Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/999647-1e7f-499b-9d48-f950327f88d3/1/zvUB0tBSGF1PZWkhjCi_NYWQAPw.mft
File: zvUB0tBSGF1PZWkhjCi_NYWQAPw.mft (raw, json)
Hash identifier: fZCz/CCkQY78Af/JJ7dU7Ez4cmqg9aOPbmAhY7GdRNs=
Subject key identifier: 23:BD:CF:50:95:57:B1:00:16:BD:47:F1:7D:CF:33:E8:FE:57:CF:AD
Authority key identifier: CE:F5:01:D2:D0:52:18:5D:4F:65:69:21:8C:28:BF:35:85:90:00:FC
Certificate issuer: /CN=cef501d2d052185d4f6569218c28bf35859000fc
Certificate serial: 019E9281E875D1871DDA35B6C57312F5348F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvUB0tBSGF1PZWkhjCi_NYWQAPw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/999647-1e7f-499b-9d48-f950327f88d3/1/zvUB0tBSGF1PZWkhjCi_NYWQAPw.mft
Manifest number: 01F4
Signing time: Thu 04 Jun 2026 12:00:47 +0000
Manifest this update: Thu 04 Jun 2026 12:00:47 +0000
Manifest next update: Fri 05 Jun 2026 12:00:47 +0000
Files and hashes: 1: VtiYaN97FHtpr9nyOV9FFG85g5o.roa (hash: YRi8yVEk1+9sLs2A+db3vBfa8pzorD5js8IjbX492Nk=)
2: gIvmrtP4qhP-p_HNvQknynsugUc.roa (hash: T7F6BSJaNt+yN8P1agGWT43ZlvcgWoTw7wuq3mofmEI=)
3: zvUB0tBSGF1PZWkhjCi_NYWQAPw.crl (hash: dmAhVMs5ZcXfPb0kvnq5Spw3+c1NvrOBRcRZRpf8o6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/999647-1e7f-499b-9d48-f950327f88d3/1/zvUB0tBSGF1PZWkhjCi_NYWQAPw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/999647-1e7f-499b-9d48-f950327f88d3/1/zvUB0tBSGF1PZWkhjCi_NYWQAPw.mft
rsync://rpki.ripe.net/repository/DEFAULT/zvUB0tBSGF1PZWkhjCi_NYWQAPw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 07:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:92:81:e8:75:d1:87:1d:da:35:b6:c5:73:12:f5:34:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cef501d2d052185d4f6569218c28bf35859000fc
Validity
Not Before: Jun 4 12:00:47 2026 GMT
Not After : Jun 5 12:00:47 2026 GMT
Subject: CN=23bdcf509557b10016bd47f17dcf33e8fe57cfad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7b:84:5e:91:5f:34:ea:b6:a7:52:dc:4c:2f:
75:15:f9:d7:ee:fd:5b:b6:8c:f8:4b:3d:17:5e:77:
43:68:62:cc:99:47:b5:01:ed:af:61:f5:a2:87:14:
31:53:cc:a5:a1:11:0c:3c:d7:0d:97:ea:fa:bb:7d:
f6:53:62:89:e5:93:8c:3f:70:a1:6f:dd:db:d2:4c:
ad:1e:7b:05:f2:4c:2c:2f:fe:19:89:e6:fa:57:a2:
69:6b:25:c2:06:30:c1:97:20:10:29:81:36:33:c4:
83:cc:10:14:0a:13:8c:c8:27:35:26:18:ea:e3:ac:
a1:96:0d:49:5f:c0:5b:9e:eb:63:24:53:9a:98:d6:
5c:cf:14:57:7e:13:49:7c:27:47:bf:ed:b4:7b:bb:
ad:c5:6e:12:b6:52:9d:df:ff:7f:fe:27:e6:54:42:
6a:3c:bd:a6:b3:1f:c6:82:0e:79:70:50:7a:c0:c1:
5e:28:4b:70:e8:c8:76:19:a6:8a:f8:33:26:27:91:
12:d3:fb:ed:7d:63:f1:ec:a5:84:6d:b5:7e:8e:28:
0d:20:ad:82:b1:e8:26:07:6f:57:64:6c:06:5b:2b:
0a:a6:de:f2:1e:86:a1:8a:72:79:90:15:38:da:98:
0d:9c:21:24:92:90:98:52:19:a2:ac:92:3b:5c:92:
07:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:BD:CF:50:95:57:B1:00:16:BD:47:F1:7D:CF:33:E8:FE:57:CF:AD
X509v3 Authority Key Identifier:
keyid:CE:F5:01:D2:D0:52:18:5D:4F:65:69:21:8C:28:BF:35:85:90:00:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvUB0tBSGF1PZWkhjCi_NYWQAPw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/999647-1e7f-499b-9d48-f950327f88d3/1/zvUB0tBSGF1PZWkhjCi_NYWQAPw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/999647-1e7f-499b-9d48-f950327f88d3/1/zvUB0tBSGF1PZWkhjCi_NYWQAPw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:15:7d:9e:2b:46:42:5f:3a:72:7f:28:2c:e8:81:bd:1e:40:
1f:76:11:34:50:3e:d8:94:cb:a1:9c:b0:13:88:7f:35:a6:6f:
00:2c:82:3f:01:88:21:09:60:89:e1:ee:7a:9f:15:7b:b2:4d:
98:f2:f7:6d:3f:8e:05:f9:01:28:b5:c3:88:b6:b7:4b:44:a9:
3a:99:9d:52:e0:50:2b:59:bd:61:34:0a:cc:ca:37:d4:1e:90:
d6:2c:b3:f5:9e:66:d8:09:4b:ff:91:fc:33:34:b1:31:27:5d:
ca:e2:f7:3d:82:c4:fb:5c:85:da:e1:6a:dc:d4:0e:af:69:2d:
af:24:e3:d4:63:f7:36:52:7b:11:ef:4f:1f:be:ea:19:ca:1b:
e3:df:1e:5d:e6:e6:52:ff:90:63:a2:10:66:9f:f3:07:31:a8:
33:30:e1:53:f5:81:52:f8:a4:aa:ab:1f:21:ad:d2:65:2e:08:
fc:6f:f0:c5:cd:7c:97:00:e9:2d:fe:4d:96:47:f7:eb:2e:1a:
1c:e5:f2:e0:2e:46:b6:ca:6e:7f:34:9e:1a:dd:80:8d:1b:2e:
0a:4e:5c:1a:af:0e:68:02:25:7e:ef:1e:e0:d9:ab:84:99:80:
8a:f4:af:59:23:fd:c5:5e:33:fc:07:93:04:f8:d9:2a:c3:1f:
a7:ac:e1:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 16:17:43 2026 by rpki-client