Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft
File: ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft (raw, json)
Hash identifier: RiTHwtYqUYHwa2WD0AFQ6uhpJ+jDM0oXOs82t/d3NlA=
Subject key identifier: 83:50:8D:66:AC:39:D2:AB:4E:F0:FE:5D:0E:34:E4:65:5C:21:C9:1C
Authority key identifier: 64:FF:B3:09:C2:89:AC:FF:C1:BE:34:A6:F0:B6:67:5C:00:17:13:EA
Certificate issuer: /CN=64ffb309c289acffc1be34a6f0b6675c001713ea
Certificate serial: 019EB5E98850AB5864AAC8F5EA2BAFF90BED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft
Manifest number: 0E0C
Signing time: Thu 11 Jun 2026 09:00:41 +0000
Manifest this update: Thu 11 Jun 2026 09:00:41 +0000
Manifest next update: Fri 12 Jun 2026 09:00:41 +0000
Files and hashes: 1: 3wE9z3o-LZC9L1Wi744_KuJH-nA.roa (hash: vmvu4StBrIILT2zOsTXLqhGSv13Lo4k+H588mDsH8cM=)
2: ZP-zCcKJrP_BvjSm8LZnXAAXE-o.crl (hash: N9wL6DrFmpS9K3/ZAIy6l7i7lTFRn/OiCuWkwJxlBYU=)
3: amULFHSQIT1lD63zvSrNJGtGM-I.roa (hash: UX9F+FQcAi88JV/0o8okdIg01PgokJoY/+NJIGfsY+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 08:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b5:e9:88:50:ab:58:64:aa:c8:f5:ea:2b:af:f9:0b:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64ffb309c289acffc1be34a6f0b6675c001713ea
Validity
Not Before: Jun 11 09:00:41 2026 GMT
Not After : Jun 12 09:00:41 2026 GMT
Subject: CN=83508d66ac39d2ab4ef0fe5d0e34e4655c21c91c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:48:53:89:bb:46:29:5b:a5:11:2f:b9:de:da:
11:b9:47:60:16:10:b5:77:2f:87:cf:01:6a:3a:d5:
bd:44:5d:54:10:32:55:8c:56:67:d4:ee:1b:2d:73:
3a:02:de:99:6b:3d:24:58:e9:95:b1:66:c4:9e:18:
e4:8f:21:4b:28:f2:a9:56:46:22:f7:dd:37:e0:0b:
03:eb:98:69:ad:2a:a8:88:38:a2:c4:13:aa:25:5e:
3e:1a:36:fa:a2:47:88:b3:6a:2d:9a:5f:6a:33:4c:
f8:01:70:bd:de:36:49:1e:d4:e8:f0:92:14:63:c7:
e3:3c:22:7b:f2:b0:66:92:95:be:5d:6c:f0:f5:77:
19:5f:78:01:b1:44:c8:2f:be:25:f8:6f:26:d5:a7:
00:90:50:56:ad:34:62:38:05:b6:87:91:2e:6f:22:
55:12:13:10:6c:ca:b8:c5:73:94:01:52:17:7e:e6:
53:ba:42:ee:28:05:81:fd:c5:7a:2d:ca:34:b5:12:
c6:48:e9:bf:80:77:29:bc:48:aa:40:42:8f:d8:36:
7f:05:ba:0d:52:e7:94:39:f6:3c:f2:de:f3:75:f2:
31:2d:aa:c5:39:a6:e9:8c:2c:96:58:b8:35:c8:66:
48:ef:5a:37:db:14:a8:76:3e:2e:85:bb:17:7e:66:
97:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:50:8D:66:AC:39:D2:AB:4E:F0:FE:5D:0E:34:E4:65:5C:21:C9:1C
X509v3 Authority Key Identifier:
keyid:64:FF:B3:09:C2:89:AC:FF:C1:BE:34:A6:F0:B6:67:5C:00:17:13:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:aa:00:dd:91:aa:43:7f:47:31:86:4f:65:a4:27:ef:a2:02:
56:52:34:9a:56:16:e8:12:65:26:0d:6c:2e:86:6f:bd:65:dc:
89:1d:6b:f1:91:4d:79:e3:60:b4:3c:c8:6c:44:25:fd:2c:96:
ea:d4:80:a5:f8:2d:83:22:81:12:60:8f:03:3e:e0:22:b0:73:
33:e6:b2:a0:d2:81:51:6c:1a:55:58:46:97:90:ec:f8:1f:bb:
38:c0:c5:28:05:30:b1:d9:83:77:f0:51:47:40:db:52:8b:70:
d5:07:7b:e8:fb:41:03:f7:5a:4c:7f:bc:af:d4:37:91:ab:8f:
5d:82:bc:4d:f6:d2:ee:5f:03:9c:1e:66:d8:fb:8e:e3:d0:c9:
3b:c2:75:e3:dc:3d:30:42:7f:39:f9:52:4d:6f:5e:18:c3:cb:
b4:4e:04:5a:21:7e:52:40:2d:5e:12:37:c3:39:de:b5:13:62:
cf:b7:6c:42:24:a6:c8:4a:d1:2b:2e:e2:a1:ca:26:1d:90:a1:
46:a0:2d:ae:e5:4c:0f:d3:e5:60:f8:b4:64:7a:43:f1:74:38:
36:76:37:ce:78:61:fa:1a:4d:95:a3:b9:ac:19:30:6d:c1:61:
0e:0f:99:ce:f7:a7:2c:7f:31:ab:11:06:4f:16:f3:df:9e:c1:
4a:f4:fe:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ616YhQq1hkqsj16iuv+QvtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0ZmZiMzA5YzI4OWFjZmZjMWJlMzRhNmYwYjY2NzVjMDAx
NzEzZWEwHhcNMjYwNjExMDkwMDQxWhcNMjYwNjEyMDkwMDQxWjAzMTEwLwYDVQQD
Eyg4MzUwOGQ2NmFjMzlkMmFiNGVmMGZlNWQwZTM0ZTQ2NTVjMjFjOTFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1EhTibtGKVulES+53toRuUdgFhC1
dy+HzwFqOtW9RF1UEDJVjFZn1O4bLXM6At6Zaz0kWOmVsWbEnhjkjyFLKPKpVkYi
99034AsD65hprSqoiDiixBOqJV4+Gjb6okeIs2otml9qM0z4AXC93jZJHtTo8JIU
Y8fjPCJ78rBmkpW+XWzw9XcZX3gBsUTIL74l+G8m1acAkFBWrTRiOAW2h5EubyJV
EhMQbMq4xXOUAVIXfuZTukLuKAWB/cV6Lco0tRLGSOm/gHcpvEiqQEKP2DZ/BboN
UueUOfY88t7zdfIxLarFOabpjCyWWLg1yGZI71o32xSodj4uhbsXfmaXjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFINQjWasOdKrTvD+XQ405GVcIckcMB8GA1UdIwQY
MBaAFGT/swnCiaz/wb40pvC2Z1wAFxPqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlAtekNjS0pyUF9CdmpTbThMWm5YQUFYRS1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS84N2QwODYtZjUzYS00MWJhLTgxZmUt
Y2E0NDQ3MDQ0MTZmLzEvWlAtekNjS0pyUF9CdmpTbThMWm5YQUFYRS1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS84N2QwODYtZjUzYS00MWJhLTgxZmUtY2E0NDQ3MDQ0MTZm
LzEvWlAtekNjS0pyUF9CdmpTbThMWm5YQUFYRS1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsaoA3ZGq
Q39HMYZPZaQn76ICVlI0mlYW6BJlJg1sLoZvvWXciR1r8ZFNeeNgtDzIbEQl/SyW
6tSApfgtgyKBEmCPAz7gIrBzM+ayoNKBUWwaVVhGl5Ds+B+7OMDFKAUwsdmDd/BR
R0DbUotw1Qd76PtBA/daTH+8r9Q3kauPXYK8TfbS7l8DnB5m2PuO49DJO8J149w9
MEJ/OflSTW9eGMPLtE4EWiF+UkAtXhI3wznetRNiz7dsQiSmyErRKy7iocomHZCh
RqAtruVMD9PlYPi0ZHpD8XQ4NnY3znhh+hpNlaO5rBkwbcFhDg+ZzvenLH8xqxEG
Txbz357BSvT+Yw==
-----END CERTIFICATE-----
Generated at Thu Jun 11 13:09:45 2026 by rpki-client