Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft
File: Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft (raw, json)
Hash identifier: +/O3txrMqw1/DP0repr6AIu5ZL5lLBX5pGECtioYtNs=
Subject key identifier: 1F:87:1C:81:A0:49:0A:54:19:D6:9D:38:74:2B:9C:2C:A6:E0:BD:EA
Authority key identifier: 66:5E:17:C0:8A:CD:C7:7E:94:4B:28:39:50:8F:1F:D7:11:E8:E9:7B
Certificate issuer: /CN=665e17c08acdc77e944b2839508f1fd711e8e97b
Certificate serial: 019E909332AD9A0302F484C9F595E713F5AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zl4XwIrNx36USyg5UI8f1xHo6Xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft
Manifest number: 08DE
Signing time: Thu 04 Jun 2026 03:00:26 +0000
Manifest this update: Thu 04 Jun 2026 03:00:26 +0000
Manifest next update: Fri 05 Jun 2026 03:00:26 +0000
Files and hashes: 1: C_VRFP2HIVQ92IBRqKDUpWFoIEw.roa (hash: vn7JZEI6f0C3P1aOSgIzdjUGS6glebz8hQYfRM3UhMg=)
2: IAnS6bEzch3TIofLALz1ygB0iyo.roa (hash: lyXUvYyQfJt4aH/SJqViQQv03gKvKKB5vsWtq0xG3Ro=)
3: Zl4XwIrNx36USyg5UI8f1xHo6Xs.crl (hash: pSNhZrDpe/pVe6cqNZtsVpLKWhRuDhW3L4voaJKLDN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zl4XwIrNx36USyg5UI8f1xHo6Xs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 03:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:90:93:32:ad:9a:03:02:f4:84:c9:f5:95:e7:13:f5:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=665e17c08acdc77e944b2839508f1fd711e8e97b
Validity
Not Before: Jun 4 03:00:26 2026 GMT
Not After : Jun 5 03:00:26 2026 GMT
Subject: CN=1f871c81a0490a5419d69d38742b9c2ca6e0bdea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:69:e2:81:4e:98:c4:d8:0d:2e:10:1e:d4:b6:
6a:11:62:48:e3:61:9c:91:3c:ab:20:39:50:81:23:
8d:f1:35:e0:ee:c0:fd:31:db:31:9a:d8:73:81:2f:
35:03:6f:d8:3e:65:3f:5f:7a:22:e8:91:f1:66:75:
b8:d2:06:b0:9c:bc:fa:8c:04:df:aa:10:5b:24:a1:
5d:89:22:09:41:68:6c:25:ba:9e:69:4d:61:af:d5:
42:e9:33:45:f8:a2:db:cd:70:81:12:5a:e1:2d:5b:
11:27:3f:c1:e2:96:c9:13:e5:3a:10:14:49:1e:e9:
8f:70:41:28:79:c3:e5:69:14:32:ea:d6:ed:80:e5:
f5:29:5c:ea:70:4b:de:1b:dd:1b:a1:fe:af:75:b9:
48:e1:ad:ab:0b:bb:bf:28:db:2d:7e:dc:29:4a:67:
a3:92:2f:4a:a9:a1:f9:68:c3:f5:8d:7c:df:7a:f0:
51:77:6c:9a:2e:65:15:63:70:cc:f2:aa:a3:a3:b9:
b1:a4:c1:1a:da:41:96:31:7f:d0:7e:a9:a0:50:52:
b0:cc:1f:29:65:84:94:03:1a:27:bc:7e:98:05:1b:
71:0b:4a:1a:bd:44:60:da:3e:4a:77:3d:02:e7:cf:
d3:a0:94:2d:62:99:b6:54:0a:0c:07:8d:56:4b:ff:
86:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:87:1C:81:A0:49:0A:54:19:D6:9D:38:74:2B:9C:2C:A6:E0:BD:EA
X509v3 Authority Key Identifier:
keyid:66:5E:17:C0:8A:CD:C7:7E:94:4B:28:39:50:8F:1F:D7:11:E8:E9:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zl4XwIrNx36USyg5UI8f1xHo6Xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:07:a7:10:0b:68:0d:02:f9:9a:58:d5:5d:0c:10:97:f1:ae:
7a:9e:47:90:95:7e:b3:89:63:49:d6:34:a6:aa:64:4e:96:ed:
9b:01:14:b1:1e:95:33:97:3e:27:1c:8f:53:0b:d8:7a:fb:05:
1c:30:07:aa:18:46:68:23:a2:52:45:9b:8c:f2:0d:59:1c:36:
a7:dc:9e:ff:04:2a:5d:30:03:49:aa:63:5a:42:72:b7:9b:2b:
71:99:35:7f:5e:81:0d:f0:f6:c0:b4:20:20:9d:69:b7:f7:81:
81:b9:0b:81:51:0b:3c:d8:a6:bc:05:07:f9:3b:cf:1b:e9:11:
dd:40:93:dd:e1:2a:e9:45:e3:f5:fd:3d:a6:71:9d:b1:4b:23:
34:aa:65:fb:72:5f:14:46:4a:38:31:ec:a1:8a:0d:4e:fe:2e:
d5:b4:ab:41:8d:5f:ad:4c:37:a3:eb:67:06:0d:8a:fe:48:6d:
29:19:e8:b8:d3:f1:fb:e6:22:98:24:ad:2e:6d:02:32:d2:c2:
63:ba:ad:08:02:31:61:10:73:f3:70:ae:17:8f:2c:55:ef:d7:
86:13:e2:48:27:8f:4d:8d:c2:7e:e5:ba:80:d4:8b:e5:d0:6f:
85:f7:0b:17:4b:64:60:08:49:41:7c:31:13:f7:9c:d8:d2:ea:
d0:21:b8:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 12:03:34 2026 by rpki-client