Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.mft
File: Z5IEIPci99fzxLJagOF9cpAXEYA.mft (raw, json)
Hash identifier: /O3Pv8O/wmBKlb1rhweWnOpV8mOmE4rkEe/SOp2WXcA=
Subject key identifier: 3B:38:FE:97:43:F4:8F:9A:B2:96:16:D8:EA:39:6D:3B:38:AA:38:6C
Authority key identifier: 67:92:04:20:F7:22:F7:D7:F3:C4:B2:5A:80:E1:7D:72:90:17:11:80
Certificate issuer: /CN=67920420f722f7d7f3c4b25a80e17d7290171180
Certificate serial: 019EB6FC14E8B8A88BEE91059B39CD180B11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5IEIPci99fzxLJagOF9cpAXEYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.mft
Manifest number: 195B
Signing time: Thu 11 Jun 2026 14:00:34 +0000
Manifest this update: Thu 11 Jun 2026 14:00:34 +0000
Manifest next update: Fri 12 Jun 2026 14:00:34 +0000
Files and hashes: 1: WKDKLv-tt62b9C91OCyzPhQ_OcQ.roa (hash: R8pPn24trqZL7l8MMCrinetEIJyyN4dGs9r8jTjJKfw=)
2: Z5IEIPci99fzxLJagOF9cpAXEYA.crl (hash: 8xyXzdHXgHWMs+kph+MLGBPTj2yN/p5OJjCm5kJvxT0=)
3: zmOplfT1YKhLKnx8WielhvBrOFw.roa (hash: eaJL0aLY76J5n+3Hq2EQSn+31eGw4xT4GWelS0Nf5Mk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z5IEIPci99fzxLJagOF9cpAXEYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:fc:14:e8:b8:a8:8b:ee:91:05:9b:39:cd:18:0b:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67920420f722f7d7f3c4b25a80e17d7290171180
Validity
Not Before: Jun 11 14:00:34 2026 GMT
Not After : Jun 12 14:00:34 2026 GMT
Subject: CN=3b38fe9743f48f9ab29616d8ea396d3b38aa386c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1e:9c:6b:83:2d:c8:c3:c0:27:06:bf:b9:fe:
17:35:dd:66:3e:46:18:e4:68:a6:58:7a:16:a0:58:
e7:f8:6f:ee:56:54:b6:85:34:28:28:c6:db:98:56:
64:bc:78:2a:07:99:9c:b1:c6:11:3d:4b:c0:09:1c:
3f:63:49:94:aa:db:ca:85:5e:4f:8f:20:2b:73:be:
3a:78:6d:c9:52:9c:7f:fe:70:3c:2e:6d:b1:c4:65:
46:16:d4:2e:a4:34:f5:01:8d:a5:11:f8:55:fa:a2:
9d:b0:f3:53:91:b7:ba:cd:d1:81:8d:9c:32:cd:c7:
7c:fb:6b:2b:3b:21:75:77:ee:c9:1b:b1:2a:5f:e0:
d7:7a:8b:89:de:01:f4:00:05:71:34:6b:c4:c0:d1:
c0:c3:bf:85:3d:05:de:d3:cd:8c:06:31:3f:ce:ba:
77:31:05:c4:3c:be:8a:10:87:6e:f0:36:37:b6:f1:
84:80:51:70:3c:fb:41:28:0f:6b:2a:85:c0:a2:31:
2f:05:41:05:5b:15:a8:14:86:87:f3:62:a2:71:46:
a8:c5:33:69:c1:7a:52:14:85:84:be:b1:9b:ca:d0:
4b:fc:28:7c:a0:20:91:64:f9:4b:20:c0:d4:2c:51:
02:49:42:19:8c:c5:74:25:72:c5:c5:39:75:22:18:
0e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:38:FE:97:43:F4:8F:9A:B2:96:16:D8:EA:39:6D:3B:38:AA:38:6C
X509v3 Authority Key Identifier:
keyid:67:92:04:20:F7:22:F7:D7:F3:C4:B2:5A:80:E1:7D:72:90:17:11:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5IEIPci99fzxLJagOF9cpAXEYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:b7:50:f6:95:5b:6f:65:b6:ea:47:ae:bf:8c:60:b3:a6:67:
a0:78:45:a9:0c:8a:cb:fa:51:cd:5d:8d:80:5e:ee:16:93:7c:
b7:92:e2:cb:07:46:81:e9:08:09:a5:9a:bb:a0:82:40:1c:7b:
b9:10:a8:e4:6c:79:28:27:3c:a4:fb:52:fb:a6:a5:d9:4a:79:
70:8a:ff:40:30:bb:c9:9c:1b:13:e9:76:15:f5:6f:37:b0:d2:
3a:1b:8f:7a:30:2a:68:69:ea:28:25:75:72:d5:e6:4b:02:a4:
ae:4a:a6:70:2a:38:65:56:fa:b1:aa:b0:a7:31:94:e6:96:f3:
8d:52:5b:4f:ca:46:9d:1f:40:0e:10:fd:c9:aa:20:6c:7c:03:
f5:d0:a0:89:f4:2a:ba:64:ec:9f:ce:40:ca:34:36:c3:20:25:
40:2a:ed:ae:2d:d7:a3:7c:04:0c:7c:05:5b:ac:51:9a:78:69:
00:31:66:57:1c:d0:62:1c:ce:58:84:14:c3:e6:5e:56:2c:c3:
76:81:5e:71:1b:90:e2:11:00:bb:06:c5:0e:09:9d:36:cb:3a:
d4:91:a4:7a:e2:07:d3:e3:84:d1:42:43:eb:ad:7d:8a:e6:e9:
00:b3:37:65:be:18:21:18:8b:c7:94:12:32:c9:ef:b4:37:d1:
9f:1d:1e:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 19:00:34 2026 by rpki-client