Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.mft
File: zPJHTehBFnUrkICnoNsyJTXFYCY.mft (raw, json)
Hash identifier: 34Da7P6shFet1n/iu6GrT23IS9Umm8puWGyGWcOGAIQ=
Subject key identifier: 42:97:16:67:5D:30:0C:B6:BE:55:D2:71:4A:7A:3F:E9:37:F4:4D:61
Authority key identifier: CC:F2:47:4D:E8:41:16:75:2B:90:80:A7:A0:DB:32:25:35:C5:60:26
Certificate issuer: /CN=ccf2474de84116752b9080a7a0db322535c56026
Certificate serial: 019EC0DB49CA3B756C58BE890C36884E2084
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zPJHTehBFnUrkICnoNsyJTXFYCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.mft
Manifest number: 1379
Signing time: Sat 13 Jun 2026 12:00:57 +0000
Manifest this update: Sat 13 Jun 2026 12:00:57 +0000
Manifest next update: Sun 14 Jun 2026 12:00:57 +0000
Files and hashes: 1: DmCEvnPa2cR0m4Wq8MgYYGsM2fc.roa (hash: FlCMboWRwBxntExiPGM7Dlg1+J7ywCWO67fbQBOqoGo=)
2: zPJHTehBFnUrkICnoNsyJTXFYCY.crl (hash: cjh+82pqzMFfAs1nLuCAG7Z4x6X2pMno1fFKGSxSnA0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zPJHTehBFnUrkICnoNsyJTXFYCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:db:49:ca:3b:75:6c:58:be:89:0c:36:88:4e:20:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccf2474de84116752b9080a7a0db322535c56026
Validity
Not Before: Jun 13 12:00:57 2026 GMT
Not After : Jun 14 12:00:57 2026 GMT
Subject: CN=429716675d300cb6be55d2714a7a3fe937f44d61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d8:9b:71:ff:e2:d3:b5:46:56:7f:27:7d:75:
cf:04:b9:7c:14:8f:e0:58:f3:a7:95:59:5b:e0:1a:
34:ff:0b:2b:78:28:9f:55:53:8f:39:f7:a0:28:f9:
a7:63:9b:6f:11:7d:c9:86:99:7f:c5:02:d9:6e:b3:
2a:f6:39:6f:10:bd:80:d2:f8:6f:bb:a2:91:38:e5:
df:70:1b:69:52:f9:d1:7c:1e:e3:3e:72:f0:b7:66:
b9:7c:68:e7:49:bb:c8:a5:8a:2e:bf:0b:95:e4:bd:
04:7f:13:ac:0a:21:e9:c4:42:c5:de:14:34:fb:38:
66:22:89:d5:e2:50:23:1c:c4:f7:8c:45:0b:49:1d:
12:5a:56:99:95:72:f2:6e:ad:e8:65:2d:59:9b:bc:
c1:e5:c5:1d:ab:3c:99:94:5b:84:05:c9:da:dc:35:
54:5b:c8:43:6d:64:3e:e1:d7:fb:3b:bb:fb:cd:35:
25:6e:1f:fe:f7:88:e9:de:40:b6:d3:89:1b:95:89:
83:03:f0:66:5e:11:ec:db:57:3b:bd:a7:17:0a:99:
b7:ac:85:25:9e:9c:bc:e1:f1:ab:06:02:21:c0:08:
98:1e:d7:c9:c9:33:ea:95:73:96:3b:27:9e:d0:ca:
d5:43:45:99:4f:2f:e3:ca:3b:01:43:18:c5:25:5b:
d3:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:97:16:67:5D:30:0C:B6:BE:55:D2:71:4A:7A:3F:E9:37:F4:4D:61
X509v3 Authority Key Identifier:
keyid:CC:F2:47:4D:E8:41:16:75:2B:90:80:A7:A0:DB:32:25:35:C5:60:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPJHTehBFnUrkICnoNsyJTXFYCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:67:b8:bc:23:23:84:60:ec:b5:9e:24:f7:9c:b0:15:64:69:
b4:cb:32:c0:d4:81:46:ad:90:fa:27:cb:dc:fa:ed:e9:6b:74:
d3:38:be:64:b3:b5:ef:11:24:5b:cc:2e:03:28:e7:29:3f:ac:
dc:5d:2a:81:57:ec:a4:1b:58:8a:46:57:22:21:3e:0c:cb:b9:
23:fe:7d:49:b7:c5:00:0d:49:80:74:31:4d:a0:ba:52:5d:6b:
57:dc:37:bc:3b:06:90:13:49:9e:8b:09:21:4d:cd:68:5f:4b:
17:53:14:0b:4d:74:24:83:20:6a:55:70:d8:a7:23:69:4b:18:
2c:98:c2:85:ba:0c:8f:4d:d4:24:40:d8:83:5f:ca:89:1a:d7:
3b:ec:a1:8a:b4:c8:54:7c:bf:07:28:5f:78:bf:25:13:29:03:
9e:44:0e:81:e9:db:86:e6:d4:ad:04:88:11:d7:42:97:49:ad:
ac:d7:58:b9:a4:ca:61:a2:70:89:1e:07:5e:4c:66:74:22:17:
a7:6c:0f:57:76:7d:a7:be:29:9f:17:de:04:54:78:5f:af:e6:
a3:05:2a:f9:fe:b5:9c:11:a3:4c:2e:1c:d1:b4:b1:5f:43:3b:
bc:70:33:a1:85:be:01:9a:0f:24:23:d3:e7:84:76:83:7b:af:
d1:47:07:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:22:25 2026 by rpki-client