:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zdzhKuUOgKRTTYD3hqgkSXsm-ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/04ec6b-251a-4eb7-9199-25194525d516/1/zdzhKuUOgKRTTYD3hqgkSXsm-ts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/04ec6b-251a-4eb7-9199-25194525d516/1/zdzhKuUOgKRTTYD3hqgkSXsm-ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:f2:c3:3e:f6:3b:74:f7:b3:6f:77:56:7d:ad:37:e6:b9:82:
00:97:ca:c9:2c:0c:20:9f:81:ef:f6:d0:20:32:a0:fb:6d:c1:
56:19:08:44:38:15:0e:bd:4e:bd:cb:27:f5:0e:0d:0a:68:5c:
3a:79:90:8a:d2:b4:9e:ac:e2:b3:60:85:00:e0:0b:8b:9d:c2:
07:6b:93:48:c9:fd:31:2b:2d:69:c3:dc:3c:d3:0f:e4:97:25:
66:d3:bf:e2:e8:1a:d8:9d:04:05:1d:59:77:3b:c1:9c:3f:ee:
20:75:0e:d5:62:de:72:6f:c9:07:af:8d:31:b1:2e:d5:9f:a2:
55:d6:18:17:b8:a1:79:9b:45:94:f5:d5:ef:d5:40:70:53:19:
6f:49:94:a8:b0:05:92:38:96:b4:e7:a4:a7:20:1d:c6:07:fa:
75:9d:8f:59:31:e0:70:5c:75:5e:b4:0c:14:04:a7:ee:d5:33:
cf:c4:38:a9:97:8d:d0:3f:a7:1d:d7:d7:56:99:a1:f7:46:81:
2b:d6:12:40:9b:a7:d4:8a:ef:b8:f0:31:16:5b:51:19:c2:2f:
22:ac:0a:fc:7b:6f:0c:be:2a:dc:b3:16:61:3a:b6:67:79:99:
fd:be:10:7d:99:ef:5e:ee:20:3d:12:23:b2:81:f4:a6:0d:d2:
4d:2d:ea:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:43:03 2026 by rpki-client