
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft
File: ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft (raw, json)
Hash identifier: TNnoaIGg8ndMKbdgWVwcIsUTejdPB8oI0lLzL5/7jM4=
Subject key identifier: 7F:00:92:75:D0:50:99:6C:0F:CB:2E:A3:AA:43:39:9E:6D:7F:F0:A7
Authority key identifier: 65:3F:55:62:91:21:B6:0F:B1:9C:97:F9:9C:75:DD:6F:01:5D:D6:E8
Certificate issuer: /CN=653f55629121b60fb19c97f99c75dd6f015dd6e8
Certificate serial: 019F1A569A3B7D654005A7EC20CD0D5421ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft
Manifest number: 1994
Signing time: Tue 30 Jun 2026 21:01:50 +0000
Manifest this update: Tue 30 Jun 2026 21:01:50 +0000
Manifest next update: Wed 01 Jul 2026 21:01:50 +0000
Files and hashes: 1: 0GL7DdIdoFqMUjvFhCRfHpKPMbA.roa (hash: pZia0ALckAxbVwXjSvk9ZitHob5JnbAYRMcyTh/GAHw=)
2: 4CJ3InuHwPxMIYug15LfFjf4TFE.roa (hash: AqjwYTvPMHv8KhwXl422zB5jGiNZqfOiCwgbFsHZ07g=)
3: H6jlQnwQ3aiH-RYU25LA_SCJ8YQ.roa (hash: z0WYajZ68GEteUnmX5OmcBfJ0ynCGdGVIvLSKmVhonU=)
4: VxmBydPNDVkjAwNW0HlCl0mcW2A.roa (hash: 2uX2f6w9d7FkhAQJ79lByeDaz04Av+toag4OFSNYkF8=)
5: X4rKfB3PDI3kjmwak5Qpg6vv3Qo.roa (hash: rE1Gy+5Y3N/6nRhiVvsTgzmZ/j4C83X5X1jx7h+hjs0=)
6: ZT9VYpEhtg-xnJf5nHXdbwFd1ug.crl (hash: /rk8ERT8xccd0TpsAo3PmED2YOFEzWhCYnphU4gBSvc=)
7: srwZqD3NLb6Mgfkh0xVjrlQc7p8.roa (hash: WOqlcZKIxr5sVUqyyKJNHMiLfFbk3vNnFX+UsNkt18I=)
8: zPyNAFdQmlJqV2qKRKA-eSuuTJY.roa (hash: WQ7fB4l+y3xXDPGETnFXWLdLLeTLH4yREUZKhvFa6Ho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1a:56:9a:3b:7d:65:40:05:a7:ec:20:cd:0d:54:21:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=653f55629121b60fb19c97f99c75dd6f015dd6e8
Validity
Not Before: Jun 30 21:01:50 2026 GMT
Not After : Jul 1 21:01:50 2026 GMT
Subject: CN=7f009275d050996c0fcb2ea3aa43399e6d7ff0a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:59:e3:e4:a2:de:fb:c9:53:71:15:82:a0:8a:
70:b6:f0:75:60:91:3f:bf:8f:13:8d:b3:24:6d:d8:
ed:88:d8:65:aa:02:02:64:0a:84:7c:65:7d:e8:71:
bd:fb:8e:18:aa:47:7b:ca:9c:6c:63:4d:a5:25:86:
76:2b:03:06:52:50:72:aa:0b:1f:f5:e2:d4:c5:80:
8d:3e:03:91:f2:66:02:fe:1b:af:47:44:f4:14:10:
79:58:4d:50:88:dc:f3:f7:d0:10:0a:96:6e:8d:81:
e1:93:e2:1e:94:6a:c0:6f:33:63:14:1e:b5:90:f8:
b2:5c:03:11:b6:07:c2:27:0c:b8:db:e6:d8:fd:dc:
26:fd:42:0c:68:a7:cb:eb:2a:f2:d3:2b:70:24:61:
2a:39:4b:8f:95:07:99:74:aa:70:72:63:52:c3:a9:
48:3a:f3:c9:4e:6e:8a:5a:11:51:53:7f:e5:fb:e8:
a6:67:67:6a:a3:72:e0:f6:9c:a7:9d:de:d7:ac:9f:
87:2d:19:94:0d:86:0a:82:de:96:b2:89:1b:0a:80:
32:c9:ca:59:50:9c:2c:4d:df:d6:4c:f2:c5:6e:74:
a6:a9:cf:a2:e0:90:a5:9e:96:17:66:f5:6a:f3:ef:
8d:3e:45:30:9b:3c:e6:ae:29:1a:d6:26:34:bb:d1:
5a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:00:92:75:D0:50:99:6C:0F:CB:2E:A3:AA:43:39:9E:6D:7F:F0:A7
X509v3 Authority Key Identifier:
keyid:65:3F:55:62:91:21:B6:0F:B1:9C:97:F9:9C:75:DD:6F:01:5D:D6:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:00:af:fe:c6:3f:74:7e:e3:23:b6:e6:9a:0c:4e:b6:af:43:
b4:3e:72:ff:9b:d5:84:5d:3f:7b:0d:ed:4d:4f:c6:58:56:89:
fb:28:cc:7b:d8:df:bf:91:bb:28:0e:d3:b0:d3:f1:57:d1:93:
60:d6:f0:51:68:ce:f9:50:7d:c1:9e:e0:6c:17:30:e9:99:3e:
d2:6e:09:66:f1:de:fd:7a:c5:dc:d9:d6:1f:0a:78:b4:9c:c3:
fc:4a:7b:c6:e0:f2:8f:a9:e6:65:fe:06:66:c7:ae:18:91:c2:
74:88:79:7d:95:1e:fe:b2:9a:60:00:63:55:02:4a:b5:5e:65:
25:c5:cd:2d:58:7b:57:29:82:eb:31:0a:bb:1c:54:55:1b:23:
ac:16:aa:8b:7c:c6:7e:3e:4c:33:74:13:43:26:8a:a2:a7:23:
3e:c3:c6:ff:40:36:75:4d:0a:e3:66:72:20:dc:62:33:6e:8d:
a8:85:d3:43:93:cb:6f:a4:4d:4d:6c:76:e7:8d:ec:14:8c:2e:
1d:52:47:07:49:3c:1e:e8:eb:20:a1:12:f5:24:19:7a:9e:a8:
9f:af:38:c4:41:76:b2:50:f9:aa:21:27:4a:3a:8e:7c:a2:d7:
51:27:de:8f:0e:cd:09:82:f3:d4:68:9b:43:bb:c3:52:ba:9d:
5b:65:ea:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 23:37:09 2026 by rpki-client