Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/a5e8d5-3264-46b2-8026-a39a9c775a50/1/dZx6SnoOrkiBN3Ob7HGisyRw-O0.mft
File: dZx6SnoOrkiBN3Ob7HGisyRw-O0.mft (raw, json)
Hash identifier: 7ZiH0KVzdUbDfWQs2WTzQmssTJfk/JcGAZk8910dGF0=
Subject key identifier: EE:BA:5B:07:31:C1:3F:17:E5:50:24:3B:50:9C:53:3C:66:3D:04:3D
Authority key identifier: 75:9C:7A:4A:7A:0E:AE:48:81:37:73:9B:EC:71:A2:B3:24:70:F8:ED
Certificate issuer: /CN=759c7a4a7a0eae488137739bec71a2b32470f8ed
Certificate serial: 019F1453A6054D0AB40083D778B477FDD951
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dZx6SnoOrkiBN3Ob7HGisyRw-O0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/a5e8d5-3264-46b2-8026-a39a9c775a50/1/dZx6SnoOrkiBN3Ob7HGisyRw-O0.mft
Manifest number: 01D9
Signing time: Mon 29 Jun 2026 17:00:54 +0000
Manifest this update: Mon 29 Jun 2026 17:00:54 +0000
Manifest next update: Tue 30 Jun 2026 17:00:54 +0000
Files and hashes: 1: 5vgf_9aZThkj_7VAzPV1SdycQ9s.roa (hash: WWuwQNMz2jPS1Lz9ZyTa8kKgvLVWvH3DolJRQpBYZVw=)
2: ZUFdt76XEIRqjB1ZsCU8KDPIIeE.roa (hash: +22Qmq4Y9pNmDRsynGIXRX9EtOmlc0lMrcEc8jeBxvw=)
3: dZx6SnoOrkiBN3Ob7HGisyRw-O0.crl (hash: rcjX+1nvEB3cRMFbu0C2Q4mvA62tGBeFz33q5BbWAfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/a5e8d5-3264-46b2-8026-a39a9c775a50/1/dZx6SnoOrkiBN3Ob7HGisyRw-O0.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/a5e8d5-3264-46b2-8026-a39a9c775a50/1/dZx6SnoOrkiBN3Ob7HGisyRw-O0.mft
rsync://rpki.ripe.net/repository/DEFAULT/dZx6SnoOrkiBN3Ob7HGisyRw-O0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 14:12:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:14:53:a6:05:4d:0a:b4:00:83:d7:78:b4:77:fd:d9:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=759c7a4a7a0eae488137739bec71a2b32470f8ed
Validity
Not Before: Jun 29 17:00:54 2026 GMT
Not After : Jun 30 17:00:54 2026 GMT
Subject: CN=eeba5b0731c13f17e550243b509c533c663d043d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:fb:3c:f2:96:b9:7c:8a:a3:8a:1e:53:91:63:
1f:5b:c7:d4:26:a0:b0:81:bf:f2:bf:b6:39:4b:36:
2d:10:b2:47:90:9e:25:f7:67:5e:d5:b2:4e:93:f1:
7b:7a:74:42:91:17:08:db:9e:54:7b:d3:7f:b5:21:
1f:41:29:0e:bd:59:2e:93:d6:f0:95:5a:36:71:99:
ec:2a:07:46:2b:65:dc:4f:6e:f2:92:1a:0a:ba:a3:
ab:a6:34:9e:30:a4:60:29:fe:c7:67:39:f1:ae:0d:
e4:43:ec:26:a8:3f:52:64:e3:11:62:c6:b2:69:ad:
06:56:e0:41:70:ff:fe:fa:bd:68:e9:7d:2f:ad:1a:
d8:1b:15:fb:f1:4d:f4:ed:39:71:a9:3c:3a:a7:51:
59:97:3a:c7:71:77:fa:1b:d4:26:99:59:9e:1f:d1:
34:44:c6:d7:40:38:20:94:6f:4e:33:ac:bb:b3:dc:
3e:12:36:44:9a:cd:9f:73:1a:4c:6e:cc:46:d8:38:
59:19:74:3b:74:63:01:4c:78:72:38:b4:1f:7f:ba:
f8:17:2d:bb:2f:5a:fa:a8:2d:14:51:09:2b:a0:be:
b5:cb:86:02:e6:c0:d3:41:77:1e:7b:3b:01:36:27:
18:11:43:5b:73:da:ce:ab:f7:f5:07:60:a5:c4:8f:
61:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:BA:5B:07:31:C1:3F:17:E5:50:24:3B:50:9C:53:3C:66:3D:04:3D
X509v3 Authority Key Identifier:
keyid:75:9C:7A:4A:7A:0E:AE:48:81:37:73:9B:EC:71:A2:B3:24:70:F8:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZx6SnoOrkiBN3Ob7HGisyRw-O0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a5e8d5-3264-46b2-8026-a39a9c775a50/1/dZx6SnoOrkiBN3Ob7HGisyRw-O0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a5e8d5-3264-46b2-8026-a39a9c775a50/1/dZx6SnoOrkiBN3Ob7HGisyRw-O0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:12:82:00:e6:7e:32:94:4b:4e:77:c6:41:92:be:50:8e:39:
ce:1d:f7:7d:68:a8:15:50:62:cb:1d:49:9f:a6:8f:b5:7b:42:
be:45:8e:5d:bd:51:ca:10:76:9c:03:02:8f:2f:af:16:db:8d:
0c:d7:24:87:4b:51:7e:e0:d1:ff:3a:3e:05:5a:9d:17:94:35:
0e:70:58:81:41:29:12:45:4b:17:35:65:bc:2d:6b:e0:f4:37:
90:79:8e:a2:ec:5f:c1:89:04:a3:be:f5:0a:0c:99:30:43:84:
a2:83:2d:72:4a:ef:05:82:7d:62:20:0b:c0:39:7a:b6:88:4b:
44:66:c5:13:07:3e:ab:03:23:f7:6d:a8:b5:d0:45:27:c1:a6:
9e:ab:fe:8e:63:aa:17:3b:ff:7e:a5:0c:3f:38:d7:c5:5c:69:
75:40:c7:81:18:91:98:19:e1:d4:ee:7b:82:de:fe:4c:27:1a:
a3:13:a1:97:f0:b2:ea:43:48:71:fd:44:c6:3a:80:9d:9c:63:
a6:04:76:ab:33:42:5e:e9:b1:56:eb:3c:3a:0a:57:dd:bc:73:
8c:20:b5:fd:b9:11:a9:d4:33:aa:0e:ec:f5:6d:b5:77:e3:bb:
4f:9b:b0:13:20:b8:41:48:0a:16:f0:7a:a1:14:e0:de:80:3d:
0e:52:24:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8UU6YFTQq0AIPXeLR3/dlRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1OWM3YTRhN2EwZWFlNDg4MTM3NzM5YmVjNzFhMmIzMjQ3
MGY4ZWQwHhcNMjYwNjI5MTcwMDU0WhcNMjYwNjMwMTcwMDU0WjAzMTEwLwYDVQQD
EyhlZWJhNWIwNzMxYzEzZjE3ZTU1MDI0M2I1MDljNTMzYzY2M2QwNDNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1vs88pa5fIqjih5TkWMfW8fUJqCw
gb/yv7Y5SzYtELJHkJ4l92de1bJOk/F7enRCkRcI255Ue9N/tSEfQSkOvVkuk9bw
lVo2cZnsKgdGK2XcT27ykhoKuqOrpjSeMKRgKf7HZznxrg3kQ+wmqD9SZOMRYsay
aa0GVuBBcP/++r1o6X0vrRrYGxX78U307TlxqTw6p1FZlzrHcXf6G9QmmVmeH9E0
RMbXQDgglG9OM6y7s9w+EjZEms2fcxpMbsxG2DhZGXQ7dGMBTHhyOLQff7r4Fy27
L1r6qC0UUQkroL61y4YC5sDTQXceezsBNicYEUNbc9rOq/f1B2ClxI9hVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO66WwcxwT8X5VAkO1CcUzxmPQQ9MB8GA1UdIwQY
MBaAFHWcekp6Dq5IgTdzm+xxorMkcPjtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFp4NlNub09ya2lCTjNPYjdIR2lzeVJ3LU8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9hNWU4ZDUtMzI2NC00NmIyLTgwMjYt
YTM5YTljNzc1YTUwLzEvZFp4NlNub09ya2lCTjNPYjdIR2lzeVJ3LU8wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS9hNWU4ZDUtMzI2NC00NmIyLTgwMjYtYTM5YTljNzc1YTUw
LzEvZFp4NlNub09ya2lCTjNPYjdIR2lzeVJ3LU8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAhKCAOZ+
MpRLTnfGQZK+UI45zh33fWioFVBiyx1Jn6aPtXtCvkWOXb1RyhB2nAMCjy+vFtuN
DNckh0tRfuDR/zo+BVqdF5Q1DnBYgUEpEkVLFzVlvC1r4PQ3kHmOouxfwYkEo771
CgyZMEOEooMtckrvBYJ9YiALwDl6tohLRGbFEwc+qwMj922otdBFJ8Gmnqv+jmOq
Fzv/fqUMPzjXxVxpdUDHgRiRmBnh1O57gt7+TCcaoxOhl/Cy6kNIcf1ExjqAnZxj
pgR2qzNCXumxVus8OgpX3bxzjCC1/bkRqdQzqg7s9W21d+O7T5uwEyC4QUgKFvB6
oRTg3oA9DlIkqg==
-----END CERTIFICATE-----
Generated at Mon Jun 29 19:35:13 2026 by rpki-client