Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/960404-b664-40cc-9cac-54c7c4ee5bb5/1/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.mft
File: ZGXs1hXzpsVjnFHp4xl2cxUgeLg.mft (raw, json)
Hash identifier: tc/Htbi5VqTFfGEbp4sMFUbmkqvvoHhp+KEeGZvopWg=
Subject key identifier: E0:C8:A5:02:22:97:F2:C5:81:94:22:6B:49:84:B7:56:10:74:93:CC
Authority key identifier: 64:65:EC:D6:15:F3:A6:C5:63:9C:51:E9:E3:19:76:73:15:20:78:B8
Certificate issuer: /CN=6465ecd615f3a6c5639c51e9e3197673152078b8
Certificate serial: 019EB8EABB276FFE7F8BEBC160D348533A2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/960404-b664-40cc-9cac-54c7c4ee5bb5/1/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.mft
Manifest number: 1611
Signing time: Thu 11 Jun 2026 23:00:51 +0000
Manifest this update: Thu 11 Jun 2026 23:00:51 +0000
Manifest next update: Fri 12 Jun 2026 23:00:51 +0000
Files and hashes: 1: SYIf5Ik-OCMwc9Pf810Yroa_ZFU.roa (hash: 74Uxyj72SuLbr2jaxa3pXrDIfqGb08WX3YcRqaMlrGk=)
2: ZGXs1hXzpsVjnFHp4xl2cxUgeLg.crl (hash: qQnmtBlk2w8X0ZyzP7Qr2cTZT4IgTid2uJWCv8pwI2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/960404-b664-40cc-9cac-54c7c4ee5bb5/1/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/960404-b664-40cc-9cac-54c7c4ee5bb5/1/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:ea:bb:27:6f:fe:7f:8b:eb:c1:60:d3:48:53:3a:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6465ecd615f3a6c5639c51e9e3197673152078b8
Validity
Not Before: Jun 11 23:00:51 2026 GMT
Not After : Jun 12 23:00:51 2026 GMT
Subject: CN=e0c8a5022297f2c58194226b4984b756107493cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d6:58:74:d0:bd:ff:c0:31:31:4a:b7:ec:5a:
03:73:f0:d0:1d:53:14:9e:3a:76:9c:29:a7:0b:73:
f5:80:9d:53:ba:ca:94:4a:33:4b:22:f9:3d:6d:9a:
cd:70:aa:1c:1f:01:51:a4:87:0f:09:24:69:7b:3c:
7e:7b:87:bf:31:26:f9:9e:b1:bf:3f:f8:11:34:89:
10:eb:c5:2f:0b:ce:02:9c:3f:62:e1:c8:67:82:0f:
ee:0a:6b:76:b0:38:27:32:92:6f:08:0d:fb:99:cc:
64:99:62:13:6a:3f:c8:7d:23:b5:37:33:78:54:7a:
0e:ad:11:ac:db:44:44:6b:fe:d8:9a:62:92:c1:41:
4f:38:d0:eb:5e:1e:c2:3e:6b:8c:b4:75:3f:5b:fe:
f8:6a:72:b9:1c:a8:87:79:30:3b:25:d8:ae:68:8e:
3a:5e:dc:57:4f:49:02:e7:48:54:9f:46:b0:bf:22:
79:42:0c:e9:9d:2a:1e:92:30:84:71:46:ba:77:bc:
4d:cb:c0:ab:25:fc:aa:ba:b0:14:03:53:8b:71:d6:
87:e8:a8:b8:d5:dc:c6:5e:b3:e6:56:c9:39:26:6b:
5a:0c:86:a5:96:30:9d:46:0f:a8:8b:64:e7:db:61:
d4:3e:f7:93:a0:a5:5f:1f:9b:2a:dc:22:3c:3b:4c:
28:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:C8:A5:02:22:97:F2:C5:81:94:22:6B:49:84:B7:56:10:74:93:CC
X509v3 Authority Key Identifier:
keyid:64:65:EC:D6:15:F3:A6:C5:63:9C:51:E9:E3:19:76:73:15:20:78:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/960404-b664-40cc-9cac-54c7c4ee5bb5/1/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/960404-b664-40cc-9cac-54c7c4ee5bb5/1/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:61:97:ed:aa:8e:ca:25:a9:ad:81:c7:d8:fb:c0:88:d3:26:
08:30:3a:fe:c0:f0:29:0f:da:b7:25:31:e1:26:50:dd:9d:39:
54:ce:78:43:be:11:3f:0c:d9:5c:93:47:49:55:7c:02:16:ed:
f5:6c:75:ec:3d:1b:c7:4c:14:4e:36:2b:24:9f:3e:48:9f:eb:
70:4f:30:ca:71:dc:d7:76:f8:12:3a:92:f1:7e:9f:e3:c1:4c:
44:fc:ac:69:d2:08:23:48:6c:d0:5f:64:34:4c:01:c7:ac:cd:
03:c9:ee:ab:81:1f:32:b9:1b:83:cd:ee:b0:4f:06:2d:63:a6:
91:46:b7:2e:95:f0:74:58:91:58:68:28:0b:de:04:ec:a8:18:
ab:ee:b4:6f:18:f8:9b:e0:30:75:66:6b:93:b4:87:69:f3:80:
1c:b7:aa:20:b0:b9:75:98:41:98:01:3f:0c:1a:bb:79:71:cf:
e4:82:8f:59:09:09:bc:be:02:9b:06:77:3e:ff:2a:fd:67:81:
0a:05:a3:64:18:8a:72:c1:53:4f:b6:38:d5:9b:33:df:23:0b:
16:af:7e:6f:bc:f4:a8:19:e7:92:88:86:19:b4:b7:dc:80:3f:
9f:ed:77:05:f1:52:ed:21:64:85:cc:38:56:22:7c:d8:ba:bc:
d0:e7:b4:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 01:10:45 2026 by rpki-client