Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/736a4a-39e0-4119-b4cb-082d924c2f33/1/ZctPbNhIn93Rc5cKDvRNThVHpAU.mft
File: ZctPbNhIn93Rc5cKDvRNThVHpAU.mft (raw, json)
Hash identifier: wMTLJy8H5k3BzX2aWoJREHfkoF8E9n81OqhIYPuJ9Ek=
Subject key identifier: 81:34:D8:A5:20:50:02:EC:A9:DF:A1:82:0C:38:09:08:89:10:DB:A2
Authority key identifier: 65:CB:4F:6C:D8:48:9F:DD:D1:73:97:0A:0E:F4:4D:4E:15:47:A4:05
Certificate issuer: /CN=65cb4f6cd8489fddd173970a0ef44d4e1547a405
Certificate serial: 019F129BF2B88BF102CCED80CCC5585CED79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZctPbNhIn93Rc5cKDvRNThVHpAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/736a4a-39e0-4119-b4cb-082d924c2f33/1/ZctPbNhIn93Rc5cKDvRNThVHpAU.mft
Manifest number: 10EE
Signing time: Mon 29 Jun 2026 09:00:37 +0000
Manifest this update: Mon 29 Jun 2026 09:00:37 +0000
Manifest next update: Tue 30 Jun 2026 09:00:37 +0000
Files and hashes: 1: 2LmzHT0ZIbdBKtvls7SHR70OMro.roa (hash: tbuaZMJ3bR1Rnp3JGF/Y5/b7H89NRs10IqAGEmMX3hw=)
2: Wd51v5bh6CVZd6bJidGHZJXb2us.asa (hash: 7OczW/y3GKch9e1XpUdfbwi9oN+4AbqKJfslhUFyQQo=)
3: ZctPbNhIn93Rc5cKDvRNThVHpAU.crl (hash: ketokCFa4R+jSA7iTUeAkz0JDxeprgkHQ5X4Xm88vF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/736a4a-39e0-4119-b4cb-082d924c2f33/1/ZctPbNhIn93Rc5cKDvRNThVHpAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/736a4a-39e0-4119-b4cb-082d924c2f33/1/ZctPbNhIn93Rc5cKDvRNThVHpAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZctPbNhIn93Rc5cKDvRNThVHpAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:9b:f2:b8:8b:f1:02:cc:ed:80:cc:c5:58:5c:ed:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65cb4f6cd8489fddd173970a0ef44d4e1547a405
Validity
Not Before: Jun 29 09:00:37 2026 GMT
Not After : Jun 30 09:00:37 2026 GMT
Subject: CN=8134d8a5205002eca9dfa1820c3809088910dba2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:41:cd:00:3f:8d:61:b5:cf:f2:a4:09:22:76:
21:7b:34:4e:63:1c:3c:f7:6b:34:dd:b6:b5:c7:c2:
a9:e6:26:97:8b:0e:72:92:fd:9b:08:b5:dd:77:8e:
35:b2:15:d5:c8:31:03:4f:24:c6:3a:67:c7:af:8f:
5f:9e:60:29:a8:56:e6:a7:85:0f:04:e8:f5:5d:03:
ff:80:ab:27:bc:be:3f:98:27:26:81:41:42:93:bc:
ff:59:26:e0:f4:41:0f:dc:ab:f1:1b:86:b5:48:fc:
0c:fa:2f:5b:de:a8:9f:e4:ba:86:d7:4f:e8:f4:e7:
b1:9b:b0:1a:0c:65:a2:83:7d:1f:91:2b:af:e1:ef:
6b:b5:82:68:39:c5:de:d3:07:bc:e2:79:dd:15:17:
6f:ab:b9:56:46:fb:fe:cd:fb:a0:dc:c0:ba:81:65:
e0:e5:58:ff:83:9f:da:59:8a:ec:14:f8:38:56:48:
2f:ff:de:2f:97:89:0c:a0:89:3d:a2:cd:80:86:1e:
92:1d:c0:ed:94:8e:f9:d4:a8:29:b0:69:24:9f:25:
17:8d:2e:74:2a:fb:f2:f0:6b:e5:37:9e:32:ae:3f:
d1:0f:5c:45:49:c9:a1:93:63:e7:5f:93:87:ed:f6:
77:fa:7e:ec:5f:ec:5d:50:d7:c7:cd:3d:b6:57:6f:
d8:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:34:D8:A5:20:50:02:EC:A9:DF:A1:82:0C:38:09:08:89:10:DB:A2
X509v3 Authority Key Identifier:
keyid:65:CB:4F:6C:D8:48:9F:DD:D1:73:97:0A:0E:F4:4D:4E:15:47:A4:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZctPbNhIn93Rc5cKDvRNThVHpAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/736a4a-39e0-4119-b4cb-082d924c2f33/1/ZctPbNhIn93Rc5cKDvRNThVHpAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/736a4a-39e0-4119-b4cb-082d924c2f33/1/ZctPbNhIn93Rc5cKDvRNThVHpAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:0e:cc:74:86:76:6b:2a:48:5d:88:38:dd:c6:4c:92:f9:85:
1d:ab:03:26:0f:71:dc:f6:a4:7e:2e:64:f9:f7:d6:ce:8a:24:
ec:10:a5:cc:95:c9:ac:ee:ef:bb:61:a0:f0:17:7d:81:e5:39:
7b:41:ce:fa:50:1c:04:29:a5:99:c8:52:7c:b4:99:1a:7d:8b:
37:e2:f5:8c:98:81:f4:74:25:2e:84:bf:b7:3b:8c:96:ac:65:
d3:ba:c4:d6:d8:18:66:39:8b:50:e6:09:98:f4:4c:29:5e:f2:
1d:72:dc:c7:24:15:b4:08:73:68:25:ca:0a:46:58:22:72:a8:
a0:77:b9:78:12:19:4e:a8:c4:f9:57:d7:1d:e3:85:63:ac:7c:
b9:47:d4:29:50:5e:3f:21:5c:f9:47:f2:65:33:44:27:7c:9d:
6d:5e:45:87:c9:cf:69:6e:fe:40:d0:65:0a:d4:a3:ce:ec:d8:
c5:21:6b:02:0e:59:5c:a7:c0:eb:35:23:9f:5e:6f:75:87:54:
63:a9:2f:86:9f:54:a8:2b:f6:e6:91:9b:be:27:cc:64:ed:49:
9d:3c:7d:62:db:b6:68:9e:ca:93:df:ce:8d:b8:27:a2:cf:18:
f3:9a:6b:eb:b8:7b:c9:ad:f4:14:a9:26:70:ce:be:32:93:9f:
f4:32:58:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:38:17 2026 by rpki-client