Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.mft
File: zm4aIgj6PxufPTj_8fjiw02RHzY.mft (raw, json)
Hash identifier: CV+GkR0734uxSmzzIYJH5P5DVT2X5RHVRv6LIM/vZG0=
Subject key identifier: CE:CA:0A:05:1B:AB:28:6C:49:94:43:58:76:66:A4:8C:DA:75:EE:8A
Authority key identifier: CE:6E:1A:22:08:FA:3F:1B:9F:3D:38:FF:F1:F8:E2:C3:4D:91:1F:36
Certificate issuer: /CN=ce6e1a2208fa3f1b9f3d38fff1f8e2c34d911f36
Certificate serial: 019EBB0FCDA958F8E7C2987E5BF0506B647C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zm4aIgj6PxufPTj_8fjiw02RHzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.mft
Manifest number: 1254
Signing time: Fri 12 Jun 2026 09:00:35 +0000
Manifest this update: Fri 12 Jun 2026 09:00:35 +0000
Manifest next update: Sat 13 Jun 2026 09:00:35 +0000
Files and hashes: 1: gvoNw609bD_6W2IwVPcUpI-Guaw.roa (hash: ye+ihzO9nCFXOpOHQxxGEqHh0UKlaKr0ZU9zZSsc480=)
2: zm4aIgj6PxufPTj_8fjiw02RHzY.crl (hash: OLQa+UNtQokzGbiK1lna5MX/WAPAVtY17zpWIIEJRcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zm4aIgj6PxufPTj_8fjiw02RHzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 09:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bb:0f:cd:a9:58:f8:e7:c2:98:7e:5b:f0:50:6b:64:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce6e1a2208fa3f1b9f3d38fff1f8e2c34d911f36
Validity
Not Before: Jun 12 09:00:35 2026 GMT
Not After : Jun 13 09:00:35 2026 GMT
Subject: CN=ceca0a051bab286c499443587666a48cda75ee8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e0:e6:54:00:5a:37:12:7f:72:7f:eb:ad:c7:
99:44:1b:3e:64:05:50:2e:fe:80:d9:dd:00:18:5a:
6b:05:f3:88:47:c3:a8:9d:31:4d:35:17:cc:93:09:
7e:b0:41:36:88:22:36:74:09:1d:82:92:fd:14:20:
49:89:1d:7e:19:86:11:02:61:e6:01:8b:8e:9b:86:
23:11:45:07:8e:00:48:8a:3f:d5:e9:bd:0c:21:84:
01:0d:af:5b:35:fc:0a:93:15:4c:ae:ae:76:af:d9:
8a:c6:10:92:34:8b:80:ee:70:f6:7d:5e:2d:7e:70:
13:79:47:cf:e4:eb:bd:51:bd:30:23:e4:67:63:ca:
33:e5:59:26:65:c8:9b:21:35:b7:e4:ba:2d:34:09:
44:b3:46:2e:9d:f1:ee:96:15:48:64:26:61:ab:aa:
4f:5e:42:48:fa:30:75:d7:b1:19:c5:b7:3d:9a:7d:
f0:9b:5c:35:bf:d2:a1:19:70:ff:f5:d9:fe:46:a6:
5d:57:53:af:df:b3:e7:c5:fe:ad:bb:ee:74:64:cd:
7a:6e:bf:83:fe:0f:cb:00:0e:52:6a:3b:03:cd:b1:
f2:b9:37:82:c3:28:cb:16:05:ed:d1:ca:dd:ef:e0:
3d:81:b7:29:23:f6:e8:1b:9f:fa:4d:9b:ca:ec:87:
b5:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:CA:0A:05:1B:AB:28:6C:49:94:43:58:76:66:A4:8C:DA:75:EE:8A
X509v3 Authority Key Identifier:
keyid:CE:6E:1A:22:08:FA:3F:1B:9F:3D:38:FF:F1:F8:E2:C3:4D:91:1F:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zm4aIgj6PxufPTj_8fjiw02RHzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:1e:32:7c:b5:55:3c:83:b3:0e:be:10:c9:d0:4d:6e:a4:62:
37:a2:bb:55:75:ca:02:64:14:d5:c9:08:8c:d4:9a:0e:46:8e:
8a:71:10:d6:c9:31:26:f9:e3:43:65:53:0b:92:ba:3b:4f:65:
54:f0:cb:13:fd:02:9f:cd:7b:a8:9f:1f:7f:0e:3c:d8:a1:52:
20:98:f7:87:90:0b:ba:06:20:b5:50:92:1b:82:b0:45:5a:94:
8d:60:f9:a5:4c:9e:1e:aa:02:a4:c3:90:6a:3b:ea:5e:65:18:
c2:7e:d0:c4:59:8e:c7:c6:3e:10:49:bb:3b:0a:55:2b:7b:07:
e1:f1:85:a5:01:1a:1a:52:36:b6:c4:ea:4e:ba:d9:89:7b:72:
eb:c6:f9:5c:7d:7f:10:c0:9f:64:4d:74:9f:35:99:98:2b:7f:
bf:33:22:48:08:2e:c6:e9:ed:1e:88:0d:62:47:3b:ce:c4:fd:
d8:45:2a:c6:65:18:8b:0f:39:74:7d:d1:79:48:0e:00:e7:31:
8d:8e:c0:d3:1d:d4:88:0e:85:a3:f1:89:65:de:26:3d:cf:c0:
e1:54:d2:fe:5a:6c:c9:03:a3:ce:08:fb:67:55:74:9d:1f:44:
53:fe:8b:52:dd:71:cc:50:12:ed:e2:90:fc:36:f8:8c:5d:f1:
53:b6:0f:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 19:02:24 2026 by rpki-client