Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/c7cbb1-0dcd-42f4-bf63-3df471c01c9e/1/_zKbmJBKLs6EguDyWPXDT-rVjOI.mft
File: _zKbmJBKLs6EguDyWPXDT-rVjOI.mft (raw, json)
Hash identifier: 2/XT9Ss3WllTQ4l5aBrxlbK8H5MbymsMe3RxAyhJKUQ=
Subject key identifier: 19:A0:24:94:3D:EB:25:F2:5E:B9:5B:BC:EB:C3:79:0B:EB:84:1B:CA
Authority key identifier: FF:32:9B:98:90:4A:2E:CE:84:82:E0:F2:58:F5:C3:4F:EA:D5:8C:E2
Certificate issuer: /CN=ff329b98904a2ece8482e0f258f5c34fead58ce2
Certificate serial: 019EB9C5F1AF25DD05EA430E441D9BBCB2E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zKbmJBKLs6EguDyWPXDT-rVjOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/c7cbb1-0dcd-42f4-bf63-3df471c01c9e/1/_zKbmJBKLs6EguDyWPXDT-rVjOI.mft
Manifest number: 18E9
Signing time: Fri 12 Jun 2026 03:00:17 +0000
Manifest this update: Fri 12 Jun 2026 03:00:17 +0000
Manifest next update: Sat 13 Jun 2026 03:00:17 +0000
Files and hashes: 1: _JnhSJS19JlHl9jJTexqDWYqi9A.roa (hash: SSBeQuTX3gSz2r22CXEew81x4g/DT16JBva2SQJoq3g=)
2: _zKbmJBKLs6EguDyWPXDT-rVjOI.crl (hash: iwnrbAYGzdcU6iP7KIhc+Zu4od1iLyri1j+9Qob1stE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/c7cbb1-0dcd-42f4-bf63-3df471c01c9e/1/_zKbmJBKLs6EguDyWPXDT-rVjOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/c7cbb1-0dcd-42f4-bf63-3df471c01c9e/1/_zKbmJBKLs6EguDyWPXDT-rVjOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_zKbmJBKLs6EguDyWPXDT-rVjOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 22:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:c5:f1:af:25:dd:05:ea:43:0e:44:1d:9b:bc:b2:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff329b98904a2ece8482e0f258f5c34fead58ce2
Validity
Not Before: Jun 12 03:00:17 2026 GMT
Not After : Jun 13 03:00:17 2026 GMT
Subject: CN=19a024943deb25f25eb95bbcebc3790beb841bca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1c:0c:4d:7d:2c:53:79:12:e6:d6:27:05:26:
2e:20:ed:bb:55:d5:42:df:b7:a0:a0:d1:63:8f:80:
1e:57:c2:20:9f:0b:4a:ad:e1:97:21:44:5b:9e:4d:
64:42:38:ac:2b:92:9d:cf:32:36:22:0e:6e:da:4d:
04:51:e2:e0:31:a8:aa:15:76:d8:6c:a1:13:33:1e:
78:4c:7b:fc:74:7a:1c:84:44:27:3a:5e:43:c1:3d:
99:69:72:27:4f:2c:b0:ed:fb:85:2a:68:b0:13:ef:
a1:d0:a5:c3:3a:d0:2d:ab:14:a8:f8:f4:80:ff:21:
7b:34:ad:66:52:d5:10:05:ca:91:89:5e:0a:ad:95:
e0:36:ea:e1:6d:60:fa:33:6d:12:a5:2c:04:f1:2f:
5f:f6:14:b3:3f:0e:35:d3:de:bd:a2:35:22:40:cd:
6b:9c:30:cc:8c:d9:6e:71:07:b8:3e:57:8e:ae:bf:
31:31:9f:d0:da:ed:3a:79:a3:b6:36:37:95:3d:9a:
ea:98:67:cf:00:80:3d:b9:d2:af:89:01:16:84:27:
26:13:bf:66:41:54:4d:77:b8:3e:31:01:ef:39:23:
ac:05:9c:b7:35:1d:a1:82:79:51:72:81:84:db:03:
d4:17:5b:b2:68:42:e9:31:2f:14:a3:50:c4:a8:44:
5f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:A0:24:94:3D:EB:25:F2:5E:B9:5B:BC:EB:C3:79:0B:EB:84:1B:CA
X509v3 Authority Key Identifier:
keyid:FF:32:9B:98:90:4A:2E:CE:84:82:E0:F2:58:F5:C3:4F:EA:D5:8C:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zKbmJBKLs6EguDyWPXDT-rVjOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/c7cbb1-0dcd-42f4-bf63-3df471c01c9e/1/_zKbmJBKLs6EguDyWPXDT-rVjOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/c7cbb1-0dcd-42f4-bf63-3df471c01c9e/1/_zKbmJBKLs6EguDyWPXDT-rVjOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:46:2b:4f:e8:10:29:5b:cd:43:9f:6f:fa:20:89:54:b2:90:
53:b1:38:b9:69:52:cd:14:6d:ba:69:dc:4d:99:d7:14:bf:a4:
9f:67:98:20:67:af:bc:58:8a:d0:ed:3b:32:af:fd:18:3d:da:
95:45:66:f1:f4:e9:45:5c:ac:1f:8c:09:0d:d7:c0:36:bc:b1:
fe:8f:79:f6:5d:dd:34:66:d2:49:06:6f:fb:dd:ec:52:75:9f:
67:1f:e7:35:dd:29:16:07:7e:ac:e7:20:9b:18:54:24:84:4d:
0c:43:f0:27:f8:8d:6c:27:78:f6:41:b3:2c:1d:0b:74:2d:d7:
45:e5:a1:29:74:e7:90:4e:dc:01:2f:0f:6f:57:33:5f:74:6a:
8b:fb:a6:06:ba:c5:37:a9:52:31:f7:85:00:68:c5:a2:a0:bb:
98:19:d3:96:a1:df:28:7a:28:14:ff:db:6f:3e:ee:11:96:23:
55:ce:36:20:ea:21:ef:e5:e5:0e:e1:3b:50:05:55:fb:97:a6:
55:9c:25:2d:8b:61:ee:b7:23:9e:72:80:4d:e5:18:cb:48:4e:
35:b4:03:a0:79:e3:6d:4a:61:69:9a:84:6f:b9:d6:46:f4:85:
cb:53:78:74:f3:ac:da:43:99:c1:ca:67:7c:be:0e:9f:81:81:
e6:db:a5:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 07:03:59 2026 by rpki-client