Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.mft
File: zDnmvkDYASiJbM0TH2WlWtmKQK8.mft (raw, json)
Hash identifier: 6lR5m6rrxMvj6PrJeaJ5Pja/TFDx6f+kCUFXsxdAYwE=
Subject key identifier: 0A:12:4C:0B:28:DE:F0:A2:8E:A9:9B:70:07:BE:EB:04:ED:10:10:37
Authority key identifier: CC:39:E6:BE:40:D8:01:28:89:6C:CD:13:1F:65:A5:5A:D9:8A:40:AF
Certificate issuer: /CN=cc39e6be40d80128896ccd131f65a55ad98a40af
Certificate serial: 019F190C99B74823DA976420DB9719BCB709
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zDnmvkDYASiJbM0TH2WlWtmKQK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.mft
Manifest number: 1989
Signing time: Tue 30 Jun 2026 15:01:23 +0000
Manifest this update: Tue 30 Jun 2026 15:01:23 +0000
Manifest next update: Wed 01 Jul 2026 15:01:23 +0000
Files and hashes: 1: h8MAjW2nwR1TuDpY3gaR4GIp5Is.roa (hash: YMOvJ9hakU4xTrKD5f+aHfr6VChVy5zYjPbZPORV+p4=)
2: hq6cHZZmfTc8iDuXctwL9j8vYGA.roa (hash: gnwIM65nm0H3pqLfxC4cpwXQNNz6WAkiHxWYF953SRw=)
3: zDnmvkDYASiJbM0TH2WlWtmKQK8.crl (hash: cVCBAnm3FJ6lL/j/UPRlJCcSNd6DUwRvaouo+dcd09I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zDnmvkDYASiJbM0TH2WlWtmKQK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:0c:99:b7:48:23:da:97:64:20:db:97:19:bc:b7:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc39e6be40d80128896ccd131f65a55ad98a40af
Validity
Not Before: Jun 30 15:01:23 2026 GMT
Not After : Jul 1 15:01:23 2026 GMT
Subject: CN=0a124c0b28def0a28ea99b7007beeb04ed101037
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:7c:14:67:cb:b0:4e:0e:23:e0:de:65:3c:f1:
0a:df:93:49:48:0a:cd:e3:63:76:87:d1:9f:ac:81:
31:fe:46:c5:27:91:cf:c4:49:34:33:4a:1a:15:76:
54:f1:bd:13:13:be:4c:3e:fb:f8:25:68:d7:6d:2a:
ea:96:c8:c6:84:02:cc:ad:40:1e:f7:6f:fa:d0:e0:
0b:d6:30:f8:3e:9c:11:5b:f2:5a:52:fc:b6:51:f0:
cb:c1:41:38:2d:c3:54:5d:60:d5:af:5a:66:5c:c9:
23:78:e7:fd:e8:02:e5:cc:5c:b8:0e:f5:b2:18:17:
96:d5:0d:5a:83:9c:a8:e0:d9:e2:27:2a:84:7a:48:
42:c2:be:7e:28:20:bf:58:1a:89:67:b2:64:ca:0e:
3e:00:32:eb:0c:bc:f9:c0:f8:1a:05:7f:b6:29:20:
c1:01:75:df:86:2d:c0:ad:a7:8a:57:46:06:e4:8c:
2e:ea:a5:c4:10:37:c8:a2:de:9f:8d:e5:6b:d2:6b:
7e:06:0e:a8:05:b1:4f:f2:f9:37:f6:84:d5:80:0e:
ea:f6:f4:89:f6:4c:96:da:a3:96:dd:ec:28:ee:14:
4c:98:a7:be:bc:33:68:be:72:e9:0c:e3:f2:c9:82:
bf:87:b7:31:88:5d:12:5f:56:8a:d0:e7:e0:14:f2:
75:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:12:4C:0B:28:DE:F0:A2:8E:A9:9B:70:07:BE:EB:04:ED:10:10:37
X509v3 Authority Key Identifier:
keyid:CC:39:E6:BE:40:D8:01:28:89:6C:CD:13:1F:65:A5:5A:D9:8A:40:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zDnmvkDYASiJbM0TH2WlWtmKQK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:b7:71:62:5b:13:a0:93:3b:64:63:69:1a:5d:8f:7b:0f:c0:
3f:de:08:db:a3:54:90:d1:44:0a:35:0f:52:49:b6:8e:20:91:
8e:01:0f:87:91:69:72:d9:f4:5d:a1:dd:1e:24:4b:50:87:39:
57:0f:32:08:83:a4:e0:1a:d7:e6:f6:e5:b8:7d:a7:39:ea:48:
ef:65:0e:e5:30:f4:a8:65:24:b3:b9:6a:2f:19:1c:46:af:a9:
74:37:93:eb:26:b2:fb:86:18:1a:9d:f2:11:36:5d:38:43:72:
b0:a1:17:14:72:f1:9a:f6:a2:fe:ad:f8:aa:9c:96:07:10:b4:
11:30:f3:0c:a4:b7:c7:fa:8a:2b:54:ef:7b:4e:0f:0c:c1:ba:
6c:01:14:e3:db:21:26:d2:3e:3a:c0:35:3c:98:f4:83:71:4d:
eb:0d:ea:9c:66:fc:dc:77:a3:18:4c:1b:5d:58:58:6d:f3:a6:
ac:5f:1b:09:4f:5b:15:1f:36:5c:dd:72:e1:86:cc:9e:20:fe:
97:75:fa:af:80:4b:2b:aa:c3:d9:4a:f2:c8:3c:61:e6:6e:d6:
ae:24:74:ab:1b:46:77:84:0c:d6:54:ad:1d:87:2d:25:4d:4c:
81:86:1a:ef:d5:87:03:8d:13:e6:16:1f:7c:e0:08:1c:f7:c5:
98:bb:9b:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:40:00 2026 by rpki-client