Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/d201dd-47dd-4c4e-a42c-1c1b974ffafc/1/ZGHiGIOECxNlwzhXExO30yqtnFc.mft
File: ZGHiGIOECxNlwzhXExO30yqtnFc.mft (raw, json)
Hash identifier: BAn5fbA4p7VO4gXP3gPOSpoVWHwXGTa8jLU2d3B9tBw=
Subject key identifier: BC:40:37:C4:E5:3A:49:F5:E3:23:9F:A4:4A:16:B3:48:80:01:CA:CD
Authority key identifier: 64:61:E2:18:83:84:0B:13:65:C3:38:57:13:13:B7:D3:2A:AD:9C:57
Certificate issuer: /CN=6461e21883840b1365c338571313b7d32aad9c57
Certificate serial: 019EB8B3F2B22B321660337125A035ECCECE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZGHiGIOECxNlwzhXExO30yqtnFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/d201dd-47dd-4c4e-a42c-1c1b974ffafc/1/ZGHiGIOECxNlwzhXExO30yqtnFc.mft
Manifest number: 0A95
Signing time: Thu 11 Jun 2026 22:01:01 +0000
Manifest this update: Thu 11 Jun 2026 22:01:01 +0000
Manifest next update: Fri 12 Jun 2026 22:01:01 +0000
Files and hashes: 1: ZGHiGIOECxNlwzhXExO30yqtnFc.crl (hash: Mb7cV8mSTbmDQe0OopVzRchsEuvkD0Bn89B9YaPk36Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/d201dd-47dd-4c4e-a42c-1c1b974ffafc/1/ZGHiGIOECxNlwzhXExO30yqtnFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/d201dd-47dd-4c4e-a42c-1c1b974ffafc/1/ZGHiGIOECxNlwzhXExO30yqtnFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZGHiGIOECxNlwzhXExO30yqtnFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:b3:f2:b2:2b:32:16:60:33:71:25:a0:35:ec:ce:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6461e21883840b1365c338571313b7d32aad9c57
Validity
Not Before: Jun 11 22:01:01 2026 GMT
Not After : Jun 12 22:01:01 2026 GMT
Subject: CN=bc4037c4e53a49f5e3239fa44a16b3488001cacd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:61:8b:31:42:b6:a2:66:b5:3a:52:b7:b5:96:
5f:bc:ea:21:7c:43:06:32:e7:24:60:bf:e3:10:e4:
e1:08:cd:ee:cb:fb:77:f4:09:b3:d1:36:58:ad:7c:
aa:e7:fc:9a:86:c1:6b:14:bd:e4:f7:a3:c1:7e:a7:
89:01:51:5b:dc:a7:7d:45:da:3f:90:43:a8:b2:de:
ff:56:7e:53:cd:27:0e:1d:c5:c4:00:3b:0f:1f:85:
2a:b1:4d:d8:f9:29:85:b4:08:74:f0:c7:7c:c8:ec:
ca:fd:66:e4:ee:36:0e:fd:21:9b:68:83:d3:e8:d9:
09:a1:47:8f:09:32:ca:7f:f3:10:a2:8c:bc:46:06:
42:0b:80:03:e9:34:d7:03:a6:99:23:03:ee:f5:ad:
d0:9a:db:6d:5a:d7:00:df:71:ea:1b:80:96:30:9d:
b5:95:8d:61:ea:94:d5:ed:a8:1e:f4:11:1e:ed:48:
14:4d:e5:c5:e0:c8:ba:ab:38:0d:75:75:dd:9f:e1:
5b:5c:0f:a5:55:6a:bb:43:7f:47:9a:15:0c:b9:36:
15:35:ad:63:b6:05:29:27:99:04:01:94:b8:b2:bd:
09:15:5d:62:2e:6e:6a:c7:cb:7b:dc:53:b9:9b:77:
c1:0a:70:95:ec:e1:fa:65:60:d4:7a:82:12:77:63:
07:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:40:37:C4:E5:3A:49:F5:E3:23:9F:A4:4A:16:B3:48:80:01:CA:CD
X509v3 Authority Key Identifier:
keyid:64:61:E2:18:83:84:0B:13:65:C3:38:57:13:13:B7:D3:2A:AD:9C:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZGHiGIOECxNlwzhXExO30yqtnFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d201dd-47dd-4c4e-a42c-1c1b974ffafc/1/ZGHiGIOECxNlwzhXExO30yqtnFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d201dd-47dd-4c4e-a42c-1c1b974ffafc/1/ZGHiGIOECxNlwzhXExO30yqtnFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:d9:d6:7a:dc:f3:6a:9a:d1:e7:95:d1:e5:49:be:7e:11:ba:
df:22:b8:4a:eb:b2:da:06:7b:c0:17:75:f0:2f:5c:3d:0a:ad:
f0:36:c4:bc:f3:9d:0f:55:74:29:5d:da:2d:4b:77:27:04:cc:
74:0b:5c:4d:1d:43:2e:59:d1:5d:bc:f7:8e:bf:3f:e2:b8:7c:
a9:ce:32:f7:c1:1d:be:51:23:56:5c:ac:90:b4:52:59:9f:15:
1d:22:99:65:6e:c3:93:d7:a1:62:ee:92:70:a9:13:04:4f:b9:
8a:7c:72:5c:51:cc:69:d8:ec:9f:65:55:d9:e6:a0:88:1d:31:
50:39:73:03:f8:25:bb:40:cc:41:9e:f9:52:7d:1e:f1:d5:e8:
e7:d2:53:78:88:da:00:e0:23:a4:d3:c1:67:31:2c:f0:8c:7f:
e7:49:13:54:85:17:ae:f0:92:a6:09:1f:ba:bf:2b:34:f4:a4:
17:dc:5d:db:bb:23:e6:a3:c6:33:bc:cc:19:8d:bf:9e:76:6f:
83:0b:0c:45:0e:4e:50:67:9f:78:bd:47:1f:7a:9d:77:04:80:
57:63:ab:1f:ac:b8:df:3c:bd:54:9f:99:c7:20:cd:1a:0a:69:
da:a8:e0:cd:97:f3:78:f2:f5:71:00:b6:45:b7:7a:3f:2c:e6:
ba:65:b2:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 03:53:30 2026 by rpki-client