Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.mft
File: zsR4iytpLHEDscueFhf4s2aRDxM.mft (raw, json)
Hash identifier: d30oI3xff3o0FhesYmLqdoPhA7Op0xmnXW3oS1dgtZY=
Subject key identifier: AB:2F:25:88:5E:B6:B6:8F:41:E8:A4:67:83:AE:47:99:FB:A3:CE:49
Authority key identifier: CE:C4:78:8B:2B:69:2C:71:03:B1:CB:9E:16:17:F8:B3:66:91:0F:13
Certificate issuer: /CN=cec4788b2b692c7103b1cb9e1617f8b366910f13
Certificate serial: 019EB845F7933F550203FC848F6CA5778A29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsR4iytpLHEDscueFhf4s2aRDxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.mft
Manifest number: 18EB
Signing time: Thu 11 Jun 2026 20:00:53 +0000
Manifest this update: Thu 11 Jun 2026 20:00:53 +0000
Manifest next update: Fri 12 Jun 2026 20:00:53 +0000
Files and hashes: 1: mnbpCMhVQRFBI3ISYQo0OAu64Rk.roa (hash: kpDbhBfOi3H13L7NCoXgIwXVigbDMdLQLlKaVJyFWOo=)
2: zsR4iytpLHEDscueFhf4s2aRDxM.crl (hash: ALLFXwbXvXDIiuE/C+iHikmxPHSXxQFshNRGWEQOJ44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zsR4iytpLHEDscueFhf4s2aRDxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:45:f7:93:3f:55:02:03:fc:84:8f:6c:a5:77:8a:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec4788b2b692c7103b1cb9e1617f8b366910f13
Validity
Not Before: Jun 11 20:00:53 2026 GMT
Not After : Jun 12 20:00:53 2026 GMT
Subject: CN=ab2f25885eb6b68f41e8a46783ae4799fba3ce49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:06:ae:68:cc:f7:c3:c7:ae:97:be:d5:df:38:
87:14:bd:cb:35:c9:f2:1f:1d:ee:49:dc:4d:ca:08:
aa:5e:15:f9:dc:4e:51:a5:2f:fa:55:89:9b:e6:7d:
f9:49:d2:d5:8c:96:dc:28:69:0b:d3:c3:d5:20:c2:
89:9f:a0:53:1e:da:df:c9:67:b0:f6:2e:33:b8:93:
73:7a:ba:91:04:a6:1f:b3:28:9e:2b:be:aa:e6:5c:
40:20:84:59:f8:18:d0:6d:33:ee:d1:60:45:47:2f:
a3:2d:a0:93:62:bc:4f:ae:22:13:a8:99:52:51:04:
c2:d5:fd:8b:d9:75:cf:5f:80:06:41:dd:55:46:8b:
e1:67:77:b9:11:22:5d:e0:29:b7:af:2f:72:2d:f8:
f9:45:23:d1:2b:18:52:29:44:78:0a:fa:b4:c1:9f:
a5:1a:d6:bd:1a:70:5d:fa:5c:f8:28:a8:c4:47:c5:
30:37:79:3f:d1:84:ee:a8:80:43:59:e2:ec:bd:1c:
a5:c7:86:5e:96:93:e4:a9:36:01:b7:83:93:71:dd:
da:a4:4e:0d:0a:5d:35:6b:28:b9:db:dd:48:7a:f5:
de:e1:1b:1f:21:02:b5:b3:e4:64:c2:3e:db:49:0c:
a0:93:6c:db:33:47:56:ab:98:88:8b:cd:f9:10:a6:
54:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:2F:25:88:5E:B6:B6:8F:41:E8:A4:67:83:AE:47:99:FB:A3:CE:49
X509v3 Authority Key Identifier:
keyid:CE:C4:78:8B:2B:69:2C:71:03:B1:CB:9E:16:17:F8:B3:66:91:0F:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsR4iytpLHEDscueFhf4s2aRDxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:24:08:7d:dc:4d:5d:24:d6:7a:66:d8:b7:2c:ce:74:41:bd:
97:39:c8:38:45:18:82:21:67:1b:99:7a:73:e1:e8:72:fb:d4:
5c:2d:fe:d0:26:cd:42:85:f2:f5:9f:54:7c:69:1c:90:49:da:
51:b0:9a:fd:90:9c:c5:99:9a:30:8b:78:ea:b7:d7:40:52:55:
59:e6:36:45:ec:a3:ab:0a:56:e3:25:4a:04:c9:db:d6:1f:a0:
9e:20:53:d4:aa:23:7d:d5:a9:9a:ff:01:3c:c4:cc:a4:b5:e9:
a5:67:1a:23:38:e9:8c:5c:0d:81:32:00:30:a3:12:25:67:ea:
17:6e:9d:14:42:25:49:89:e3:2f:37:45:f9:b8:b4:b7:55:c0:
1a:91:ac:4b:72:ce:63:28:2f:0f:f4:90:00:b9:27:37:86:d3:
94:74:54:b2:a2:ef:3d:3e:af:a1:9a:e7:9c:35:59:9a:d0:8d:
67:a4:90:04:28:cc:e8:a8:67:14:8c:d6:2d:04:78:66:55:17:
4f:b4:76:bc:35:09:9b:7b:17:ce:4a:bd:db:db:6c:d1:f5:58:
05:34:87:98:92:7e:c9:c7:74:32:e8:08:69:ad:bc:62:bd:d5:
7e:6a:45:e9:44:a2:60:db:b8:ee:b4:5f:4a:6c:ef:41:38:21:
96:58:8d:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:54:32 2026 by rpki-client