Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.mft
File: zVdth24X5nqjsfHBDas52yk14is.mft (raw, json)
Hash identifier: sPi38xJtiOZNAG4nbSMYeWzlI9vWBAwwKK4EH2ZURuE=
Subject key identifier: 98:A8:59:3E:4F:8C:20:BC:E5:AB:41:03:DD:C3:26:6E:6A:DC:AE:AF
Authority key identifier: CD:57:6D:87:6E:17:E6:7A:A3:B1:F1:C1:0D:AB:39:DB:29:35:E2:2B
Certificate issuer: /CN=cd576d876e17e67aa3b1f1c10dab39db2935e22b
Certificate serial: 019EE143166CE8C32920EBFE3A2DE6DCB054
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zVdth24X5nqjsfHBDas52yk14is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.mft
Manifest number: 1373
Signing time: Fri 19 Jun 2026 19:02:10 +0000
Manifest this update: Fri 19 Jun 2026 19:02:10 +0000
Manifest next update: Sat 20 Jun 2026 19:02:10 +0000
Files and hashes: 1: 3XuA-YVzPEgJjeMJ8s1Vm2HEV7M.roa (hash: L2BlNBBMkivGXWvUezO7Aw0uWHpwLq/KSkHq0trlQZE=)
2: 9_TVXot_dyIkEe9KiLsuyW2oktk.roa (hash: AY0ZbEX8AuKpfJf3mMe1LHPcHhetoh8C291fNwOvGkw=)
3: EH4KOFxcs2mIofbNI1ahfqTJYGE.roa (hash: D1AeMO131kzbiuMNmxTtyfBa0NC9RKdmdxddmi5mG60=)
4: M2b0AyIxBEZE26l78yx_U6jH-HM.roa (hash: qI3z2lgsBJDNei5CDronPrCJiOhj9yjVA1Waw1BZhZw=)
5: l42LyB_1C2P-LllZFiZxTraA8VY.roa (hash: DBvrQLij/XijOP3rNHrPmHSYFZ7FdPcqe5/jQy1zmiA=)
6: s13GH00hV2jIxjzw03ezHAtEnrE.roa (hash: wwzOhbN/GMGtfE1ca6NvpkVgz3P26P0FotyIBvRPTpA=)
7: wsv3RhVPC0LRVw4Iv-_qJ-xb_MA.roa (hash: htIN8qHXgg74PxltVLjdHQI1GM5oys81YrYBTFBjHyw=)
8: zVdth24X5nqjsfHBDas52yk14is.crl (hash: dDgQGXWhI1t0A9+dsvf/+GNhkF2hMm+Lhn7uHAZJlII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.mft
rsync://rpki.ripe.net/repository/DEFAULT/zVdth24X5nqjsfHBDas52yk14is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Jun 2026 19:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e1:43:16:6c:e8:c3:29:20:eb:fe:3a:2d:e6:dc:b0:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd576d876e17e67aa3b1f1c10dab39db2935e22b
Validity
Not Before: Jun 19 19:02:10 2026 GMT
Not After : Jun 20 19:02:10 2026 GMT
Subject: CN=98a8593e4f8c20bce5ab4103ddc3266e6adcaeaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:86:d0:08:2f:a5:9a:ef:07:f0:14:ef:a7:57:
b1:1d:ca:6d:43:15:b7:fc:9a:08:2e:44:03:87:63:
49:c5:c2:c1:33:69:8d:3b:54:38:2f:0f:1a:d2:9e:
80:6d:63:82:19:e6:75:82:aa:92:f6:66:86:95:fa:
a8:99:f4:4a:c0:aa:68:e8:33:35:57:e6:eb:8b:0f:
42:a3:ba:1c:28:b8:e4:ab:d4:a2:0f:1c:ff:4e:94:
12:70:4d:a2:8b:18:74:49:9b:14:f4:d2:a1:00:76:
88:78:55:17:77:37:99:af:02:1f:b1:a6:c7:be:f5:
c5:f8:2a:f1:9e:38:10:cf:ea:4d:6b:83:6b:56:83:
d6:ad:9b:08:89:ae:48:6c:b4:31:2b:7f:13:6e:1c:
c8:58:fa:77:20:84:19:b5:63:18:da:c1:54:e8:3c:
a1:93:d6:99:62:72:7c:82:9a:67:88:1b:06:4d:9e:
8b:1f:8a:5c:d7:19:20:5f:c3:55:47:b1:25:c5:f8:
f8:5c:3e:d7:ae:7d:ce:d3:d1:d3:43:a4:c8:80:49:
5d:6b:ff:b7:be:15:86:d1:d0:49:e8:86:53:05:6a:
c8:dc:93:e1:35:16:33:b6:4a:66:f3:a0:5b:90:3b:
5c:5e:56:55:0f:61:d3:41:b2:c4:5f:bb:1c:bd:af:
a7:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:A8:59:3E:4F:8C:20:BC:E5:AB:41:03:DD:C3:26:6E:6A:DC:AE:AF
X509v3 Authority Key Identifier:
keyid:CD:57:6D:87:6E:17:E6:7A:A3:B1:F1:C1:0D:AB:39:DB:29:35:E2:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zVdth24X5nqjsfHBDas52yk14is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:08:cd:8b:82:b3:4e:0a:ec:1e:13:ff:e6:e1:75:44:a6:d7:
cd:50:12:8a:12:34:46:43:25:c9:4b:01:1a:23:68:a5:8b:4e:
9d:92:66:a6:6f:b7:a0:2a:6a:48:d2:d6:40:72:c7:4d:77:44:
32:7f:9e:e4:2c:07:0e:3e:9b:2e:9e:2b:98:cf:6d:77:7d:9b:
3b:0f:9e:90:38:d2:b2:33:83:3f:3f:92:92:c6:d6:b5:92:3b:
0d:cc:91:33:39:09:28:50:1a:94:fc:91:a8:33:67:b3:f8:e4:
32:2e:c9:76:08:f2:7d:67:2a:96:f0:b1:49:60:62:1f:0e:e5:
ae:20:14:0e:8e:4a:fc:68:86:e2:d4:87:19:df:fa:4e:78:de:
b1:0a:1d:af:dd:e9:de:c4:87:ba:7e:2f:40:9c:26:64:cf:f4:
cb:74:2a:9e:1a:14:bf:4c:38:da:35:16:0d:81:c4:c5:61:87:
f1:b3:97:c6:7f:81:87:f5:fa:6b:04:7b:ee:56:af:bc:49:43:
27:94:af:af:a7:99:06:e3:53:52:54:d5:51:80:14:cd:07:a8:
d9:78:e1:42:27:37:60:ad:d5:5c:53:2f:d5:fe:ec:a6:28:55:
4c:62:b4:3e:82:b0:dd:5e:5f:98:fb:bc:b9:c3:8c:82:47:03:
0c:c7:d8:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 03:13:57 2026 by rpki-client