Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/14d71e-e0d8-4fff-b3fa-428324a9244e/1/zdCuQc2rVZhilkF4v-rjaElrB9c.mft
File: zdCuQc2rVZhilkF4v-rjaElrB9c.mft (raw, json)
Hash identifier: a0MBXjgtgmyBpIvjMw6eovIaj3C2FVZzBxyYTrifpPo=
Subject key identifier: 49:BF:8F:E2:10:46:89:D8:B3:A5:03:24:7D:B1:A5:9A:25:D8:24:7C
Authority key identifier: CD:D0:AE:41:CD:AB:55:98:62:96:41:78:BF:EA:E3:68:49:6B:07:D7
Certificate issuer: /CN=cdd0ae41cdab559862964178bfeae368496b07d7
Certificate serial: 019EB80F86F3C9EA498C2656CA2F03D2A3DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zdCuQc2rVZhilkF4v-rjaElrB9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/14d71e-e0d8-4fff-b3fa-428324a9244e/1/zdCuQc2rVZhilkF4v-rjaElrB9c.mft
Manifest number: 1035
Signing time: Thu 11 Jun 2026 19:01:25 +0000
Manifest this update: Thu 11 Jun 2026 19:01:25 +0000
Manifest next update: Fri 12 Jun 2026 19:01:25 +0000
Files and hashes: 1: zdCuQc2rVZhilkF4v-rjaElrB9c.crl (hash: J0AiaHmwb/qDWTDA650KaEyQb1DAf4yPkTHAbEyvgxQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/14d71e-e0d8-4fff-b3fa-428324a9244e/1/zdCuQc2rVZhilkF4v-rjaElrB9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/14d71e-e0d8-4fff-b3fa-428324a9244e/1/zdCuQc2rVZhilkF4v-rjaElrB9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/zdCuQc2rVZhilkF4v-rjaElrB9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 19:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:0f:86:f3:c9:ea:49:8c:26:56:ca:2f:03:d2:a3:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdd0ae41cdab559862964178bfeae368496b07d7
Validity
Not Before: Jun 11 19:01:25 2026 GMT
Not After : Jun 12 19:01:25 2026 GMT
Subject: CN=49bf8fe2104689d8b3a503247db1a59a25d8247c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e2:9c:91:e2:d3:75:80:65:6e:3f:80:59:b9:
c0:b1:2d:30:3b:6a:71:cd:ff:19:0f:e0:de:5d:29:
8e:61:2f:dd:9f:04:ac:2e:a7:eb:59:5a:00:5f:f7:
3d:c9:77:1f:37:7a:46:c1:f6:d8:85:7b:79:b4:01:
9b:75:d6:2b:d5:7e:51:25:dd:a7:18:a3:95:96:17:
40:46:6d:29:e7:1b:7c:c7:ad:82:38:85:20:ae:97:
f6:e8:3f:06:02:e1:63:ce:3e:0c:50:7b:48:39:11:
b3:0a:fe:1e:f8:d3:14:a2:c0:1c:2b:6a:fc:f5:01:
5e:0b:15:b6:9e:c4:d5:ec:0d:06:19:af:c7:6a:a2:
0b:ac:22:00:d2:dd:57:ac:13:57:33:d1:c1:ac:5a:
cd:55:28:5a:7c:53:30:43:ba:23:34:67:94:58:df:
e5:ba:1a:2a:da:a9:8a:97:59:d2:d5:4c:51:b8:cf:
ca:4c:7e:4b:46:a1:07:dd:f8:31:2e:11:35:72:3c:
9c:26:69:89:da:f2:fb:26:18:a7:19:5c:b7:85:55:
82:23:c2:02:cc:c7:69:dc:5a:9c:b7:a9:88:1c:f6:
b7:63:31:b6:c0:e4:0b:c3:b3:b2:7c:92:e0:88:ff:
9b:95:13:a7:9b:26:5a:9b:9a:b9:f5:3a:ef:da:54:
db:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:BF:8F:E2:10:46:89:D8:B3:A5:03:24:7D:B1:A5:9A:25:D8:24:7C
X509v3 Authority Key Identifier:
keyid:CD:D0:AE:41:CD:AB:55:98:62:96:41:78:BF:EA:E3:68:49:6B:07:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zdCuQc2rVZhilkF4v-rjaElrB9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/14d71e-e0d8-4fff-b3fa-428324a9244e/1/zdCuQc2rVZhilkF4v-rjaElrB9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/14d71e-e0d8-4fff-b3fa-428324a9244e/1/zdCuQc2rVZhilkF4v-rjaElrB9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:5e:de:ba:bf:a0:9c:c3:18:93:ae:48:3f:07:3a:ac:ba:d4:
da:d2:80:ff:6a:cd:1f:f9:32:f5:2e:6e:52:9b:50:6b:27:0b:
7b:f7:48:b0:71:d5:4b:80:65:06:21:e2:c0:a5:c1:ca:de:b4:
54:bc:f7:82:27:77:cb:40:30:3c:78:85:65:91:ea:e5:e9:ea:
45:7a:d2:72:4e:8b:d4:ca:a3:02:32:5c:61:42:5a:79:7e:2d:
f9:97:94:94:f3:d8:c0:14:56:eb:29:9c:9a:d8:f6:96:71:2f:
7e:ed:4f:7e:f6:ec:68:f0:aa:02:40:a0:6f:37:a0:1c:29:39:
03:56:8e:54:52:4b:24:f9:5d:28:1f:51:ab:bb:a7:b8:0e:d0:
da:cf:92:c5:60:ed:06:5e:fd:03:a3:27:e4:23:a8:17:2d:ef:
aa:5b:ca:15:9c:91:4a:71:39:60:ad:ae:a3:b0:80:f6:e5:56:
a3:e4:c8:ce:ce:17:79:b5:b2:54:31:ed:cc:fd:0b:c9:68:7d:
74:b7:47:1f:f5:15:bd:20:65:cb:7e:af:ba:a8:f0:cb:91:d2:
92:82:ab:22:60:f5:28:52:5c:5b:21:9f:2d:13:e1:e7:1a:f0:
b7:85:8b:92:56:d0:27:24:82:6e:63:c4:2b:8a:c5:fa:a1:b6:
97:e6:69:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ64D4bzyepJjCZWyi8D0qPfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkZDBhZTQxY2RhYjU1OTg2Mjk2NDE3OGJmZWFlMzY4NDk2
YjA3ZDcwHhcNMjYwNjExMTkwMTI1WhcNMjYwNjEyMTkwMTI1WjAzMTEwLwYDVQQD
Eyg0OWJmOGZlMjEwNDY4OWQ4YjNhNTAzMjQ3ZGIxYTU5YTI1ZDgyNDdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruKckeLTdYBlbj+AWbnAsS0wO2px
zf8ZD+DeXSmOYS/dnwSsLqfrWVoAX/c9yXcfN3pGwfbYhXt5tAGbddYr1X5RJd2n
GKOVlhdARm0p5xt8x62COIUgrpf26D8GAuFjzj4MUHtIORGzCv4e+NMUosAcK2r8
9QFeCxW2nsTV7A0GGa/HaqILrCIA0t1XrBNXM9HBrFrNVShafFMwQ7ojNGeUWN/l
uhoq2qmKl1nS1UxRuM/KTH5LRqEH3fgxLhE1cjycJmmJ2vL7JhinGVy3hVWCI8IC
zMdp3Fqct6mIHPa3YzG2wOQLw7OyfJLgiP+blROnmyZam5q59Trv2lTbFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEm/j+IQRonYs6UDJH2xpZol2CR8MB8GA1UdIwQY
MBaAFM3QrkHNq1WYYpZBeL/q42hJawfXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemRDdVFjMnJWWmhpbGtGNHYtcmphRWxyQjljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS8xNGQ3MWUtZTBkOC00ZmZmLWIzZmEt
NDI4MzI0YTkyNDRlLzEvemRDdVFjMnJWWmhpbGtGNHYtcmphRWxyQjljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS8xNGQ3MWUtZTBkOC00ZmZmLWIzZmEtNDI4MzI0YTkyNDRl
LzEvemRDdVFjMnJWWmhpbGtGNHYtcmphRWxyQjljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOl7eur+g
nMMYk65IPwc6rLrU2tKA/2rNH/ky9S5uUptQaycLe/dIsHHVS4BlBiHiwKXByt60
VLz3gid3y0AwPHiFZZHq5enqRXrSck6L1MqjAjJcYUJaeX4t+ZeUlPPYwBRW6ymc
mtj2lnEvfu1PfvbsaPCqAkCgbzegHCk5A1aOVFJLJPldKB9Rq7unuA7Q2s+SxWDt
Bl79A6Mn5COoFy3vqlvKFZyRSnE5YK2uo7CA9uVWo+TIzs4XebWyVDHtzP0LyWh9
dLdHH/UVvSBly36vuqjwy5HSkoKrImD1KFJcWyGfLRPh5xrwt4WLklbQJySCbmPE
K4rF+qG2l+ZpOA==
-----END CERTIFICATE-----
Generated at Fri Jun 12 01:32:40 2026 by rpki-client