Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/caa385-b2a5-4323-adc5-46603de805ec/1/ZSXYt_GeL7dct_lXidkRj2sblwU.mft
File: ZSXYt_GeL7dct_lXidkRj2sblwU.mft (raw, json)
Hash identifier: 9R2SmPBChp3kXHehIL+tbKvKZxJqmI8NPZpwzjiYn1U=
Subject key identifier: 47:0E:24:71:90:78:9C:2D:FA:DC:57:94:AB:98:94:FD:74:23:DE:F4
Authority key identifier: 65:25:D8:B7:F1:9E:2F:B7:5C:B7:F9:57:89:D9:11:8F:6B:1B:97:05
Certificate issuer: /CN=6525d8b7f19e2fb75cb7f95789d9118f6b1b9705
Certificate serial: 019EB80F4FBF71357F236D2FB903D3A2CC99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZSXYt_GeL7dct_lXidkRj2sblwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/caa385-b2a5-4323-adc5-46603de805ec/1/ZSXYt_GeL7dct_lXidkRj2sblwU.mft
Manifest number: 0EAB
Signing time: Thu 11 Jun 2026 19:01:11 +0000
Manifest this update: Thu 11 Jun 2026 19:01:11 +0000
Manifest next update: Fri 12 Jun 2026 19:01:11 +0000
Files and hashes: 1: ZSXYt_GeL7dct_lXidkRj2sblwU.crl (hash: ARtiot4QGkuXPlWdBlaAOuPU+c8QFx5XhodvtgDcMlk=)
2: eX-mxCe4aOVRvqfABXD3XD44-Q0.roa (hash: WteYUUqDb29xXfLR9yOCxZhFZTrxf/JEk97tf2HnzV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/caa385-b2a5-4323-adc5-46603de805ec/1/ZSXYt_GeL7dct_lXidkRj2sblwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/caa385-b2a5-4323-adc5-46603de805ec/1/ZSXYt_GeL7dct_lXidkRj2sblwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZSXYt_GeL7dct_lXidkRj2sblwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 19:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:0f:4f:bf:71:35:7f:23:6d:2f:b9:03:d3:a2:cc:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6525d8b7f19e2fb75cb7f95789d9118f6b1b9705
Validity
Not Before: Jun 11 19:01:11 2026 GMT
Not After : Jun 12 19:01:11 2026 GMT
Subject: CN=470e247190789c2dfadc5794ab9894fd7423def4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:22:b8:6b:e6:20:37:28:0a:c1:84:73:ab:e6:
d3:d0:71:14:a1:b1:c8:7a:8d:a5:5d:09:65:58:19:
f2:ab:48:b9:5b:1a:9b:69:4d:57:89:cb:98:46:85:
f3:1d:01:18:6c:1c:9d:47:63:7f:e4:2c:a1:ec:73:
72:13:67:01:bb:f6:80:00:39:27:0d:45:4f:a4:00:
77:fe:e3:f0:38:09:a4:dd:b9:80:de:7b:f0:8c:1f:
6c:2f:e5:8b:d7:15:f7:26:47:8d:f8:0f:1e:42:e6:
c5:11:44:e2:95:20:21:94:08:52:b9:4c:f6:91:84:
12:ff:29:e0:69:17:3d:2c:57:fe:d4:d0:d0:3e:38:
40:ab:b0:ac:b2:08:fa:73:fd:df:47:9b:63:ff:84:
04:b1:7c:36:2f:bb:77:37:02:3f:df:d8:cd:fd:92:
3f:60:3f:35:fe:c5:86:b8:e9:e8:4c:44:50:97:e3:
45:e5:e9:d2:99:cf:da:21:54:37:dd:89:20:89:9f:
bf:9f:e2:73:08:b4:77:ad:39:4b:90:1c:08:ae:63:
d5:ae:0b:72:50:1a:4c:83:f5:dc:f7:e4:56:a9:3b:
25:0b:72:7a:f4:66:6a:1d:00:8a:7f:19:4d:e9:41:
44:ba:ad:65:70:49:93:71:f2:67:45:d1:d8:46:b4:
25:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:0E:24:71:90:78:9C:2D:FA:DC:57:94:AB:98:94:FD:74:23:DE:F4
X509v3 Authority Key Identifier:
keyid:65:25:D8:B7:F1:9E:2F:B7:5C:B7:F9:57:89:D9:11:8F:6B:1B:97:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZSXYt_GeL7dct_lXidkRj2sblwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/caa385-b2a5-4323-adc5-46603de805ec/1/ZSXYt_GeL7dct_lXidkRj2sblwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/caa385-b2a5-4323-adc5-46603de805ec/1/ZSXYt_GeL7dct_lXidkRj2sblwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:90:1d:b3:92:e8:33:4c:8f:75:02:63:33:93:ee:d2:46:c6:
18:8f:49:85:13:c6:80:3d:fb:0a:35:e1:38:de:21:46:2f:45:
28:36:f2:52:4a:37:17:d6:51:de:18:09:d2:6f:89:62:2f:6b:
46:cd:45:28:bd:2a:f7:17:25:87:a8:5c:d2:4b:7e:0a:ae:ab:
e5:4e:77:18:a1:ac:25:68:09:95:01:11:e7:05:49:f3:81:23:
44:d2:7b:8e:fc:6a:8c:42:24:56:65:65:63:ad:1f:af:0f:a5:
5a:60:d9:bb:ad:b9:40:b9:67:e8:c8:d7:40:2a:16:6b:41:3b:
b8:5a:bc:ce:af:13:3a:d5:d3:82:84:9d:0e:27:19:20:db:6d:
99:8c:a0:62:65:44:1e:5d:63:e5:1b:93:4e:10:bf:98:df:96:
a1:33:ac:82:8a:88:d3:14:e0:12:fe:f3:2c:01:bb:b2:e9:23:
bc:e6:7b:c9:fc:c1:3a:87:cd:ad:93:06:68:c8:d0:39:f8:d7:
45:0a:02:a7:d9:96:1b:b2:cc:84:7e:8c:6c:7c:c6:cb:70:42:
ca:fc:f3:9c:f2:89:6f:0f:06:39:f8:f4:1b:14:9b:49:f4:b9:
65:b1:a0:15:b0:8a:3b:4e:98:ed:60:e4:d5:54:6f:b6:71:31:
10:29:c1:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ64D0+/cTV/I20vuQPTosyZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1MjVkOGI3ZjE5ZTJmYjc1Y2I3Zjk1Nzg5ZDkxMThmNmIx
Yjk3MDUwHhcNMjYwNjExMTkwMTExWhcNMjYwNjEyMTkwMTExWjAzMTEwLwYDVQQD
Eyg0NzBlMjQ3MTkwNzg5YzJkZmFkYzU3OTRhYjk4OTRmZDc0MjNkZWY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+SK4a+YgNygKwYRzq+bT0HEUobHI
eo2lXQllWBnyq0i5WxqbaU1XicuYRoXzHQEYbBydR2N/5Cyh7HNyE2cBu/aAADkn
DUVPpAB3/uPwOAmk3bmA3nvwjB9sL+WL1xX3JkeN+A8eQubFEUTilSAhlAhSuUz2
kYQS/yngaRc9LFf+1NDQPjhAq7Cssgj6c/3fR5tj/4QEsXw2L7t3NwI/39jN/ZI/
YD81/sWGuOnoTERQl+NF5enSmc/aIVQ33YkgiZ+/n+JzCLR3rTlLkBwIrmPVrgty
UBpMg/Xc9+RWqTslC3J69GZqHQCKfxlN6UFEuq1lcEmTcfJnRdHYRrQl8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEcOJHGQeJwt+txXlKuYlP10I970MB8GA1UdIwQY
MBaAFGUl2Lfxni+3XLf5V4nZEY9rG5cFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlNYWXRfR2VMN2RjdF9sWGlka1JqMnNibHdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9jYWEzODUtYjJhNS00MzIzLWFkYzUt
NDY2MDNkZTgwNWVjLzEvWlNYWXRfR2VMN2RjdF9sWGlka1JqMnNibHdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi9jYWEzODUtYjJhNS00MzIzLWFkYzUtNDY2MDNkZTgwNWVj
LzEvWlNYWXRfR2VMN2RjdF9sWGlka1JqMnNibHdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPZAds5Lo
M0yPdQJjM5Pu0kbGGI9JhRPGgD37CjXhON4hRi9FKDbyUko3F9ZR3hgJ0m+JYi9r
Rs1FKL0q9xclh6hc0kt+Cq6r5U53GKGsJWgJlQER5wVJ84EjRNJ7jvxqjEIkVmVl
Y60frw+lWmDZu625QLln6MjXQCoWa0E7uFq8zq8TOtXTgoSdDicZINttmYygYmVE
Hl1j5RuTThC/mN+WoTOsgoqI0xTgEv7zLAG7sukjvOZ7yfzBOofNrZMGaMjQOfjX
RQoCp9mWG7LMhH6MbHzGy3BCyvzznPKJbw8GOfj0GxSbSfS5ZbGgFbCKO06Y7WDk
1VRvtnExECnBIw==
-----END CERTIFICATE-----
Generated at Fri Jun 12 03:53:41 2026 by rpki-client