Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.mft
File: zr9l4AadvMdre1VujB1wWInfJ-k.mft (raw, json)
Hash identifier: rk4v3btGUfPH2RVL/DNMo65mdWPItKtW7k7M+7rn8nA=
Subject key identifier: 93:D0:CF:F2:A8:D3:42:54:8C:B1:DE:1D:BE:98:62:85:6F:70:AB:20
Authority key identifier: CE:BF:65:E0:06:9D:BC:C7:6B:7B:55:6E:8C:1D:70:58:89:DF:27:E9
Certificate issuer: /CN=cebf65e0069dbcc76b7b556e8c1d705889df27e9
Certificate serial: 019F12D30A5961D84D670E718976A759A576
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zr9l4AadvMdre1VujB1wWInfJ-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.mft
Manifest number: 1994
Signing time: Mon 29 Jun 2026 10:00:48 +0000
Manifest this update: Mon 29 Jun 2026 10:00:48 +0000
Manifest next update: Tue 30 Jun 2026 10:00:48 +0000
Files and hashes: 1: kLUG7I7zaleUboTqrqB19XXsTkQ.roa (hash: cKKeB+BIlOYQDOr355c8ocGK4xiw2EqpjCd7kzeueqs=)
2: ku0WTxDvPv2BRSWmhVXxJBzi0EM.roa (hash: gVb5IHgLpvS8ffqO/hNhQNz/nK0f5pvRNLYLZEY7RQs=)
3: zr9l4AadvMdre1VujB1wWInfJ-k.crl (hash: WhWlI4eu2jbOOVBkNszSWVFEtZD70PMeFqukR0Bx+XE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/zr9l4AadvMdre1VujB1wWInfJ-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 10:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:d3:0a:59:61:d8:4d:67:0e:71:89:76:a7:59:a5:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cebf65e0069dbcc76b7b556e8c1d705889df27e9
Validity
Not Before: Jun 29 10:00:48 2026 GMT
Not After : Jun 30 10:00:48 2026 GMT
Subject: CN=93d0cff2a8d342548cb1de1dbe9862856f70ab20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d9:74:90:df:30:25:2d:be:16:70:cc:f2:24:
74:49:19:50:45:91:0c:d2:3c:d0:1e:06:88:ee:c4:
cc:83:af:16:34:92:ba:84:3d:d4:f2:87:8a:4a:59:
bd:2b:e4:fb:25:b6:1c:cd:26:3c:17:6e:4b:a1:13:
b4:ef:9c:a4:e5:e8:fe:09:28:25:7c:a3:9b:b5:95:
21:e4:b5:97:6a:60:06:90:f8:74:74:79:78:7d:e3:
11:c0:6b:60:e8:67:00:02:00:a3:0d:9d:79:b9:5c:
d2:0d:de:15:41:ba:d2:3d:24:a9:79:64:66:1c:d6:
5b:6c:cd:5a:8e:63:00:1c:67:e4:b1:3d:21:3f:de:
51:3e:e5:b0:94:1c:59:24:83:f4:7c:ce:79:67:a6:
09:20:3b:9c:2b:9b:b6:2c:14:0f:27:ff:8d:49:9d:
c1:8f:e3:55:ab:d4:e8:8e:43:48:90:22:a2:57:5f:
a8:73:68:cc:03:90:a9:14:c6:f8:49:16:ea:5d:65:
50:64:2e:41:ea:4b:a0:1d:2f:a0:6a:79:4b:1d:7c:
fd:35:ce:e6:69:1a:be:f1:df:9b:3b:11:7d:88:8a:
19:55:dc:a1:34:50:9d:5d:2b:66:b8:2d:80:c7:4f:
bc:f7:ef:13:90:d1:ed:76:4c:62:ea:db:48:1e:bd:
a9:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:D0:CF:F2:A8:D3:42:54:8C:B1:DE:1D:BE:98:62:85:6F:70:AB:20
X509v3 Authority Key Identifier:
keyid:CE:BF:65:E0:06:9D:BC:C7:6B:7B:55:6E:8C:1D:70:58:89:DF:27:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zr9l4AadvMdre1VujB1wWInfJ-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:25:c1:1d:e5:80:84:50:67:33:0b:4c:c9:47:ab:ce:83:af:
69:fe:e1:b7:6d:ff:45:04:2a:e1:86:64:48:68:29:cd:e9:22:
bf:4a:53:0e:1e:e6:60:74:19:3a:41:f3:98:ff:77:69:3a:7c:
dc:1f:08:77:1a:c3:78:88:44:4b:fe:23:71:00:6b:91:93:48:
2d:e9:c5:3d:8c:41:21:cb:28:6a:10:ac:5e:e0:89:7b:65:56:
54:61:87:c8:b9:0c:07:22:f8:44:ab:ac:6b:0e:77:85:29:5c:
4b:8d:d6:15:ee:55:33:ec:f4:87:36:ee:50:ac:d0:8a:32:1a:
fd:01:95:f5:27:9d:cb:e0:4e:c8:09:ac:fd:56:db:ba:c0:a3:
bb:f6:89:9a:dc:8a:9d:b7:8a:bc:77:7e:32:63:58:26:be:19:
73:a7:1a:67:9d:97:cd:14:18:c3:98:93:35:8b:2c:5a:51:0b:
d9:ac:a1:4a:a7:44:79:77:3b:ad:dd:75:48:7e:a5:40:86:11:
41:af:8f:ce:14:87:bc:74:57:f2:e3:b6:8a:bb:fe:a0:2b:fc:
46:f0:e3:a3:60:ed:5e:e6:b8:ba:e8:08:44:86:6d:59:e1:bb:
32:ca:21:da:04:ea:cd:b1:06:ab:82:c8:7b:ba:35:8b:09:00:
8b:65:ef:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 15:42:27 2026 by rpki-client