Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft
File: sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft (raw, json)
Hash identifier: dRsblc/6bxJWsH3TrS7hLuZ33sO2+Ce1lXGPJGOfv3Y=
Subject key identifier: FD:8E:29:B3:B3:CF:7A:32:A5:18:73:49:56:D8:EB:F2:08:83:F2:EB
Authority key identifier: B1:94:F0:30:4E:ED:D3:63:C6:62:2F:D9:1C:59:B1:08:71:AA:30:44
Certificate issuer: /CN=b194f0304eedd363c6622fd91c59b10871aa3044
Certificate serial: 019EBA3464B86D753B030053136F9962C074
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sZTwME7t02PGYi_ZHFmxCHGqMEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft
Manifest number: 195B
Signing time: Fri 12 Jun 2026 05:00:56 +0000
Manifest this update: Fri 12 Jun 2026 05:00:56 +0000
Manifest next update: Sat 13 Jun 2026 05:00:56 +0000
Files and hashes: 1: B9HNNW3Bz7oID9G3-lfUfNqxyrY.roa (hash: tzCu3LyuSxup7J333i9m+mIRLj60qx1pJbahNRpyJGA=)
2: MUOyRWPN46PNKkdduP0g7nQfNok.roa (hash: fGl9qQgDH816kxRklhwGBTJ3WAbYJUjNKNT/W0cEqrc=)
3: sZTwME7t02PGYi_ZHFmxCHGqMEQ.crl (hash: 8Uzzsa1a/J/0HxhzkfXlM8A0OhiJxz3/4Hlj41ESyTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sZTwME7t02PGYi_ZHFmxCHGqMEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 22:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ba:34:64:b8:6d:75:3b:03:00:53:13:6f:99:62:c0:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b194f0304eedd363c6622fd91c59b10871aa3044
Validity
Not Before: Jun 12 05:00:56 2026 GMT
Not After : Jun 13 05:00:56 2026 GMT
Subject: CN=fd8e29b3b3cf7a32a518734956d8ebf20883f2eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:7e:b1:19:5f:d1:75:6b:3f:44:8e:e0:1c:8f:
58:a7:4c:6d:e3:ee:37:ec:5e:3c:d2:26:5c:b8:6d:
1e:2f:b4:db:44:d2:ac:bd:f2:6c:fe:f8:cb:17:5d:
d6:e1:59:c5:2e:ed:e9:8a:70:15:68:64:07:50:28:
62:bf:b4:d8:a7:cc:77:48:de:79:66:23:60:15:c1:
51:6e:fa:60:a8:7b:38:9f:3b:6d:9d:85:dd:ab:81:
26:b2:3e:75:39:36:3f:b1:4e:e1:69:52:c9:97:a5:
ad:ca:21:16:3a:b1:c3:7c:c7:46:6f:f1:19:d4:42:
58:62:97:4e:02:b1:09:d5:ec:fd:23:bd:32:26:f7:
c3:07:29:d7:8b:7d:5e:d8:f6:f9:b9:38:a3:c3:e6:
60:dd:0e:b7:0d:01:f5:44:58:fa:9f:73:18:7e:8b:
9d:75:08:26:dd:43:21:87:12:86:63:74:bd:6f:dd:
5d:d1:5e:50:bb:4f:fe:12:2d:8c:4f:85:6c:c5:ff:
e7:ff:55:30:b9:16:12:f3:a3:86:aa:30:60:53:76:
a4:6e:a1:a0:0b:84:09:4f:88:c1:e6:95:b8:e2:c9:
aa:49:19:10:73:35:84:3b:5b:10:ee:ec:30:b3:d4:
80:ef:fc:1a:7b:46:5a:4a:31:02:f1:e7:0a:1d:61:
16:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:8E:29:B3:B3:CF:7A:32:A5:18:73:49:56:D8:EB:F2:08:83:F2:EB
X509v3 Authority Key Identifier:
keyid:B1:94:F0:30:4E:ED:D3:63:C6:62:2F:D9:1C:59:B1:08:71:AA:30:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZTwME7t02PGYi_ZHFmxCHGqMEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:ac:40:49:2f:59:e9:17:28:41:5e:99:a6:ad:d4:e9:0b:75:
ad:54:90:6e:41:12:df:75:8b:93:b1:54:4b:69:9a:fa:d9:0f:
de:ea:d2:28:3d:06:ad:48:e0:55:49:98:ee:5a:b2:8e:0c:31:
fe:87:f2:74:b9:95:87:54:04:25:fe:a4:96:42:42:16:c5:a8:
89:60:de:40:5d:aa:fa:77:56:a3:21:64:6c:6a:7f:fa:f6:9d:
7f:4e:90:71:6f:7a:3f:5d:f3:1b:81:1f:0a:7d:d1:fc:94:67:
92:b0:e8:39:cf:7c:c9:2c:ad:ef:47:6c:a8:cd:f7:de:2e:c4:
ea:a4:84:9c:55:83:a3:f6:7b:cc:74:44:dc:e0:b2:0d:94:b1:
ca:d7:dc:d5:dd:54:5e:46:90:62:71:50:d0:ba:df:3f:bb:f1:
55:6b:60:1e:e1:21:05:50:eb:0e:5f:b0:55:96:a7:13:4b:74:
7e:99:61:3f:16:84:77:74:25:c1:cd:f6:51:91:d9:31:ce:1e:
be:ef:9c:78:ea:f3:ea:9f:17:28:70:f4:03:19:10:90:74:0e:
e7:5a:1f:d0:fd:55:6e:99:f3:2c:72:28:05:60:e4:21:3d:28:
10:7e:14:58:28:0a:58:72:46:e4:0e:60:54:06:f1:16:e4:80:
76:ff:ee:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 07:44:36 2026 by rpki-client