Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/8e23e5-db28-45ed-b67f-2add5e797c75/1/zdpbTOlfoL32BUFp53rvyCZd28Q.mft
File: zdpbTOlfoL32BUFp53rvyCZd28Q.mft (raw, json)
Hash identifier: g9NPccGbcKVeMDSRoANbcx/bWu/QP9zS5eJVqgjn6V0=
Subject key identifier: B6:90:6C:B7:E9:17:A2:A1:C3:D7:88:62:76:4D:89:ED:4B:B3:52:38
Authority key identifier: CD:DA:5B:4C:E9:5F:A0:BD:F6:05:41:69:E7:7A:EF:C8:26:5D:DB:C4
Certificate issuer: /CN=cdda5b4ce95fa0bdf6054169e77aefc8265ddbc4
Certificate serial: 019F159DB5AF8DC2553F3766C2B8C320CA86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zdpbTOlfoL32BUFp53rvyCZd28Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/8e23e5-db28-45ed-b67f-2add5e797c75/1/zdpbTOlfoL32BUFp53rvyCZd28Q.mft
Manifest number: 1919
Signing time: Mon 29 Jun 2026 23:01:24 +0000
Manifest this update: Mon 29 Jun 2026 23:01:24 +0000
Manifest next update: Tue 30 Jun 2026 23:01:24 +0000
Files and hashes: 1: _8ZFO9ocBpb_Ph-40yN6ACd4c-s.roa (hash: nv3UD4Bh28t9KPR31Vxom/hj2bFKQ3slvDA/BYva5PI=)
2: zdpbTOlfoL32BUFp53rvyCZd28Q.crl (hash: sOoNLAbeI22xmb/7Vz+4/u/BCmdZ/Up3LpLvgTkFE6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/8e23e5-db28-45ed-b67f-2add5e797c75/1/zdpbTOlfoL32BUFp53rvyCZd28Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/8e23e5-db28-45ed-b67f-2add5e797c75/1/zdpbTOlfoL32BUFp53rvyCZd28Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/zdpbTOlfoL32BUFp53rvyCZd28Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 21:41:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:15:9d:b5:af:8d:c2:55:3f:37:66:c2:b8:c3:20:ca:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdda5b4ce95fa0bdf6054169e77aefc8265ddbc4
Validity
Not Before: Jun 29 23:01:24 2026 GMT
Not After : Jun 30 23:01:24 2026 GMT
Subject: CN=b6906cb7e917a2a1c3d78862764d89ed4bb35238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:7c:78:8b:5e:3c:a5:ca:e5:96:14:6d:c6:91:
49:89:73:f8:48:ac:d2:f2:e9:6b:35:cf:61:c6:bb:
7a:13:2f:51:eb:53:10:e2:b5:6f:da:50:dd:8d:ee:
ff:42:f1:ee:9c:71:89:94:17:f9:d4:38:9d:81:78:
27:54:a0:52:78:36:63:41:2c:84:c8:71:28:c7:aa:
e5:6b:d3:97:8a:66:4e:b0:7f:f2:44:9b:c8:5f:c4:
03:8f:e4:11:91:0c:5e:90:d6:e9:81:84:4a:67:49:
8a:94:84:6f:fd:10:f7:97:e2:49:ec:b5:b0:f5:c1:
e2:b0:09:a0:ac:69:9d:55:74:49:23:5a:69:dc:1b:
2d:9b:df:22:7e:bf:51:2f:93:66:31:af:60:f0:1f:
d8:80:54:f6:b9:74:e2:2f:09:8b:8b:bf:2f:c7:d4:
ec:93:fb:db:ba:80:c8:25:aa:8a:50:91:d7:52:59:
c0:0e:cb:48:68:81:15:61:46:d3:f0:31:7e:fb:d9:
98:6b:53:cc:e4:a8:73:b6:9f:3f:79:32:b1:e3:4a:
78:a7:a3:7d:c0:a7:ef:83:f0:2c:33:7f:84:a2:33:
4d:d5:16:2f:ff:3d:c1:88:03:d8:4d:9a:1f:9e:e6:
e3:f4:e9:f4:89:c9:36:79:63:13:82:6e:06:81:2a:
1a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:90:6C:B7:E9:17:A2:A1:C3:D7:88:62:76:4D:89:ED:4B:B3:52:38
X509v3 Authority Key Identifier:
keyid:CD:DA:5B:4C:E9:5F:A0:BD:F6:05:41:69:E7:7A:EF:C8:26:5D:DB:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zdpbTOlfoL32BUFp53rvyCZd28Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/8e23e5-db28-45ed-b67f-2add5e797c75/1/zdpbTOlfoL32BUFp53rvyCZd28Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/8e23e5-db28-45ed-b67f-2add5e797c75/1/zdpbTOlfoL32BUFp53rvyCZd28Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:e4:5b:f9:76:24:db:6d:ae:43:06:3b:de:a9:4d:e5:c6:c6:
62:7a:e5:f7:ec:6f:8f:5d:a3:27:4b:f9:26:51:ea:c2:d2:79:
77:3f:60:8c:f0:be:a6:c5:af:f1:60:6c:32:3f:03:ee:57:d7:
d9:24:db:54:8e:4e:65:69:d2:48:79:38:31:45:34:e0:35:72:
33:bb:6f:1f:24:52:33:14:47:6c:16:6d:88:30:fc:3a:d2:09:
88:00:2f:a0:75:14:c9:64:68:9c:85:7d:81:68:44:a5:e0:e8:
ac:53:ce:88:6a:67:db:c3:ca:81:4c:da:3f:4d:dd:12:04:cb:
5f:a1:dc:df:d9:ed:0d:15:18:79:14:e1:fd:60:a6:c4:02:50:
a3:e3:65:c3:d1:95:9e:72:8e:e6:89:10:b1:8b:f6:ae:e8:14:
96:11:f9:52:bd:e2:44:d9:58:1e:60:78:f0:02:a6:1a:ff:96:
b3:a0:ab:c4:f3:27:fd:02:22:10:9a:49:a7:2f:1c:96:d6:02:
ba:70:1a:b7:bf:6d:c3:c5:e1:31:de:9c:41:64:41:c8:86:6b:
a4:e7:d0:92:4f:78:9d:d3:a5:9d:4b:75:b2:91:9d:be:17:8f:
d1:93:48:e4:18:79:e2:c1:da:3a:0a:ef:7f:e2:3c:0b:b6:92:
d8:ba:4a:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 03:19:26 2026 by rpki-client