Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/zB58Rrgd2rJ0QnDFutmGr4bfT2A.mft
File: zB58Rrgd2rJ0QnDFutmGr4bfT2A.mft (raw, json)
Hash identifier: x/4svedSlEU1RL3knKEGfmXjvTTwe4ITiGCuTHKm7gg=
Subject key identifier: 1A:08:91:FF:F2:FE:63:72:00:41:1D:E3:97:6C:6E:72:0A:32:29:DF
Authority key identifier: CC:1E:7C:46:B8:1D:DA:B2:74:42:70:C5:BA:D9:86:AF:86:DF:4F:60
Certificate issuer: /CN=cc1e7c46b81ddab2744270c5bad986af86df4f60
Certificate serial: 019EE8203CEC61835175A8D78018789DADD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zB58Rrgd2rJ0QnDFutmGr4bfT2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/zB58Rrgd2rJ0QnDFutmGr4bfT2A.mft
Manifest number: 0DD4
Signing time: Sun 21 Jun 2026 03:01:27 +0000
Manifest this update: Sun 21 Jun 2026 03:01:27 +0000
Manifest next update: Mon 22 Jun 2026 03:01:27 +0000
Files and hashes: 1: aE-igOYVXwkygfdsftmlck44E1U.roa (hash: Zm5SKhsISbz1FGue4q9TwJE5ZIQbj5Gs5h02565RFb0=)
2: tsSIuAhpfPkyoEWlotiPKzX6w8I.roa (hash: DsopP3SuV9qAYq1FNnHh/jlHBAIogzYm66PAey2rdvM=)
3: zB58Rrgd2rJ0QnDFutmGr4bfT2A.crl (hash: ibDGpgIly960Q+Gz8kXmWuY6TuZFH0IypjYuGupRnr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/zB58Rrgd2rJ0QnDFutmGr4bfT2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/zB58Rrgd2rJ0QnDFutmGr4bfT2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/zB58Rrgd2rJ0QnDFutmGr4bfT2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 22 Jun 2026 03:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e8:20:3c:ec:61:83:51:75:a8:d7:80:18:78:9d:ad:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc1e7c46b81ddab2744270c5bad986af86df4f60
Validity
Not Before: Jun 21 03:01:27 2026 GMT
Not After : Jun 22 03:01:27 2026 GMT
Subject: CN=1a0891fff2fe637200411de3976c6e720a3229df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:6f:30:41:86:9d:83:79:bb:53:6b:de:fd:9a:
20:5f:d6:f9:62:c8:7d:12:b1:c9:8f:87:3b:f8:55:
01:4d:f1:d9:fb:6d:c8:c4:c1:06:6a:8f:b4:ca:0a:
d4:b2:48:0d:cf:da:b3:d4:ca:60:c5:9e:0f:89:87:
23:23:b4:04:4a:0d:4b:c8:be:0a:bd:9d:de:4c:5a:
69:59:95:23:ce:48:bd:f9:1b:ba:fb:9d:3e:d2:ae:
00:60:34:05:1a:d2:3e:e4:48:8e:17:b1:ae:d9:9d:
cc:a2:ec:ae:d8:0e:12:02:0c:8d:00:95:7c:f4:e3:
62:49:ce:9b:14:d4:fc:95:c6:3b:1c:6b:6b:0b:d0:
a5:92:66:3f:68:4c:1d:99:56:0d:27:3f:a2:21:58:
b4:ac:1b:ff:bf:92:9a:a2:30:28:70:97:60:5f:8c:
5a:99:4c:1c:c3:dd:64:fd:d8:4b:9a:b7:a1:32:15:
c2:72:5b:99:fc:99:54:7b:fc:83:ce:0f:4e:70:4c:
df:ea:21:a9:ab:27:18:18:5f:f6:6f:5f:67:bd:17:
3f:90:a6:86:93:1c:5a:71:a2:e2:b0:2e:bc:2c:dc:
eb:2a:be:04:ed:0b:dd:db:1f:c0:11:c1:5b:fb:6e:
3e:dd:74:a1:8b:ef:68:15:20:d6:52:b3:4a:18:d3:
03:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:08:91:FF:F2:FE:63:72:00:41:1D:E3:97:6C:6E:72:0A:32:29:DF
X509v3 Authority Key Identifier:
keyid:CC:1E:7C:46:B8:1D:DA:B2:74:42:70:C5:BA:D9:86:AF:86:DF:4F:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zB58Rrgd2rJ0QnDFutmGr4bfT2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/zB58Rrgd2rJ0QnDFutmGr4bfT2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/zB58Rrgd2rJ0QnDFutmGr4bfT2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:1d:4d:53:ce:ed:1a:8c:fd:da:bb:ff:77:17:1e:55:e4:f5:
5e:a8:ea:0e:ed:09:d2:12:27:73:c1:45:3f:6e:d7:d7:ae:bc:
f9:d3:4f:50:dc:20:cc:66:13:df:5f:dc:fa:4d:2d:fe:3e:47:
1f:dc:82:6e:40:58:55:81:c8:4a:62:03:eb:3a:aa:7f:3d:c1:
87:3b:38:0d:78:98:5e:76:3e:13:e7:27:3b:cc:90:90:a6:11:
67:42:88:14:eb:8a:99:02:b2:1a:f8:42:b3:2a:3d:4b:ae:8e:
be:8a:a4:ae:b9:ae:d1:c3:03:ae:3d:95:a9:de:9b:d4:d3:ff:
6b:65:33:c7:44:da:d4:2c:1a:f6:38:54:98:64:b4:0a:1f:4f:
72:71:e4:1f:a7:1a:c0:12:88:a5:73:81:65:e3:c8:16:a3:a9:
30:35:31:53:eb:e7:e7:cb:d7:3d:f3:fa:4b:36:c2:2f:f3:a9:
12:37:06:b3:f2:1e:cf:7a:47:d9:6f:57:55:c7:0a:96:4d:dd:
64:f6:8c:67:95:e3:2a:32:24:ff:0c:a5:96:7b:fc:11:2d:fe:
84:30:de:13:ae:3a:c0:39:61:c9:c5:30:28:af:63:d1:b0:65:
0b:9a:eb:c7:2d:9b:ec:17:c5:70:63:e1:f8:43:5a:0f:26:b0:
3a:1b:7c:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 14:40:17 2026 by rpki-client