Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/55c2a0-49df-4d96-988f-4f9d04010710/1/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.mft
File: Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.mft (raw, json)
Hash identifier: zrdSZ1n8zIhlmHYNJCp/3x3z9H/5h+wqLHqUDbuF9SA=
Subject key identifier: 75:8D:72:F6:25:BC:DB:8B:5E:94:F2:54:38:4E:3F:AA:BA:D1:8C:DE
Authority key identifier: 67:5F:BE:4B:1F:00:23:3E:D7:67:99:00:71:F0:45:90:C9:0C:88:7D
Certificate issuer: /CN=675fbe4b1f00233ed767990071f04590c90c887d
Certificate serial: 019EB76A72AE110D8A4917E239118F2B811D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/55c2a0-49df-4d96-988f-4f9d04010710/1/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.mft
Manifest number: 11EE
Signing time: Thu 11 Jun 2026 16:01:07 +0000
Manifest this update: Thu 11 Jun 2026 16:01:07 +0000
Manifest next update: Fri 12 Jun 2026 16:01:07 +0000
Files and hashes: 1: 1IAT8p5zJE7Cjb7zerrnkgwwgBo.roa (hash: JK2Pcklbnx9Qld5WIKxmuBJj4g+yCjwGVY5ntHTVBjs=)
2: Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.crl (hash: LMbK94L5wjbMp41/mex70D9vt8A6mxNUhajlmrUYCNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/55c2a0-49df-4d96-988f-4f9d04010710/1/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/55c2a0-49df-4d96-988f-4f9d04010710/1/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:6a:72:ae:11:0d:8a:49:17:e2:39:11:8f:2b:81:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=675fbe4b1f00233ed767990071f04590c90c887d
Validity
Not Before: Jun 11 16:01:07 2026 GMT
Not After : Jun 12 16:01:07 2026 GMT
Subject: CN=758d72f625bcdb8b5e94f254384e3faabad18cde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:46:11:af:b6:43:c7:71:21:1d:80:a7:36:b3:
4e:ef:37:dc:50:66:88:f4:de:65:9f:3f:e2:0f:54:
dc:63:54:1f:d0:8c:91:9c:1b:6a:9e:e2:44:9e:2b:
74:c9:31:64:08:21:54:82:36:6d:72:5c:f8:50:45:
41:4c:e7:cb:3c:b2:1c:9d:8b:37:d8:f5:a3:21:57:
ea:b0:05:1f:52:88:66:70:dc:17:6e:ef:e0:43:9e:
7e:f7:ce:99:da:b7:28:b0:c2:ad:62:9c:f7:1d:32:
53:32:2e:63:fb:90:fa:43:f5:8e:03:25:90:26:a8:
22:cb:bd:80:b6:1f:ab:17:86:85:b4:d5:5f:47:a8:
29:9f:11:f8:1f:29:13:de:87:3e:96:58:96:66:68:
5f:7d:06:2d:ba:66:0c:76:bc:6a:dd:61:96:e7:a6:
c9:66:99:24:f0:bf:8a:5f:31:f1:e9:e4:64:b0:65:
bb:81:4c:16:74:9d:9d:2c:2b:36:c3:44:54:a3:0e:
7b:78:14:60:f2:2a:c6:62:d6:c2:1a:6d:57:d2:8a:
a9:52:c5:a4:fc:fb:b0:51:b5:f5:de:67:41:81:56:
84:1c:56:4d:fe:83:6c:c6:f4:47:08:08:21:ae:78:
8d:9b:c4:af:67:ed:3d:58:51:00:ba:1d:e0:8a:d5:
87:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:8D:72:F6:25:BC:DB:8B:5E:94:F2:54:38:4E:3F:AA:BA:D1:8C:DE
X509v3 Authority Key Identifier:
keyid:67:5F:BE:4B:1F:00:23:3E:D7:67:99:00:71:F0:45:90:C9:0C:88:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/55c2a0-49df-4d96-988f-4f9d04010710/1/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/55c2a0-49df-4d96-988f-4f9d04010710/1/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:20:df:1a:cf:a2:ee:3b:53:7a:45:94:42:fc:b8:02:23:58:
89:1a:70:cb:66:45:81:df:8e:17:23:26:07:ea:44:18:c3:45:
2b:7f:6b:05:e6:c7:7d:c9:bd:c7:7b:e5:4a:0d:2d:66:16:32:
4d:41:9f:12:b8:4b:7d:85:05:98:25:80:f9:4b:8c:2e:8a:53:
35:fa:f1:97:37:6c:9e:d7:9e:0c:41:19:c5:82:3c:03:6f:6c:
7e:56:32:69:c5:3e:00:f4:c2:16:33:0f:77:6f:91:8c:40:bd:
48:49:5b:e5:1d:1b:94:01:dc:7f:e0:95:4b:83:b4:3c:9b:e1:
89:31:ca:c7:ee:8d:54:04:04:8b:e9:ee:f9:10:a7:1f:81:22:
a1:22:36:39:90:64:91:43:46:36:37:b9:08:5e:fb:3f:71:49:
74:53:d3:f0:c8:0a:f2:d7:c0:a4:55:17:84:d0:36:2d:d0:f4:
4d:af:6d:e8:3d:5a:62:c0:bc:65:51:ad:59:79:77:c7:bf:6d:
f7:81:00:2b:c5:71:b4:03:eb:7e:a0:83:10:c4:13:9f:08:a2:
33:2a:ed:86:54:1c:3f:f4:a5:66:a1:c3:f4:cf:f3:4f:45:75:
a6:b3:c5:e0:0c:45:81:70:17:b6:83:c5:3c:19:7d:55:5b:02:
d3:e0:c8:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 17:53:29 2026 by rpki-client