Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/zZY90B7IDenhOMneRKNtSPBrk_0.mft
File: zZY90B7IDenhOMneRKNtSPBrk_0.mft (raw, json)
Hash identifier: PFLou0mo6vtA9cqwcKI2APrQffrZVER42xo/zJIgIr0=
Subject key identifier: D6:DA:A7:E3:3F:4E:7B:11:58:84:22:4A:B9:2B:02:FE:DF:E2:ED:47
Authority key identifier: CD:96:3D:D0:1E:C8:0D:E9:E1:38:C9:DE:44:A3:6D:48:F0:6B:93:FD
Certificate issuer: /CN=cd963dd01ec80de9e138c9de44a36d48f06b93fd
Certificate serial: 019EB5B2B9BB9509512CA6CE0864C6A83B59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZY90B7IDenhOMneRKNtSPBrk_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/zZY90B7IDenhOMneRKNtSPBrk_0.mft
Manifest number: 0F81
Signing time: Thu 11 Jun 2026 08:00:49 +0000
Manifest this update: Thu 11 Jun 2026 08:00:49 +0000
Manifest next update: Fri 12 Jun 2026 08:00:49 +0000
Files and hashes: 1: TTo4BVEjNXzzXJclZ-0-kt2DI5w.roa (hash: hjAmuYuA2bu34wGu3wYkNL+2UTuhOaLaJGD6bAnWUE8=)
2: zZY90B7IDenhOMneRKNtSPBrk_0.crl (hash: veJSQpX1QAZUkVYmLATDG/ob3traSv9L0KXqlAwBaF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/zZY90B7IDenhOMneRKNtSPBrk_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/zZY90B7IDenhOMneRKNtSPBrk_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/zZY90B7IDenhOMneRKNtSPBrk_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 08:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b5:b2:b9:bb:95:09:51:2c:a6:ce:08:64:c6:a8:3b:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd963dd01ec80de9e138c9de44a36d48f06b93fd
Validity
Not Before: Jun 11 08:00:49 2026 GMT
Not After : Jun 12 08:00:49 2026 GMT
Subject: CN=d6daa7e33f4e7b115884224ab92b02fedfe2ed47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ec:80:1d:f3:3d:8a:85:9b:00:95:ad:07:79:
61:bb:91:cd:f1:17:ba:07:8b:a8:9e:dc:25:78:81:
1c:ee:77:21:5f:1f:c8:2d:f2:2b:be:51:9d:21:8b:
2a:79:13:a6:7d:bc:00:f6:56:e3:30:78:b0:b3:64:
06:7f:9f:60:d3:86:de:c6:e3:c9:31:3a:05:8d:c2:
18:a5:bd:19:40:0a:7b:a9:e2:46:05:a4:50:ef:0d:
34:36:03:88:78:f4:b3:ed:6a:77:1f:d0:a4:d0:2c:
96:a3:7a:8c:53:8d:7a:61:15:37:88:bc:91:06:fd:
ed:52:b3:a9:d1:61:93:aa:01:68:b2:32:d2:cb:57:
52:41:fc:4d:f6:0e:c9:54:15:ba:19:81:8c:7b:a1:
a1:c1:d0:5f:78:82:a9:90:63:f3:eb:d5:25:b1:06:
ec:50:29:ad:2b:ec:25:3d:2e:28:50:76:d0:2d:55:
e4:b8:bd:b9:e4:a8:08:82:82:44:89:73:c1:bb:2e:
5d:90:a2:09:b8:d9:b7:98:01:48:6d:97:4e:2a:8b:
42:09:bd:c2:59:27:6d:7c:ac:9c:ea:3e:51:8c:c4:
66:6b:b3:21:eb:46:0b:aa:9f:92:02:5a:2b:5f:3d:
22:47:ef:3a:43:a5:10:0b:c1:8c:72:00:50:97:91:
81:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:DA:A7:E3:3F:4E:7B:11:58:84:22:4A:B9:2B:02:FE:DF:E2:ED:47
X509v3 Authority Key Identifier:
keyid:CD:96:3D:D0:1E:C8:0D:E9:E1:38:C9:DE:44:A3:6D:48:F0:6B:93:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZY90B7IDenhOMneRKNtSPBrk_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/zZY90B7IDenhOMneRKNtSPBrk_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/zZY90B7IDenhOMneRKNtSPBrk_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:c7:52:a2:a0:03:5e:03:95:ba:46:ae:87:e6:e3:b8:7b:f3:
d4:d1:a9:bf:0b:65:a9:5a:23:ad:3b:ae:32:2b:e6:4e:d4:cc:
85:6a:67:de:05:9c:f1:4e:6f:23:0b:42:0b:17:dc:bf:9f:17:
80:4c:bf:2b:84:3f:ad:9d:d6:3a:53:0f:e2:3c:54:d3:0c:6f:
b7:c7:88:28:11:14:7a:a9:43:99:01:34:2e:04:2e:22:7d:b3:
b6:0c:68:f7:ac:6d:63:5f:58:1e:1f:14:84:c5:b9:0f:01:10:
74:4d:ac:12:3e:90:29:2a:99:a7:ea:de:f0:f7:d3:ee:8b:03:
7f:be:c1:88:1f:a5:27:06:fe:1b:ae:d7:be:f4:b6:ba:a1:b2:
3f:22:5a:6f:4a:77:92:95:a6:46:ec:08:c1:19:b0:7b:6f:ff:
a7:f3:91:94:fa:ca:de:3b:54:95:60:db:6d:11:d0:76:02:7f:
29:53:11:82:44:77:1d:25:37:a4:ea:e5:33:8e:0c:69:ee:3c:
b3:30:bd:14:d2:e3:e2:d1:50:c2:e2:6c:91:ed:26:66:7a:b6:
9b:db:4c:fe:7a:18:f3:39:c5:33:77:f1:0a:68:e6:68:2a:12:
74:81:67:26:c6:b7:54:ee:7f:5b:be:1f:30:97:5b:8e:7c:25:
ed:ce:68:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ61srm7lQlRLKbOCGTGqDtZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkOTYzZGQwMWVjODBkZTllMTM4YzlkZTQ0YTM2ZDQ4ZjA2
YjkzZmQwHhcNMjYwNjExMDgwMDQ5WhcNMjYwNjEyMDgwMDQ5WjAzMTEwLwYDVQQD
EyhkNmRhYTdlMzNmNGU3YjExNTg4NDIyNGFiOTJiMDJmZWRmZTJlZDQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxeyAHfM9ioWbAJWtB3lhu5HN8Re6
B4uontwleIEc7nchXx/ILfIrvlGdIYsqeROmfbwA9lbjMHiws2QGf59g04bexuPJ
MToFjcIYpb0ZQAp7qeJGBaRQ7w00NgOIePSz7Wp3H9Ck0CyWo3qMU416YRU3iLyR
Bv3tUrOp0WGTqgFosjLSy1dSQfxN9g7JVBW6GYGMe6GhwdBfeIKpkGPz69UlsQbs
UCmtK+wlPS4oUHbQLVXkuL255KgIgoJEiXPBuy5dkKIJuNm3mAFIbZdOKotCCb3C
WSdtfKyc6j5RjMRma7Mh60YLqp+SAlorXz0iR+86Q6UQC8GMcgBQl5GBtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNbap+M/TnsRWIQiSrkrAv7f4u1HMB8GA1UdIwQY
MBaAFM2WPdAeyA3p4TjJ3kSjbUjwa5P9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelpZOTBCN0lEZW5oT01uZVJLTnRTUEJya18wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lNDAzYWEtN2ZhNS00ZDk2LWI0OWYt
NmNmMTY1MjM5YmQ5LzEvelpZOTBCN0lEZW5oT01uZVJLTnRTUEJya18wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lNDAzYWEtN2ZhNS00ZDk2LWI0OWYtNmNmMTY1MjM5YmQ5
LzEvelpZOTBCN0lEZW5oT01uZVJLTnRTUEJya18wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtMdSoqAD
XgOVukauh+bjuHvz1NGpvwtlqVojrTuuMivmTtTMhWpn3gWc8U5vIwtCCxfcv58X
gEy/K4Q/rZ3WOlMP4jxU0wxvt8eIKBEUeqlDmQE0LgQuIn2ztgxo96xtY19YHh8U
hMW5DwEQdE2sEj6QKSqZp+re8PfT7osDf77BiB+lJwb+G67XvvS2uqGyPyJab0p3
kpWmRuwIwRmwe2//p/ORlPrK3jtUlWDbbRHQdgJ/KVMRgkR3HSU3pOrlM44Mae48
szC9FNLj4tFQwuJske0mZnq2m9tM/noY8znFM3fxCmjmaCoSdIFnJsa3VO5/W74f
MJdbjnwl7c5ogA==
-----END CERTIFICATE-----
Generated at Thu Jun 11 13:07:47 2026 by rpki-client