Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.mft
File: z0D92CoP3ztwvhgiHuumDYAe178.mft (raw, json)
Hash identifier: kZjjKmTWdR7o3S/lh0oj5OE4p4QU0I4nlAQxjKk9D0A=
Subject key identifier: F9:E0:27:49:4B:B4:49:E3:EF:CF:D1:6C:93:8D:B6:4B:00:99:89:3F
Authority key identifier: CF:40:FD:D8:2A:0F:DF:3B:70:BE:18:22:1E:EB:A6:0D:80:1E:D7:BF
Certificate issuer: /CN=cf40fdd82a0fdf3b70be18221eeba60d801ed7bf
Certificate serial: 019E9BBBF004285BB5C7D038A0FD1202F18A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z0D92CoP3ztwvhgiHuumDYAe178.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.mft
Manifest number: 195B
Signing time: Sat 06 Jun 2026 07:00:45 +0000
Manifest this update: Sat 06 Jun 2026 07:00:45 +0000
Manifest next update: Sun 07 Jun 2026 07:00:45 +0000
Files and hashes: 1: F_Dk1EXyZalcSUrQVrmmhufc-3c.roa (hash: Bud8p3xLXlXOrM2nbGi5ghblIRWjV7KfIKq7F8d9FoQ=)
2: P8VBM2Vt78MH0hTsTsDYoN1DCwo.roa (hash: BNrt6BqKbc/fkjdmpvHEP4BZdwanUa88eWbx1Ysrn8g=)
3: z0D92CoP3ztwvhgiHuumDYAe178.crl (hash: pSvrnxiQ/CkOOdBUQvVgfT7KST+dNLxd8oWLHh1H/8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.mft
rsync://rpki.ripe.net/repository/DEFAULT/z0D92CoP3ztwvhgiHuumDYAe178.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 04:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9b:bb:f0:04:28:5b:b5:c7:d0:38:a0:fd:12:02:f1:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf40fdd82a0fdf3b70be18221eeba60d801ed7bf
Validity
Not Before: Jun 6 07:00:45 2026 GMT
Not After : Jun 7 07:00:45 2026 GMT
Subject: CN=f9e027494bb449e3efcfd16c938db64b0099893f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b8:4a:27:66:cc:9a:55:da:c9:6b:66:41:91:
54:33:b5:a1:75:47:e5:29:83:66:ad:ee:71:2c:3d:
2f:48:13:d9:2b:8b:14:57:32:26:d7:c8:fb:13:0b:
d5:a9:f3:59:ec:cb:2a:0c:a2:1b:c6:68:a2:4f:67:
22:24:c7:d3:65:8f:d1:e0:c0:93:03:fd:7a:ca:70:
a2:5e:64:aa:84:86:e4:64:3d:bd:19:bb:62:6f:b8:
8c:4b:d5:b7:fe:13:00:fa:ed:62:fe:8e:f2:13:bf:
65:39:7d:21:22:03:7c:d3:3d:6e:08:f4:19:0c:e4:
64:88:86:4b:89:af:c5:61:77:90:77:58:0a:08:31:
56:33:03:92:56:34:29:eb:fb:9b:9e:84:3b:5d:e0:
23:8f:28:6d:b7:35:86:79:be:48:d6:00:9f:cd:b8:
40:07:78:a1:ba:58:a6:c6:9e:7c:73:1d:a9:39:c3:
bf:2b:ac:25:fd:1c:34:75:35:4c:f4:11:a6:bf:19:
a1:5d:99:53:5e:94:1e:f9:95:1f:83:27:55:74:60:
ba:77:5e:c4:2f:d7:ca:04:4f:f4:14:39:52:3b:84:
03:61:b2:20:92:ae:c3:a4:3f:af:8c:3c:09:ce:72:
f5:61:5a:44:44:52:53:0e:c8:8d:4f:24:7c:e2:53:
6d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:E0:27:49:4B:B4:49:E3:EF:CF:D1:6C:93:8D:B6:4B:00:99:89:3F
X509v3 Authority Key Identifier:
keyid:CF:40:FD:D8:2A:0F:DF:3B:70:BE:18:22:1E:EB:A6:0D:80:1E:D7:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z0D92CoP3ztwvhgiHuumDYAe178.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:b2:25:7c:04:24:c9:c8:2a:7b:44:35:95:e6:03:19:61:23:
f0:31:35:9b:05:58:08:24:ca:a3:43:bb:76:52:4d:8c:1d:ac:
23:48:c1:a2:16:c9:02:e7:f8:08:6d:c2:95:18:dd:1f:59:df:
19:a0:31:77:9b:68:2b:e3:e6:67:b4:3b:c5:93:b2:3a:07:ac:
5e:86:e9:e2:09:42:f2:6a:f7:2f:25:72:80:4f:61:51:a2:43:
60:1d:25:c6:e1:96:b1:e3:40:0f:f6:0a:c9:4e:dc:04:3e:67:
28:36:e9:94:c3:9a:44:c9:c1:e2:ed:c4:4f:2f:30:b5:62:da:
2e:99:80:1f:50:c7:8f:37:50:c7:ff:d3:10:60:37:b2:1c:80:
cd:40:f6:0f:46:c0:00:3b:38:d6:60:91:27:dd:d9:cb:38:eb:
bb:7c:d1:da:fe:88:62:35:22:1b:9e:5e:a0:e1:c2:0b:60:c5:
73:ab:e6:1b:70:27:68:99:9f:ee:f8:4e:f6:c2:08:51:ca:ae:
70:53:e5:e1:6c:00:e4:8f:fc:86:3a:ed:c9:76:5e:ea:cd:ff:
39:55:fc:4e:52:b5:80:65:65:03:ac:fd:24:fd:e2:59:dd:ae:
bc:e9:e7:2a:5f:1b:d9:a0:ce:df:46:0f:07:60:3a:ae:e4:50:
25:63:28:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 14:29:22 2026 by rpki-client