Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft
File: ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft (raw, json)
Hash identifier: 3dWRC3zv9uFw6sNp5n3TtBV5GpsqvGs+QhrQJLLg0UA=
Subject key identifier: 58:51:3E:D4:51:98:6A:1E:A9:52:23:5E:5D:A3:B3:CC:55:DD:CC:D2
Authority key identifier: 65:A4:24:CE:E2:FD:B0:07:2B:54:14:38:D9:13:D2:66:36:A9:B8:8B
Certificate issuer: /CN=65a424cee2fdb0072b541438d913d26636a9b88b
Certificate serial: 019F11F78B64D3A490A13E66B56D803F580D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZaQkzuL9sAcrVBQ42RPSZjapuIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft
Manifest number: 1994
Signing time: Mon 29 Jun 2026 06:01:03 +0000
Manifest this update: Mon 29 Jun 2026 06:01:03 +0000
Manifest next update: Tue 30 Jun 2026 06:01:03 +0000
Files and hashes: 1: DKRX12LW62Pwhd7lkkBTAIcEFmg.roa (hash: JQDtg/PbgFXKpQJ1cWIs8ZbTBrSDwWrj/eo/b+RXeDU=)
2: ZaQkzuL9sAcrVBQ42RPSZjapuIs.crl (hash: KzQFBVcdSJs86yuOpPcx+uviELBnyX9N9y3+QQuEZuE=)
3: f56SXyzVaFxPipkSbWjQspBnG6k.asa (hash: kTkK/KuPdlPU1v4Iqn9nm0PLfpF6FLDnJnaGt4nEmLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZaQkzuL9sAcrVBQ42RPSZjapuIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:f7:8b:64:d3:a4:90:a1:3e:66:b5:6d:80:3f:58:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65a424cee2fdb0072b541438d913d26636a9b88b
Validity
Not Before: Jun 29 06:01:03 2026 GMT
Not After : Jun 30 06:01:03 2026 GMT
Subject: CN=58513ed451986a1ea952235e5da3b3cc55ddccd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b0:7b:c8:01:c2:d3:b4:db:06:49:96:12:1f:
06:64:aa:c3:f8:27:cf:e9:a9:f7:46:13:af:d6:ac:
72:3d:a1:db:12:7d:6e:58:05:64:09:28:3d:2a:bf:
f0:f5:3b:2e:39:b4:f2:1c:c3:58:94:5a:32:e9:58:
3e:b1:84:a5:3e:f7:71:7b:4b:f8:5d:fe:d5:26:0f:
c9:94:34:32:aa:c7:68:c7:04:17:54:b5:b3:67:59:
83:56:37:da:37:b3:0a:82:32:71:46:5e:0e:dd:14:
c6:54:40:69:5c:54:7e:b4:f6:71:57:ca:f7:ed:9a:
30:d7:77:7b:a6:14:a8:88:c0:5a:d8:3e:ff:c8:2b:
b6:8c:1e:2e:09:db:28:9e:67:24:f2:14:95:06:e0:
75:7b:c5:b8:6b:02:54:34:20:76:61:1b:21:6e:09:
66:ff:cc:e0:f8:e4:54:56:05:72:ee:79:21:9d:13:
cd:11:27:3e:a4:a5:47:08:e8:73:49:eb:46:a7:84:
e1:ab:05:d5:8a:bb:57:fc:da:87:80:a7:aa:88:0b:
00:80:ef:68:2d:c3:23:1b:ce:b9:c0:54:77:3f:bb:
09:db:36:47:87:0e:5f:95:71:4c:25:eb:4c:ed:f5:
77:0d:b7:68:fb:02:31:46:32:0f:40:14:b4:1a:9d:
7a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:51:3E:D4:51:98:6A:1E:A9:52:23:5E:5D:A3:B3:CC:55:DD:CC:D2
X509v3 Authority Key Identifier:
keyid:65:A4:24:CE:E2:FD:B0:07:2B:54:14:38:D9:13:D2:66:36:A9:B8:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZaQkzuL9sAcrVBQ42RPSZjapuIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:fc:bf:a7:5b:33:80:08:6a:95:55:a5:a2:0f:5d:53:92:cf:
9f:e8:78:1e:51:bd:82:ff:35:8b:ee:8a:8a:e5:e7:24:73:5e:
b4:f6:ac:b7:4b:82:d7:6a:af:e2:dd:1c:ff:df:5c:ee:ce:c2:
06:93:19:d2:90:c0:35:54:ca:82:4a:60:fd:3a:24:ad:67:42:
1f:a4:c1:b0:22:50:ec:6a:61:9b:76:67:76:75:f3:19:ce:36:
da:1b:63:56:22:f0:e7:89:cc:94:63:2c:af:d0:2f:60:85:5d:
3b:ac:ed:37:25:12:58:f6:70:1b:e2:da:95:38:15:fc:38:a2:
1c:ba:82:ad:f8:aa:59:45:e1:2f:02:39:8e:21:51:39:1a:d4:
d9:97:fa:8e:fa:37:aa:41:12:39:5f:c4:a2:b6:db:f0:5d:46:
c3:a1:73:52:57:b5:85:f0:e6:51:d0:d3:e9:99:8a:3e:04:98:
f3:2e:e3:06:f5:ce:dc:5b:be:7f:a3:07:88:5b:65:44:9b:38:
66:05:82:d7:99:46:82:fb:f3:8d:13:13:24:fb:5e:f4:73:2f:
e0:8e:8a:02:9f:36:3f:26:e8:0e:0d:94:e3:16:b1:57:ab:6d:
41:46:09:9c:95:0b:2f:03:dc:96:34:4b:9b:33:b0:b2:1e:e4:
8f:d4:3c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:35:29 2026 by rpki-client