Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.mft
File: zPmm0vbNWIp39CNiLmuNHGVLzfI.mft (raw, json)
Hash identifier: djVJ5BTjILN2SfV19CphIDqbcrCvJ5PYdpSYWVdw88I=
Subject key identifier: 3E:A1:2F:66:FD:AE:31:F5:69:D7:27:34:3C:B5:B6:A1:B8:DA:0D:38
Authority key identifier: CC:F9:A6:D2:F6:CD:58:8A:77:F4:23:62:2E:6B:8D:1C:65:4B:CD:F2
Certificate issuer: /CN=ccf9a6d2f6cd588a77f423622e6b8d1c654bcdf2
Certificate serial: 019EB7336ECD73780591051C22FB0E17D37A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zPmm0vbNWIp39CNiLmuNHGVLzfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.mft
Manifest number: 1956
Signing time: Thu 11 Jun 2026 15:01:01 +0000
Manifest this update: Thu 11 Jun 2026 15:01:01 +0000
Manifest next update: Fri 12 Jun 2026 15:01:01 +0000
Files and hashes: 1: Utsq8tMmY3izY1fN7UB7ffBp7M0.roa (hash: kD7h2+kSGCGsnzgnalUMgkhy9wvQ1pxuWkQeWsMBxuE=)
2: qm3Y1xRAyMug1o4ZkPIWA5TQn1A.roa (hash: ah0q5b8U5QR+bHmaVCJCImjUhbJsUIFGC+OnAqXZW1w=)
3: zPmm0vbNWIp39CNiLmuNHGVLzfI.crl (hash: hmMfQdch7bfk6b6W19QaA2GrpS2f92+FZsyqwDQxOpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zPmm0vbNWIp39CNiLmuNHGVLzfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:33:6e:cd:73:78:05:91:05:1c:22:fb:0e:17:d3:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccf9a6d2f6cd588a77f423622e6b8d1c654bcdf2
Validity
Not Before: Jun 11 15:01:01 2026 GMT
Not After : Jun 12 15:01:01 2026 GMT
Subject: CN=3ea12f66fdae31f569d727343cb5b6a1b8da0d38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ed:8b:75:e6:7b:02:ea:9a:94:e4:15:f9:2d:
89:91:61:70:1f:d8:3c:6a:0a:b1:d5:fe:e5:16:07:
7c:c3:a9:b0:a9:73:a6:95:da:c7:f3:a9:11:e8:63:
94:41:22:b9:66:0c:d1:8f:36:a6:30:46:40:a8:4e:
2e:e9:9f:6b:c5:fe:ba:96:76:60:8b:06:7a:c0:0f:
83:24:b7:35:c4:fa:b9:da:0c:c2:0d:86:1b:6d:79:
68:d7:64:d5:a9:5d:9a:24:42:05:12:a5:df:61:c9:
8a:34:cb:4f:30:3f:9a:98:29:de:9f:4c:a4:af:b9:
a1:1a:48:87:0d:69:b7:86:9d:66:2c:7a:ae:37:cc:
ed:bf:a3:d2:26:66:a1:00:63:94:e5:9a:e2:e9:26:
e9:b2:30:78:5e:79:ce:d4:7e:59:1c:2f:99:d5:9d:
d7:4c:76:24:4e:f6:0f:4a:97:51:e8:55:b6:53:d2:
4f:59:50:66:fc:f8:ea:87:c9:18:e3:eb:13:27:a1:
0b:79:ac:9e:12:38:fb:bb:32:6b:d9:4d:76:a3:ed:
a3:f8:2f:f2:92:66:32:6b:f7:25:2e:e6:9d:1a:b5:
87:f3:b6:0f:34:5f:e9:c5:fd:4d:f0:cf:a8:d4:0c:
b6:81:e7:58:40:02:83:2b:f5:1d:3e:f6:64:bb:6b:
e7:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:A1:2F:66:FD:AE:31:F5:69:D7:27:34:3C:B5:B6:A1:B8:DA:0D:38
X509v3 Authority Key Identifier:
keyid:CC:F9:A6:D2:F6:CD:58:8A:77:F4:23:62:2E:6B:8D:1C:65:4B:CD:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPmm0vbNWIp39CNiLmuNHGVLzfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:61:a2:9b:be:88:93:fa:f0:bd:e2:5c:ca:81:13:5e:0a:7e:
6a:59:a8:46:00:f5:02:17:db:73:fa:f8:72:9a:91:dd:b5:f8:
43:66:5c:3a:c7:8e:99:d6:1f:0d:67:1a:8d:8c:7a:93:97:ca:
7b:50:04:2e:5f:20:b7:d7:1a:7d:96:ae:5e:da:bf:3a:44:91:
8c:19:4f:3b:73:d2:69:f7:df:28:28:e7:d9:05:7a:36:81:72:
b1:66:92:99:5d:9a:87:87:2c:aa:9b:60:1c:71:3c:a0:6d:43:
05:88:0f:92:2c:67:77:bd:4e:9d:ca:98:69:55:73:40:e8:1b:
f6:21:05:d7:59:a4:10:b8:0a:56:7d:94:1b:aa:39:87:79:9b:
5f:29:e1:3a:74:4c:87:04:94:fc:a3:79:a1:0d:a9:f1:b0:4e:
fe:fe:dc:31:c0:8d:64:2d:85:43:23:ad:46:56:66:22:6c:4e:
7c:60:8b:e9:3e:32:ff:e4:53:04:5b:8e:9d:55:9b:6a:fe:47:
b1:d1:a0:f4:1d:af:8b:80:02:ed:be:23:87:bb:26:10:65:61:
6b:10:e1:b7:d1:29:ec:90:62:8c:db:14:97:bd:79:e8:3a:47:
31:6f:ac:c5:c3:c0:b5:23:e3:6b:23:21:23:94:71:e4:8f:25:
9a:74:cb:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:26:05 2026 by rpki-client