Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.mft
File: ZE8DP3gurzKrCQiHddZKxLlLWxE.mft (raw, json)
Hash identifier: 2Gpm94bXTl7ppX03RGMq9mTF04gfWLI4eFtFXnVJHrM=
Subject key identifier: F9:73:39:B7:B2:7C:B0:EF:CB:44:BF:A7:D4:78:94:D3:8C:76:01:D2
Authority key identifier: 64:4F:03:3F:78:2E:AF:32:AB:09:08:87:75:D6:4A:C4:B9:4B:5B:11
Certificate issuer: /CN=644f033f782eaf32ab09088775d64ac4b94b5b11
Certificate serial: 019EB98F8C2158B3C6AD17D8968F69064D7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZE8DP3gurzKrCQiHddZKxLlLWxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.mft
Manifest number: 0EA1
Signing time: Fri 12 Jun 2026 02:00:52 +0000
Manifest this update: Fri 12 Jun 2026 02:00:52 +0000
Manifest next update: Sat 13 Jun 2026 02:00:52 +0000
Files and hashes: 1: L5oncHcGX0JZWhyPpUVkQ2HdCRo.roa (hash: L2Pt1ipLnJmpkz1LbVmvE4yLg/k+xc8UXnr+qSGpbXY=)
2: XfoYwouinwxpmsIiaKSE5Ihe3J8.roa (hash: qt4foYpy013TlPUVpgU1Ocj8R+P8zvuJGdKNUnqndOk=)
3: ZE8DP3gurzKrCQiHddZKxLlLWxE.crl (hash: P3GR5Ttr5K31EIvWY+tLdGNUpN2D0VsCZO6JE4lYZE4=)
4: j34AlrWJB9qIiT39tdgx6GORRPE.roa (hash: TLVwr6WxGYUdU6twEr0V8a4U4NI5yriKBDDpZ2ESBfY=)
5: l8pVdQcsPyvAv3HyaaD26uxVYS8.roa (hash: DQA293T0QyMdTSQE50m48vTaLc10PyZBH6Ba9LHMphE=)
6: lmALzp_C2hj8qDy6u9DneABNWCE.roa (hash: 0GPCM3inwnfBar+n/0nv3z67tNfW/VcLGbHgKFaiiwI=)
7: s1N5kDv4-SpOqan5hJxvvqdzfgk.roa (hash: G1JTBs4ptyy7NKoszv8bHZCq/4kKQ4/tpR/BQXAJYC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZE8DP3gurzKrCQiHddZKxLlLWxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:8f:8c:21:58:b3:c6:ad:17:d8:96:8f:69:06:4d:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=644f033f782eaf32ab09088775d64ac4b94b5b11
Validity
Not Before: Jun 12 02:00:52 2026 GMT
Not After : Jun 13 02:00:52 2026 GMT
Subject: CN=f97339b7b27cb0efcb44bfa7d47894d38c7601d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a0:f4:99:fc:c1:38:d2:37:ad:3c:bd:8a:5b:
14:b4:7d:9a:73:2a:d1:83:1a:6b:49:b1:82:f2:af:
b7:b9:33:3c:c9:6f:81:b2:fe:42:99:61:d9:e5:c0:
c4:a5:5b:63:86:90:12:c8:0c:70:08:25:e3:71:db:
5a:ee:5e:df:6e:6d:e6:8d:8f:49:e4:70:e1:3d:6a:
3d:ed:c5:ff:64:71:da:4d:4f:36:fd:e8:60:07:07:
d3:22:c3:53:59:8b:bd:f0:29:e5:70:bd:d8:77:1e:
45:fc:db:86:07:43:2f:fb:d1:18:be:3e:d8:fd:ad:
e6:22:f8:c8:25:18:ec:4e:9b:0a:52:88:54:22:67:
05:16:5d:d7:d6:ca:95:fb:43:01:83:ce:8f:e3:d7:
d5:b8:9a:8d:0c:05:c5:9e:94:0a:1c:5c:fc:0c:1d:
50:72:6f:20:9b:c2:4a:bc:53:be:48:ed:e4:de:2e:
fa:fe:45:ee:ed:af:4d:53:2a:33:bd:e6:9a:69:71:
fd:94:d6:1d:ef:36:05:bb:36:10:26:dc:5f:9c:92:
0d:79:9e:ab:50:65:46:89:4b:64:3f:83:f9:ea:63:
84:f6:10:d1:31:56:9d:e8:ef:5d:a0:fb:eb:bc:9c:
05:c2:b0:4a:f6:fe:aa:1e:dc:ec:94:78:93:d5:bd:
ab:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:73:39:B7:B2:7C:B0:EF:CB:44:BF:A7:D4:78:94:D3:8C:76:01:D2
X509v3 Authority Key Identifier:
keyid:64:4F:03:3F:78:2E:AF:32:AB:09:08:87:75:D6:4A:C4:B9:4B:5B:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZE8DP3gurzKrCQiHddZKxLlLWxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:76:65:73:c2:28:86:52:29:36:44:60:91:0e:c7:59:c4:23:
8b:bc:2a:2f:d2:42:8f:28:65:b1:60:fe:eb:52:c0:1c:7d:5a:
8f:4d:6b:36:8b:04:4d:62:f8:66:42:29:12:66:ce:76:e7:3d:
c9:16:b5:57:04:2a:61:6d:95:84:f5:76:3c:2d:75:5d:39:11:
a7:71:82:31:a7:6c:1d:a9:e6:65:cb:6f:c7:9e:58:b9:3e:b0:
c6:05:16:58:3b:23:d4:84:de:b8:10:a4:ff:22:a0:3f:d5:81:
f6:ec:16:59:e3:b4:d5:3f:a3:b5:bb:72:32:aa:d6:ce:c2:9e:
e6:3b:da:81:58:c5:c3:7c:36:5b:60:6b:da:16:70:3d:ef:40:
95:ea:68:15:26:c3:07:91:0a:e8:62:db:42:72:7f:8f:3f:b7:
ee:38:14:32:0c:a0:e8:9b:8c:0c:00:a6:87:7f:51:06:67:c5:
39:0d:24:6a:77:d5:9a:0c:64:ca:48:c0:b9:50:b1:e4:d5:57:
29:3b:d1:43:45:4b:c8:c1:ef:26:49:d6:31:f0:49:d6:2c:cd:
ab:3a:25:9e:a0:ba:30:75:82:f4:24:c3:02:d7:d7:d2:d9:86:
a0:37:d7:78:10:db:4c:81:59:de:33:6d:38:b8:78:86:f6:80:
65:07:4f:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:23:14 2026 by rpki-client