Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.mft
File: zO__wVqDo4vdqM_hIMM1Jn3OUPM.mft (raw, json)
Hash identifier: dWDVXn/aRYSJmPJ9RRxQGXBqYGEpOiwc3Wx8FDsOAk4=
Subject key identifier: 6A:82:15:1A:DC:5C:85:63:8C:80:77:B1:C2:A9:51:CD:D9:B8:B0:05
Authority key identifier: CC:EF:FF:C1:5A:83:A3:8B:DD:A8:CF:E1:20:C3:35:26:7D:CE:50:F3
Certificate issuer: /CN=ccefffc15a83a38bdda8cfe120c335267dce50f3
Certificate serial: 019EFB01D6C8E6B3771ADAD62A65F8BBA276
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zO__wVqDo4vdqM_hIMM1Jn3OUPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.mft
Manifest number: 09B1
Signing time: Wed 24 Jun 2026 19:01:02 +0000
Manifest this update: Wed 24 Jun 2026 19:01:02 +0000
Manifest next update: Thu 25 Jun 2026 19:01:02 +0000
Files and hashes: 1: aESuuALkp9R98yDiNUY5nveL4-o.roa (hash: o135yeh0bwtH5IHdNJMNH9c/+RcrghX/j14puM1j2sk=)
2: zO__wVqDo4vdqM_hIMM1Jn3OUPM.crl (hash: iy138v5ZlXjzU17J01fX0i1JCxE8rr3Aodtg4RZuauI=)
3: zp6kT4fjph_A7Z-y494w10c-4u0.roa (hash: WOnZMPb4q3t7/YEohAO+g25GuBKKPvaAblQVDeWj5K0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zO__wVqDo4vdqM_hIMM1Jn3OUPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 14:31:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fb:01:d6:c8:e6:b3:77:1a:da:d6:2a:65:f8:bb:a2:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccefffc15a83a38bdda8cfe120c335267dce50f3
Validity
Not Before: Jun 24 19:01:02 2026 GMT
Not After : Jun 25 19:01:02 2026 GMT
Subject: CN=6a82151adc5c85638c8077b1c2a951cdd9b8b005
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:10:2f:44:1b:81:ae:2c:12:2e:c0:54:6b:e4:
3d:95:74:54:45:c6:dd:91:46:3c:fa:f7:fb:43:82:
ee:52:93:e7:7d:77:c8:55:ae:18:a4:dd:2f:69:87:
c4:25:9b:e2:61:42:d4:75:bc:d9:91:42:16:37:55:
47:74:18:1c:d4:2f:be:9a:b0:d9:f1:da:df:4c:1f:
78:53:0e:19:15:8c:a8:fb:fb:fc:51:69:63:16:df:
6f:92:73:65:c3:79:ae:17:a7:fe:aa:ae:53:89:65:
a0:4f:99:b8:7d:cf:45:fe:16:bd:ee:ad:d8:b7:a3:
06:46:45:6b:bc:81:74:df:36:9b:e6:4d:95:2b:c0:
f1:cd:33:29:ff:ea:ae:97:78:d4:ce:99:9e:5b:f6:
dd:bb:86:11:c5:60:61:1e:62:0a:90:1a:70:64:d2:
25:36:cb:d0:54:32:43:c0:51:77:fc:57:37:7f:c5:
72:e6:f3:b6:2a:c2:36:51:2b:47:2d:65:31:ba:63:
0b:de:90:7b:d0:57:8f:6f:32:2d:c8:43:6e:a8:91:
36:10:c9:7d:a0:01:e1:7c:95:e9:24:26:84:99:84:
e2:94:0b:83:70:eb:ab:fe:28:34:0a:67:29:1f:5c:
0d:63:41:47:1e:66:77:a1:cf:73:55:a7:42:7f:7b:
f0:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:82:15:1A:DC:5C:85:63:8C:80:77:B1:C2:A9:51:CD:D9:B8:B0:05
X509v3 Authority Key Identifier:
keyid:CC:EF:FF:C1:5A:83:A3:8B:DD:A8:CF:E1:20:C3:35:26:7D:CE:50:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zO__wVqDo4vdqM_hIMM1Jn3OUPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:69:56:40:53:cc:53:e2:ed:66:c4:f4:86:43:53:1e:66:a8:
1c:26:79:54:1a:e2:3c:5c:48:57:35:8e:49:ab:db:1a:64:6d:
b0:db:2c:5d:5d:fa:ff:bd:4c:f6:d2:76:0b:4f:e3:cc:88:14:
b1:70:bc:d3:58:a9:8d:5b:f2:8d:67:cf:1e:68:dd:3a:d9:f5:
e0:db:eb:8b:0d:8c:9b:b1:2a:cb:4a:43:e2:fc:f1:ac:10:81:
7f:a4:2f:1b:d2:1c:70:ca:fa:58:b9:36:e9:c1:f4:01:cf:e2:
25:e4:e1:c0:58:89:32:4c:d1:49:bb:47:7e:78:31:c5:c6:62:
20:4d:3a:4c:26:29:d3:47:29:20:bf:79:ef:db:57:77:4b:a8:
0b:5b:7e:da:a0:89:68:f1:bf:ad:e2:7e:0b:31:67:f1:53:47:
b3:84:2c:d2:e6:15:14:96:f7:e1:7f:a2:90:f9:ec:fb:93:32:
1f:5c:72:3c:69:ac:41:dd:9c:53:f2:cb:39:78:b3:b2:25:bf:
09:bf:fa:91:62:78:37:e4:db:b6:4d:ca:2e:7d:f0:14:7b:ea:
a8:98:11:ed:6f:92:1e:11:fe:a9:04:43:08:31:a3:27:03:35:
22:e0:b8:26:d9:37:88:e4:ca:49:75:4b:f7:56:24:5e:c6:ac:
ac:dd:71:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 22:19:28 2026 by rpki-client