Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/3d96f0-4981-4894-882c-6a99c46879ce/1/z2sdziLtzI0bE3M48rfikFxKixI.mft
File: z2sdziLtzI0bE3M48rfikFxKixI.mft (raw, json)
Hash identifier: idqvA3pwaqo6afZa90UO2r+V4myuJQAbZb00q3TSF6E=
Subject key identifier: A2:95:B5:55:1E:4F:D4:28:CC:E0:54:D4:2A:8E:CC:A5:32:D0:32:45
Authority key identifier: CF:6B:1D:CE:22:ED:CC:8D:1B:13:73:38:F2:B7:E2:90:5C:4A:8B:12
Certificate issuer: /CN=cf6b1dce22edcc8d1b137338f2b7e2905c4a8b12
Certificate serial: 019EE367B4677DEF190A5741E367D2329E73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z2sdziLtzI0bE3M48rfikFxKixI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/3d96f0-4981-4894-882c-6a99c46879ce/1/z2sdziLtzI0bE3M48rfikFxKixI.mft
Manifest number: 1969
Signing time: Sat 20 Jun 2026 05:01:24 +0000
Manifest this update: Sat 20 Jun 2026 05:01:24 +0000
Manifest next update: Sun 21 Jun 2026 05:01:24 +0000
Files and hashes: 1: CT3dS6C-LLdGxg4ufjXioY_GRbY.roa (hash: 2OWY/qBFg0EKWwzsD1nTcACFUzcmAJDh5fmSfds1Lpc=)
2: z2sdziLtzI0bE3M48rfikFxKixI.crl (hash: lYAIEBTRyxo2peXvi0ABWhnE5jaBzNrgXjm3hVRFj/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/3d96f0-4981-4894-882c-6a99c46879ce/1/z2sdziLtzI0bE3M48rfikFxKixI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/3d96f0-4981-4894-882c-6a99c46879ce/1/z2sdziLtzI0bE3M48rfikFxKixI.mft
rsync://rpki.ripe.net/repository/DEFAULT/z2sdziLtzI0bE3M48rfikFxKixI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Jun 2026 04:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e3:67:b4:67:7d:ef:19:0a:57:41:e3:67:d2:32:9e:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf6b1dce22edcc8d1b137338f2b7e2905c4a8b12
Validity
Not Before: Jun 20 05:01:24 2026 GMT
Not After : Jun 21 05:01:24 2026 GMT
Subject: CN=a295b5551e4fd428cce054d42a8ecca532d03245
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:45:98:f3:c1:b7:ea:39:98:95:46:cb:a5:ed:
8d:80:9a:9f:48:c7:16:8a:44:5f:37:fe:dd:5c:0f:
ad:1b:c2:2f:b6:a7:50:d8:7a:6f:7e:8d:4c:c8:af:
74:36:86:53:8b:f1:cd:74:c8:8a:55:fa:20:75:ad:
d8:9d:bb:7d:7d:81:bb:70:6b:27:27:be:41:ee:b6:
d6:9b:1d:e2:60:45:2b:7f:e3:a7:4e:4a:c2:4f:9b:
c0:b5:44:03:36:f4:f6:0a:31:80:a1:5a:ae:1f:78:
dc:02:3a:7a:a6:85:9d:b2:5c:50:2c:3b:0f:f3:6d:
65:5a:af:1a:69:ba:54:bc:04:aa:6e:aa:78:2a:0e:
24:45:ed:06:23:08:75:9d:ca:42:91:18:2e:a6:b4:
40:75:7f:1d:e9:95:bd:cd:38:18:bd:dd:11:4e:9e:
cd:d2:bb:30:8b:b5:a6:82:1b:5e:07:89:0d:85:f5:
bb:14:63:fd:28:f6:1d:5a:0e:76:c4:28:20:0c:32:
ac:04:e3:86:cd:e0:b0:ae:55:eb:24:0c:d2:1d:bd:
42:08:9a:24:82:d0:bf:b5:f6:5c:15:be:5a:25:c0:
38:0f:13:7f:3c:75:26:21:de:0f:d0:e4:4b:3f:ee:
f4:40:63:17:95:26:d4:34:46:63:38:35:44:f3:52:
4a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:95:B5:55:1E:4F:D4:28:CC:E0:54:D4:2A:8E:CC:A5:32:D0:32:45
X509v3 Authority Key Identifier:
keyid:CF:6B:1D:CE:22:ED:CC:8D:1B:13:73:38:F2:B7:E2:90:5C:4A:8B:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z2sdziLtzI0bE3M48rfikFxKixI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3d96f0-4981-4894-882c-6a99c46879ce/1/z2sdziLtzI0bE3M48rfikFxKixI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3d96f0-4981-4894-882c-6a99c46879ce/1/z2sdziLtzI0bE3M48rfikFxKixI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:00:3d:69:38:61:13:0c:6b:ae:5c:7f:87:7a:e6:e3:5a:2d:
94:18:c7:73:e9:cc:2d:d2:a0:f5:a7:76:e8:78:48:89:46:53:
b9:a9:38:aa:5c:cb:6b:75:d1:be:4a:f3:5f:54:4b:af:45:e0:
ea:12:84:1a:0e:28:49:7b:fe:cb:37:0f:67:84:15:86:58:8c:
c8:b4:3b:86:c8:9a:e7:89:03:e2:2b:23:c1:31:59:05:9d:bc:
95:2d:c1:8d:7f:50:72:85:56:61:9b:1f:0c:13:e4:0b:18:4c:
8b:bf:09:c9:c8:a5:01:f2:a1:51:3b:4e:6d:01:07:cb:b3:5c:
b5:23:a4:73:ce:7a:2f:45:8b:81:99:42:a3:58:b3:be:3d:a7:
6e:50:ab:50:c2:78:36:f4:3b:0b:19:4d:2b:9b:7c:7d:ee:a9:
7c:23:69:9a:ce:6f:ee:d0:c4:7f:a9:89:3c:de:2a:47:48:ea:
9e:d3:bd:1c:88:de:a5:9e:d2:aa:ed:3e:0c:73:35:fa:12:e9:
d2:ec:db:b6:df:e4:ba:3d:55:e5:06:d7:e6:b7:52:94:ef:c5:
b8:ee:04:b5:99:81:cd:02:75:8b:83:2b:b4:17:64:b7:c0:ea:
80:62:1c:96:60:d7:7b:09:53:35:c0:8e:50:04:b8:bd:c9:11:
92:95:52:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 13:37:50 2026 by rpki-client