Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/8e7aad-3515-4e1d-8462-8f76bf76cf46/1/0ZEVEKCZeeVOehSRjAuCi4I3-HY.mft
File: 0ZEVEKCZeeVOehSRjAuCi4I3-HY.mft (raw, json)
Hash identifier: o2mKIyBxx9IiyYT0A+lRpduHGSPuM3LAFVwImdshKyw=
Subject key identifier: BE:E6:B4:20:C3:5B:0F:1F:7F:A4:7B:60:F7:FE:8C:AA:57:3B:38:73
Authority key identifier: D1:91:15:10:A0:99:79:E5:4E:7A:14:91:8C:0B:82:8B:82:37:F8:76
Certificate issuer: /CN=d1911510a09979e54e7a14918c0b828b8237f876
Certificate serial: 019F190C6E57D9B460F1A57B93DA604E4B36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ZEVEKCZeeVOehSRjAuCi4I3-HY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/8e7aad-3515-4e1d-8462-8f76bf76cf46/1/0ZEVEKCZeeVOehSRjAuCi4I3-HY.mft
Manifest number: 0F84
Signing time: Tue 30 Jun 2026 15:01:12 +0000
Manifest this update: Tue 30 Jun 2026 15:01:12 +0000
Manifest next update: Wed 01 Jul 2026 15:01:12 +0000
Files and hashes: 1: 0ZEVEKCZeeVOehSRjAuCi4I3-HY.crl (hash: I4fde+xVbMrNdGZUb0LkgwJ0FbUgpTMBLWQDm368z4k=)
2: lnfrhHR0jynfR2q7TVFHy_A4Fqo.roa (hash: WwqXm5S9kqC02dQFsZ5mFoZfT2ZEKlRHGYMQ2u0hdl8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/8e7aad-3515-4e1d-8462-8f76bf76cf46/1/0ZEVEKCZeeVOehSRjAuCi4I3-HY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/8e7aad-3515-4e1d-8462-8f76bf76cf46/1/0ZEVEKCZeeVOehSRjAuCi4I3-HY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0ZEVEKCZeeVOehSRjAuCi4I3-HY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:0c:6e:57:d9:b4:60:f1:a5:7b:93:da:60:4e:4b:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1911510a09979e54e7a14918c0b828b8237f876
Validity
Not Before: Jun 30 15:01:12 2026 GMT
Not After : Jul 1 15:01:12 2026 GMT
Subject: CN=bee6b420c35b0f1f7fa47b60f7fe8caa573b3873
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:1f:34:b5:5e:bf:02:d3:b3:d6:2b:0f:c3:51:
13:9a:5d:08:07:59:da:d7:97:ba:9e:42:b8:d5:a5:
65:0b:62:83:77:1b:f1:b8:33:84:48:0b:e3:84:d9:
19:97:d2:c2:0c:4e:d3:14:02:68:ca:94:5c:db:ef:
d3:1b:fb:1e:c0:30:2f:9a:b4:d5:85:78:6b:54:eb:
7c:db:81:9f:19:1b:67:38:da:ec:97:b6:83:12:e3:
05:cf:48:de:8c:32:82:a0:18:c7:51:70:a8:51:09:
08:31:40:e9:bd:49:5f:a7:96:65:92:d9:d7:60:0c:
11:b6:47:dd:14:d8:ba:b7:59:6c:b5:5b:da:99:a4:
3b:14:ff:5c:ab:f7:1b:10:b6:66:de:0f:5b:2b:a3:
95:3d:5d:04:cd:bd:36:13:08:b0:e7:4a:8b:83:f3:
87:3c:ca:4d:ab:53:37:90:47:e4:6c:c3:e5:b7:a3:
33:cc:86:57:c8:4e:52:87:93:ab:c5:fe:02:5a:3f:
f0:7d:80:d0:49:42:a9:25:87:6b:f4:58:7e:27:3e:
a5:f4:a3:87:92:65:ef:76:b0:b2:af:7c:b4:f4:16:
4d:04:ff:83:ec:1c:b8:a5:7f:eb:4d:18:d8:30:4c:
be:98:be:41:e2:28:4a:fa:26:d5:8f:dc:3b:ff:be:
19:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:E6:B4:20:C3:5B:0F:1F:7F:A4:7B:60:F7:FE:8C:AA:57:3B:38:73
X509v3 Authority Key Identifier:
keyid:D1:91:15:10:A0:99:79:E5:4E:7A:14:91:8C:0B:82:8B:82:37:F8:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ZEVEKCZeeVOehSRjAuCi4I3-HY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/8e7aad-3515-4e1d-8462-8f76bf76cf46/1/0ZEVEKCZeeVOehSRjAuCi4I3-HY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/8e7aad-3515-4e1d-8462-8f76bf76cf46/1/0ZEVEKCZeeVOehSRjAuCi4I3-HY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:10:ac:8e:94:fb:de:05:81:2d:7a:3f:6e:49:9d:27:d4:d8:
12:7d:54:60:fb:e5:2d:c4:95:dd:60:1f:01:da:06:91:87:c1:
71:a0:1f:a4:4c:c0:26:7f:1b:44:a1:9e:47:8b:b2:c7:84:ae:
23:2d:a9:24:0f:f6:7b:77:f2:05:df:9f:99:af:46:2a:8a:ce:
a6:b4:b5:87:2d:0e:fe:75:21:5e:da:31:bb:3b:b0:09:4a:27:
79:23:e4:28:af:64:d2:e1:9c:4a:ce:96:1e:3f:3d:57:01:17:
5b:5c:63:4c:8e:bf:69:c3:dc:1a:6b:b9:7e:91:77:fe:61:a3:
f4:37:b2:1e:95:4e:27:16:f9:db:ab:98:7b:c9:8a:4e:d4:9b:
64:0b:60:bb:df:df:7e:ee:71:18:a9:42:45:94:f0:0b:67:0d:
6f:d6:0f:75:5e:f8:7a:f3:98:cd:c4:2c:58:3c:74:8a:ff:55:
2f:d0:00:47:88:71:3c:78:3b:54:03:0f:87:c1:8f:ee:61:f1:
97:68:f4:9f:c5:ec:33:02:77:34:cd:2e:77:30:0c:13:d1:7d:
84:81:7c:f7:87:b4:96:65:42:03:c9:d8:db:8c:c8:2e:b7:02:
c6:41:20:3a:e2:8e:db:78:c9:27:04:ce:df:61:5f:f6:fd:8f:
56:a3:0a:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:33:56 2026 by rpki-client