Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.mft
File: ZRaETSRdQSSiKlNrBG2oYzLQuRE.mft (raw, json)
Hash identifier: DqmtDackBgBAQwDsGAjC0f3pNe0qKeAMPOFOT+jEMxA=
Subject key identifier: 61:05:9F:6E:43:97:79:3F:4B:9C:40:5A:48:B1:61:3C:8B:FE:21:F7
Authority key identifier: 65:16:84:4D:24:5D:41:24:A2:2A:53:6B:04:6D:A8:63:32:D0:B9:11
Certificate issuer: /CN=6516844d245d4124a22a536b046da86332d0b911
Certificate serial: 019EB6FC1781EA1254E68ED5DB499D434135
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZRaETSRdQSSiKlNrBG2oYzLQuRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.mft
Manifest number: 09D3
Signing time: Thu 11 Jun 2026 14:00:34 +0000
Manifest this update: Thu 11 Jun 2026 14:00:34 +0000
Manifest next update: Fri 12 Jun 2026 14:00:34 +0000
Files and hashes: 1: 7BgGMhfrcQqzufLm6BOZyNmcrP4.roa (hash: Ez1hXHY/SyH5UhM0EJmIkgA9tRyMxJtbCALr5l1nz1Y=)
2: ZRaETSRdQSSiKlNrBG2oYzLQuRE.crl (hash: 6UqFVlCOcO+6swpGsTDfAW6p8EdNI/lAXuHvmaH0BRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZRaETSRdQSSiKlNrBG2oYzLQuRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:fc:17:81:ea:12:54:e6:8e:d5:db:49:9d:43:41:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6516844d245d4124a22a536b046da86332d0b911
Validity
Not Before: Jun 11 14:00:34 2026 GMT
Not After : Jun 12 14:00:34 2026 GMT
Subject: CN=61059f6e4397793f4b9c405a48b1613c8bfe21f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:54:07:ff:fd:ef:b5:eb:5e:d6:93:37:b4:97:
6d:8e:c5:ae:83:b5:18:26:de:7f:a6:79:76:1b:b2:
8f:10:f9:61:02:2e:a8:62:9b:11:5f:3e:2f:e1:5a:
39:59:0c:e6:43:9b:bc:c7:88:3a:b9:2a:4f:63:24:
9e:7c:7b:cb:71:85:5e:10:bd:d7:ce:4a:98:11:76:
85:ae:ba:0f:37:67:2e:a0:67:78:9b:6f:70:0c:20:
43:fe:dc:7b:e9:99:9b:62:a2:cb:e5:6e:66:8a:b5:
1d:b8:f2:a0:c4:61:8b:68:51:1c:05:94:e2:9b:ef:
2e:d9:46:eb:39:45:19:84:4a:78:b8:6d:c0:02:1a:
0d:23:6b:11:34:6b:93:d7:c1:67:8b:26:50:5c:13:
e0:27:6d:a6:c2:a6:33:c6:28:52:cb:4e:d4:de:8d:
3a:96:f7:0b:9c:bd:33:2d:74:e3:66:c7:18:b9:ee:
79:13:11:ff:61:cf:48:42:f6:e6:8b:66:fd:98:c2:
b3:e6:a5:ab:84:fd:53:75:6c:9f:c3:b9:34:dc:2b:
68:f7:c1:01:37:38:4f:c6:b7:e9:c6:1b:d6:78:80:
c2:db:fe:bc:70:05:b3:fd:98:3f:03:e0:4f:f8:37:
0e:6a:68:5c:73:29:bb:2f:0b:4c:df:e5:30:44:6c:
ea:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:05:9F:6E:43:97:79:3F:4B:9C:40:5A:48:B1:61:3C:8B:FE:21:F7
X509v3 Authority Key Identifier:
keyid:65:16:84:4D:24:5D:41:24:A2:2A:53:6B:04:6D:A8:63:32:D0:B9:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRaETSRdQSSiKlNrBG2oYzLQuRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:22:58:ad:5c:7b:49:a8:6b:0d:58:c4:48:e8:5a:18:c7:d9:
3c:cd:3d:0d:34:97:af:5a:11:c5:35:fd:51:6f:da:ef:80:a4:
58:3f:05:8d:ad:e0:2f:87:5a:ec:53:a5:fd:53:c4:70:b4:50:
5a:57:7c:b6:cc:6c:db:9d:d2:90:04:08:c4:33:0a:89:75:47:
90:66:ee:20:69:d8:5f:a6:93:93:61:a5:bf:d4:13:6a:c5:ee:
6d:59:af:1d:7e:9d:83:d1:3d:de:e4:5b:71:4d:c4:3a:75:be:
97:65:54:02:42:84:02:39:33:dd:f1:e8:a1:9c:ef:27:5d:52:
a7:4e:b1:c8:b7:bd:b5:4f:4b:0e:59:77:1e:a2:a9:d4:e2:a7:
c8:d4:64:28:2c:76:b0:e1:f2:25:55:5f:82:98:e1:39:ac:ca:
61:4d:f1:ea:ef:84:4d:7c:2c:c1:d9:a7:74:a8:12:71:e1:99:
14:68:fb:42:fa:ca:ca:19:dd:45:e8:c9:83:0a:a2:2a:40:c3:
d2:38:9d:eb:a8:d6:55:37:38:d3:c5:03:63:f1:b0:99:68:47:
1f:b5:47:60:11:b2:48:b0:2b:52:bc:60:8c:4f:71:23:2c:10:
d7:10:10:c0:a5:6d:42:62:78:0d:70:87:44:3b:28:0e:03:ca:
59:30:20:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 17:54:09 2026 by rpki-client