Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/925ea2-fff8-4095-9d96-01cd47b6ca0d/1/ZJek5qz7ctUdKe5hpig29mBgl6Y.mft
File: ZJek5qz7ctUdKe5hpig29mBgl6Y.mft (raw, json)
Hash identifier: l6zdMtKAdoUvigJkTxeUD2tunv9hGeM6uo8EGoVdjvY=
Subject key identifier: AA:00:BD:74:8A:58:C2:76:D6:4A:E7:9A:42:5D:2C:04:2D:6D:B3:31
Authority key identifier: 64:97:A4:E6:AC:FB:72:D5:1D:29:EE:61:A6:28:36:F6:60:60:97:A6
Certificate issuer: /CN=6497a4e6acfb72d51d29ee61a62836f6606097a6
Certificate serial: 019F11F828F30BF1B144B133A129E659EA82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZJek5qz7ctUdKe5hpig29mBgl6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/925ea2-fff8-4095-9d96-01cd47b6ca0d/1/ZJek5qz7ctUdKe5hpig29mBgl6Y.mft
Manifest number: 0800
Signing time: Mon 29 Jun 2026 06:01:43 +0000
Manifest this update: Mon 29 Jun 2026 06:01:43 +0000
Manifest next update: Tue 30 Jun 2026 06:01:43 +0000
Files and hashes: 1: ZJek5qz7ctUdKe5hpig29mBgl6Y.crl (hash: cHR6elJ9KROO9yPKSnf/gvwnd2TL2sjy4SCl56x6op0=)
2: t-CPneeaVHYgCJeN9aRr26OHu8s.roa (hash: i5R3976Bs/xCdmNx5+5wTM2K2LQaNxrVpxX02Fkd/C0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/925ea2-fff8-4095-9d96-01cd47b6ca0d/1/ZJek5qz7ctUdKe5hpig29mBgl6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/925ea2-fff8-4095-9d96-01cd47b6ca0d/1/ZJek5qz7ctUdKe5hpig29mBgl6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZJek5qz7ctUdKe5hpig29mBgl6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 06:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:f8:28:f3:0b:f1:b1:44:b1:33:a1:29:e6:59:ea:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6497a4e6acfb72d51d29ee61a62836f6606097a6
Validity
Not Before: Jun 29 06:01:43 2026 GMT
Not After : Jun 30 06:01:43 2026 GMT
Subject: CN=aa00bd748a58c276d64ae79a425d2c042d6db331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:2d:43:4c:76:57:d5:85:ca:95:72:d7:b0:98:
3b:1f:01:64:c2:ee:fa:f4:07:fc:5a:25:ea:49:df:
6a:2d:f7:c4:cb:bb:a7:39:34:49:9d:f4:93:cf:43:
05:fb:5e:be:24:9c:30:ba:70:07:39:be:bc:fb:05:
87:fc:79:ba:15:d9:50:17:d4:71:ab:3c:2e:fe:dc:
10:34:be:4d:45:8a:31:5e:ee:b8:47:a5:7a:28:af:
1c:77:74:f3:19:9e:3a:da:42:e2:1c:35:d1:a4:c1:
c0:16:68:dc:d6:11:81:c2:00:d0:81:28:d6:cd:46:
27:74:8e:c9:d5:ae:41:69:60:dc:ce:db:77:04:80:
5e:75:4d:15:a7:d0:fb:30:45:5c:05:d4:cb:eb:9c:
04:79:94:f1:5e:4d:3a:aa:58:bd:25:9b:4d:ed:d4:
90:c7:e9:09:77:c5:c9:99:ec:90:90:b7:5a:e3:3d:
f6:56:1e:38:28:f7:0d:08:3e:4a:d4:b5:51:c6:22:
b0:3b:59:17:0e:f7:e8:2b:7e:12:3c:17:c7:bd:12:
58:0b:da:f1:66:43:4b:76:2f:b1:9a:4c:9a:df:a0:
37:91:17:93:bd:24:41:f3:d0:a7:67:77:49:89:d7:
64:7d:df:90:b2:9b:61:dd:70:c4:c7:f5:0a:6b:f0:
28:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:00:BD:74:8A:58:C2:76:D6:4A:E7:9A:42:5D:2C:04:2D:6D:B3:31
X509v3 Authority Key Identifier:
keyid:64:97:A4:E6:AC:FB:72:D5:1D:29:EE:61:A6:28:36:F6:60:60:97:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZJek5qz7ctUdKe5hpig29mBgl6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/925ea2-fff8-4095-9d96-01cd47b6ca0d/1/ZJek5qz7ctUdKe5hpig29mBgl6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/925ea2-fff8-4095-9d96-01cd47b6ca0d/1/ZJek5qz7ctUdKe5hpig29mBgl6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:60:39:67:d1:cf:ec:10:1e:ad:dd:fc:da:f0:b1:8b:fb:f6:
6e:42:8c:b9:fe:f7:f0:7e:fa:25:0a:e3:77:13:01:4e:48:2e:
72:67:6f:00:f5:74:ef:8d:15:db:bc:17:a0:63:b8:a5:ba:97:
aa:39:e9:72:53:92:2d:ad:63:80:2a:a8:a2:30:88:4c:2e:9e:
fe:bd:a4:3a:1c:a6:45:7b:40:8f:27:80:2d:5e:87:c5:b8:8f:
ed:74:3b:3d:e1:91:5b:85:ef:6f:2a:da:59:c4:76:d5:63:46:
88:24:a7:17:ec:5f:0f:63:55:c6:d2:fa:0e:8d:07:cf:e9:71:
86:3e:5b:e7:60:36:53:a1:22:e3:39:a1:be:c6:33:13:78:eb:
a1:41:11:0f:7c:37:72:2f:df:c6:26:d6:71:a6:11:ee:8b:8a:
86:79:ab:f1:f1:b5:05:30:e8:33:5a:df:ec:ff:b6:d6:0f:0a:
9a:5e:29:44:2f:30:82:cc:62:43:f1:ad:01:9a:6e:82:a6:51:
a2:47:a7:71:49:ee:f7:5d:39:e5:ba:ee:e0:bd:4d:7a:7a:43:
df:4a:97:bb:be:ff:ff:da:f3:ea:0a:b1:0e:3f:25:e9:d7:0d:
1f:4e:3c:93:73:fa:73:99:b4:2b:01:96:73:83:aa:2f:a1:0b:
9c:a1:86:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 15:42:44 2026 by rpki-client