Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/299d61-6b96-4054-98a3-dc42c7693df9/1/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.mft
File: Z9NPwDAC6qfzay5-Y17ajDDEgoQ.mft (raw, json)
Hash identifier: zKldnj4K0o0yiZSvUClzgThH0HlojjAUnVd4pbdqYG8=
Subject key identifier: 6C:BE:5E:0C:F8:92:11:AE:CC:26:FF:0E:2E:20:67:83:D2:48:D8:38
Authority key identifier: 67:D3:4F:C0:30:02:EA:A7:F3:6B:2E:7E:63:5E:DA:8C:30:C4:82:84
Certificate issuer: /CN=67d34fc03002eaa7f36b2e7e635eda8c30c48284
Certificate serial: 019EB6C4DB508997272F467B64904C369D2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/299d61-6b96-4054-98a3-dc42c7693df9/1/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.mft
Manifest number: 1953
Signing time: Thu 11 Jun 2026 13:00:14 +0000
Manifest this update: Thu 11 Jun 2026 13:00:14 +0000
Manifest next update: Fri 12 Jun 2026 13:00:14 +0000
Files and hashes: 1: Z9NPwDAC6qfzay5-Y17ajDDEgoQ.crl (hash: Ed8l59OOeRsm1oWoSZDB2LQFWg8dV/UDDX0hUU3Cdtg=)
2: murlFmYx_3jII0U53z-9rIh7SG8.roa (hash: w5yfDhjnwIlIIwe71gL9gqS+X/CBCtrwx72RMbEM/eM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/299d61-6b96-4054-98a3-dc42c7693df9/1/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/299d61-6b96-4054-98a3-dc42c7693df9/1/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:c4:db:50:89:97:27:2f:46:7b:64:90:4c:36:9d:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67d34fc03002eaa7f36b2e7e635eda8c30c48284
Validity
Not Before: Jun 11 13:00:14 2026 GMT
Not After : Jun 12 13:00:14 2026 GMT
Subject: CN=6cbe5e0cf89211aecc26ff0e2e206783d248d838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e6:28:60:31:51:7b:9d:e5:d9:f3:55:fa:45:
da:ee:bf:66:a6:16:7d:e8:fe:aa:0e:1b:d5:48:66:
9b:ac:fe:99:ae:02:ee:d7:f1:06:9a:11:79:0a:62:
88:1c:e4:ea:6a:2d:f9:9c:5d:7f:ef:1b:64:e8:8f:
1d:28:46:bb:08:b0:3e:f0:72:04:8a:b0:76:86:0a:
b4:0e:a0:74:e9:c0:4b:be:92:49:4c:f6:ef:68:3b:
21:0e:2e:e7:98:05:ae:9d:9d:95:51:1a:0d:c5:50:
fd:0d:c2:bb:b3:34:7a:3b:f6:cd:a5:0a:e1:df:14:
9c:ce:7c:f5:c1:a4:f7:06:90:25:09:a7:a0:17:fd:
7b:f1:b0:52:76:53:76:b5:52:ee:aa:92:73:f3:5d:
06:e1:cd:51:70:43:01:23:50:18:64:47:01:d8:98:
6f:58:2a:77:a3:da:32:2d:b1:3f:40:8c:e8:11:88:
5b:94:a2:cb:59:ca:c5:39:0d:30:a8:7d:43:c7:02:
25:9e:11:7d:5b:b5:01:03:7a:80:b1:98:3e:09:ef:
b8:c2:19:91:04:1d:67:a2:f4:a9:58:e0:62:33:d9:
f0:a0:0e:6b:8c:99:03:7e:cf:e7:93:bc:8f:7e:63:
1d:46:86:0d:33:2f:16:b1:dc:fa:af:79:26:ec:d9:
32:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:BE:5E:0C:F8:92:11:AE:CC:26:FF:0E:2E:20:67:83:D2:48:D8:38
X509v3 Authority Key Identifier:
keyid:67:D3:4F:C0:30:02:EA:A7:F3:6B:2E:7E:63:5E:DA:8C:30:C4:82:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/299d61-6b96-4054-98a3-dc42c7693df9/1/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/299d61-6b96-4054-98a3-dc42c7693df9/1/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:15:03:1f:e9:bc:c5:be:56:33:4e:a6:29:25:12:f4:da:3d:
a2:de:d6:7b:9a:c8:4a:30:ea:02:38:ca:c5:41:03:87:9f:d1:
0c:ca:e2:ad:11:e7:5a:e5:6b:82:d3:8f:79:07:a1:70:1d:3d:
3d:97:7e:b9:7d:d6:ea:74:76:a4:84:15:13:88:be:80:9c:66:
8e:03:3a:97:e0:9d:f1:c4:89:23:f4:25:96:db:44:34:30:6c:
ed:de:98:81:49:f2:ad:0a:e6:5b:48:7a:4f:cd:ae:11:18:44:
50:68:34:99:ac:9b:0d:5f:65:2d:a5:5e:ec:20:ff:89:17:55:
99:82:09:ad:88:20:c7:cf:83:23:79:a6:06:4d:a4:41:a0:59:
05:2f:51:f3:06:96:3a:fc:f4:18:ed:e2:36:4e:aa:54:e6:99:
03:05:15:6d:32:30:8d:2f:ce:93:e4:96:92:bd:8a:23:1c:73:
c3:50:aa:73:4a:b6:f9:98:f9:c5:6b:b1:c0:76:4d:75:ab:47:
e1:1c:08:b9:72:88:08:7a:be:a3:93:1e:c6:66:e0:cc:7f:60:
ee:88:01:7d:75:d0:a3:67:f6:51:d1:27:47:68:6a:ac:28:f3:
a4:fc:d9:73:1d:88:06:be:cd:12:b3:85:7a:d6:18:da:37:ba:
06:be:5c:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:58:44 2026 by rpki-client