
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/db8d38-077f-4d77-9383-dc781cc2a258/1/zI34gFQGDfaFu6lzkSPoNC1HnoQ.mft
File: zI34gFQGDfaFu6lzkSPoNC1HnoQ.mft (raw, json)
Hash identifier: hG4UjJUnWbSORC7fSH/jFaFNeeng74DYIomkuB0IPKg=
Subject key identifier: D1:0C:60:65:57:2F:16:36:3E:C0:BB:F0:76:82:7D:85:F4:EE:5A:28
Authority key identifier: CC:8D:F8:80:54:06:0D:F6:85:BB:A9:73:91:23:E8:34:2D:47:9E:84
Certificate issuer: /CN=cc8df88054060df685bba9739123e8342d479e84
Certificate serial: 019E8EDC58187AE6FB2734B1195E66F3E616
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zI34gFQGDfaFu6lzkSPoNC1HnoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/db8d38-077f-4d77-9383-dc781cc2a258/1/zI34gFQGDfaFu6lzkSPoNC1HnoQ.mft
Manifest number: 18DA
Signing time: Wed 03 Jun 2026 19:01:05 +0000
Manifest this update: Wed 03 Jun 2026 19:01:05 +0000
Manifest next update: Thu 04 Jun 2026 19:01:05 +0000
Files and hashes: 1: nWemIk_PUFibWyxsMCHuSPNqyxE.roa (hash: LfDaK0qO1xTJjSEUv9R58HxO4b8gyazqBrXpwSZbnWE=)
2: zI34gFQGDfaFu6lzkSPoNC1HnoQ.crl (hash: vBadb9Ck4/XyM1LIv3mIF+dXwPJjJ85qx/DDw+/xG4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/db8d38-077f-4d77-9383-dc781cc2a258/1/zI34gFQGDfaFu6lzkSPoNC1HnoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/db8d38-077f-4d77-9383-dc781cc2a258/1/zI34gFQGDfaFu6lzkSPoNC1HnoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/zI34gFQGDfaFu6lzkSPoNC1HnoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 13:19:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8e:dc:58:18:7a:e6:fb:27:34:b1:19:5e:66:f3:e6:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc8df88054060df685bba9739123e8342d479e84
Validity
Not Before: Jun 3 19:01:05 2026 GMT
Not After : Jun 4 19:01:05 2026 GMT
Subject: CN=d10c6065572f16363ec0bbf076827d85f4ee5a28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:6a:54:ae:fc:84:da:52:3f:eb:de:82:2f:a1:
29:82:02:40:3b:d5:17:45:aa:6e:01:f0:91:51:20:
4a:28:1c:cb:90:fa:7e:16:b5:80:c6:4d:9b:f1:b2:
69:f1:13:40:d8:6e:79:e0:f3:5c:5b:33:6a:d8:d0:
5d:3c:99:57:fe:ad:da:f7:b4:a6:23:4c:e6:19:dd:
ea:1e:1d:3e:88:9e:3e:0c:cd:20:5a:c8:b8:72:03:
1d:5c:22:59:47:7e:40:2d:7c:eb:34:52:d6:78:95:
47:53:5d:52:4b:15:33:34:50:49:28:39:60:2c:68:
f2:2b:41:c4:51:76:ba:02:79:8a:e3:7e:a9:d2:05:
d8:fc:0a:77:c0:3f:d8:bd:ed:a1:1a:be:01:04:8e:
e3:01:8b:dd:1e:3a:7a:39:de:b8:95:5f:78:09:bb:
d7:cb:2e:7e:c2:8b:a4:8e:60:b1:f4:f3:9c:8b:66:
ca:c9:ea:df:67:95:63:67:92:39:f1:bd:0a:f7:cb:
35:23:48:32:d3:86:d3:5a:96:8e:16:ef:32:e3:97:
fa:e6:e4:84:9a:70:4d:cc:63:81:4c:51:0f:98:c4:
2e:00:e2:81:c1:85:aa:14:62:de:7f:38:da:6f:aa:
7c:2b:37:fd:44:31:01:5b:68:e0:e0:b5:b9:6e:04:
14:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:0C:60:65:57:2F:16:36:3E:C0:BB:F0:76:82:7D:85:F4:EE:5A:28
X509v3 Authority Key Identifier:
keyid:CC:8D:F8:80:54:06:0D:F6:85:BB:A9:73:91:23:E8:34:2D:47:9E:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zI34gFQGDfaFu6lzkSPoNC1HnoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/db8d38-077f-4d77-9383-dc781cc2a258/1/zI34gFQGDfaFu6lzkSPoNC1HnoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/db8d38-077f-4d77-9383-dc781cc2a258/1/zI34gFQGDfaFu6lzkSPoNC1HnoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:0c:44:4c:cd:03:18:59:d3:87:f0:e3:af:71:a3:40:4c:43:
95:20:d4:13:09:03:d2:c2:93:c2:20:42:02:bb:b0:17:d9:7c:
a8:7f:eb:1d:19:9b:05:a9:84:6e:a9:d2:f0:3c:ba:3b:18:4e:
cc:ec:e1:eb:1c:be:cf:db:85:62:14:4e:da:1c:35:80:75:0d:
70:1d:58:f9:c4:d9:29:99:37:b6:15:c8:9d:bb:76:38:84:3f:
78:64:8f:16:9b:19:43:f7:5c:c7:6c:c2:f1:b9:f2:f4:78:c5:
ef:dc:77:2b:50:2b:4c:71:58:ae:1a:4e:ae:a7:60:4e:0d:b1:
3c:5f:7f:55:f1:8b:dc:c4:a7:ec:36:2c:07:c0:1c:b0:16:12:
da:0d:d1:bb:f8:b5:fd:1d:9d:2f:2b:76:38:a9:1b:ae:21:5f:
0a:ca:a7:c6:eb:23:54:ce:4e:67:51:35:3b:a3:1e:12:91:6d:
ef:f5:c2:42:38:41:48:28:a1:ea:d4:0b:5a:b1:81:4f:d6:1d:
af:9c:07:5e:cc:4b:46:9b:a3:df:33:6a:3a:bf:b5:b5:fc:70:
de:a9:b3:c6:4e:1e:75:d5:7b:84:43:1e:6b:f3:81:7f:26:a1:
dc:cf:c1:05:aa:94:be:00:3a:db:04:ce:b8:5e:82:0e:33:83:
b8:97:9a:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 21:56:52 2026 by rpki-client