Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.mft
File: _z7T1NR7joJfv9B5SC96DCHcke8.mft (raw, json)
Hash identifier: 37oScL6qfIAyLARl3PB6usfd5y+s5yP64HxFOQJv7JE=
Subject key identifier: 80:E0:E7:BE:6A:04:1E:50:2F:25:0A:CB:BB:F2:6D:EC:0D:6D:7C:8B
Authority key identifier: FF:3E:D3:D4:D4:7B:8E:82:5F:BF:D0:79:48:2F:7A:0C:21:DC:91:EF
Certificate issuer: /CN=ff3ed3d4d47b8e825fbfd079482f7a0c21dc91ef
Certificate serial: 019EB5E93784993139B3FA356186D9ABF9BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_z7T1NR7joJfv9B5SC96DCHcke8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.mft
Manifest number: 1958
Signing time: Thu 11 Jun 2026 09:00:20 +0000
Manifest this update: Thu 11 Jun 2026 09:00:20 +0000
Manifest next update: Fri 12 Jun 2026 09:00:20 +0000
Files and hashes: 1: 69ezvJY8aZV8eEgrj-WQsC1gmeE.roa (hash: 2O4ZGW2UdJh7j7rNGC7PYb1zr3cjwg8+gzgKPe0rI+g=)
2: _z7T1NR7joJfv9B5SC96DCHcke8.crl (hash: 38NH5SymYkBYP1GUFnfUl4xlsbNaKuf4bdbKVrwhAZY=)
3: hoPMx8cKt2l3U6Uh7qXffDc38GI.roa (hash: cSBxnQp/0+IglLraeUk1nEXqdG208OR0aDWNNNv7dX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_z7T1NR7joJfv9B5SC96DCHcke8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 09:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b5:e9:37:84:99:31:39:b3:fa:35:61:86:d9:ab:f9:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff3ed3d4d47b8e825fbfd079482f7a0c21dc91ef
Validity
Not Before: Jun 11 09:00:20 2026 GMT
Not After : Jun 12 09:00:20 2026 GMT
Subject: CN=80e0e7be6a041e502f250acbbbf26dec0d6d7c8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a0:be:05:20:c7:d9:53:e5:61:28:4b:82:3e:
59:8b:34:72:12:25:81:c3:ad:62:dc:c2:f6:52:c5:
eb:03:ea:f4:7d:4e:2f:e0:a0:73:82:4a:2b:40:ad:
fe:30:ed:02:01:43:05:70:08:a8:34:a6:cb:ce:6c:
e0:c2:eb:b9:88:35:1c:3a:13:46:52:62:e9:9a:57:
12:65:3e:b5:f6:2c:32:98:d2:df:d3:e6:92:df:ab:
69:8f:d4:8b:af:58:87:7b:1b:86:c5:c7:eb:8a:9f:
ef:ee:0f:b1:f1:4c:72:12:bd:90:12:09:c5:e9:2e:
ee:36:03:89:16:ba:67:61:9d:15:06:56:c1:a9:28:
78:66:c9:a8:a1:8a:3b:d5:30:77:63:de:8b:03:f2:
e2:d6:a7:e1:80:a6:5b:01:44:38:1f:fb:05:15:01:
5d:b8:f0:74:db:79:2d:5b:55:f8:cc:d0:64:d2:1f:
1d:5d:04:c6:94:cb:ab:17:cf:f5:3e:11:49:af:43:
36:36:b3:6e:a9:d3:b5:dc:a8:0c:37:d3:ef:70:fd:
f1:b4:e8:2b:fc:8a:b0:7c:f9:3e:55:88:33:83:06:
4f:ec:a0:a4:f7:b9:ee:57:8b:84:08:1a:9c:42:56:
d5:c7:54:d8:20:d8:40:ec:07:ba:26:cd:2a:77:81:
46:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:E0:E7:BE:6A:04:1E:50:2F:25:0A:CB:BB:F2:6D:EC:0D:6D:7C:8B
X509v3 Authority Key Identifier:
keyid:FF:3E:D3:D4:D4:7B:8E:82:5F:BF:D0:79:48:2F:7A:0C:21:DC:91:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_z7T1NR7joJfv9B5SC96DCHcke8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:ff:db:75:4f:67:30:61:e0:a9:f4:bd:1e:06:ab:62:ed:0b:
97:1e:f7:e2:26:f7:a6:ac:e5:bd:ec:9e:65:c3:8f:47:24:a1:
12:2c:b4:fd:9d:d5:22:1e:75:6f:76:d5:8a:88:7b:a6:18:e1:
bb:8d:59:56:f6:20:dc:22:c2:08:99:30:2c:93:90:5c:8e:f6:
fb:b4:64:6f:6c:fe:19:9e:37:4e:7c:93:25:c3:5c:ef:5e:01:
4d:49:5c:4a:cd:70:68:1c:93:b6:46:86:5c:01:64:43:19:9c:
22:cb:a6:fa:c9:08:7c:b6:cc:1b:7f:4d:70:39:3e:ee:41:5c:
8f:af:0f:55:7e:52:16:19:e1:af:2a:ee:d9:4d:99:a0:1c:f6:
a4:d3:b3:ff:f9:03:b7:84:f9:df:70:b6:1d:c2:f9:b9:37:bd:
3d:fe:53:4c:c4:4b:54:e0:7e:1d:06:3c:f3:9e:e0:3d:44:7e:
ea:25:1d:14:c0:29:2d:96:70:b6:30:e7:a8:71:42:cf:84:a1:
31:04:f0:e9:d6:6a:99:a6:27:5b:a1:13:93:59:0e:66:82:e1:
45:fd:7d:21:b8:c4:ee:3b:0e:dd:61:dc:0f:e1:0b:03:63:c6:
89:b2:b7:46:42:4a:a3:cb:77:1e:37:de:93:f4:93:1c:2d:35:
cf:77:30:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 17:52:18 2026 by rpki-client