Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.mft
File: znQefeZX5KEPk8qSxReoGywLJR4.mft (raw, json)
Hash identifier: rP91He7NTEhmAda3ce2KTgK7VKfEYOaFeEBrg49s3pY=
Subject key identifier: 64:8B:12:3F:78:7A:0B:64:03:96:4D:4C:88:AA:D6:2B:C9:E6:C7:46
Authority key identifier: CE:74:1E:7D:E6:57:E4:A1:0F:93:CA:92:C5:17:A8:1B:2C:0B:25:1E
Certificate issuer: /CN=ce741e7de657e4a10f93ca92c517a81b2c0b251e
Certificate serial: 019EB7D7CF6EE27A8C1DA1F664DA91EF902E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/znQefeZX5KEPk8qSxReoGywLJR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.mft
Manifest number: 0F4A
Signing time: Thu 11 Jun 2026 18:00:34 +0000
Manifest this update: Thu 11 Jun 2026 18:00:34 +0000
Manifest next update: Fri 12 Jun 2026 18:00:34 +0000
Files and hashes: 1: 9As_XsenM5-QTmM1X_BCn4yPeqA.roa (hash: Dxtnn5XYXXhgv4gymsVhkJbLhB4m0DGlBCGRadS6kHQ=)
2: znQefeZX5KEPk8qSxReoGywLJR4.crl (hash: p7lw6Im16Hdu39j6LeUPIueSTCTLjg6trFg4Om6e1L8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/znQefeZX5KEPk8qSxReoGywLJR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 18:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:d7:cf:6e:e2:7a:8c:1d:a1:f6:64:da:91:ef:90:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce741e7de657e4a10f93ca92c517a81b2c0b251e
Validity
Not Before: Jun 11 18:00:34 2026 GMT
Not After : Jun 12 18:00:34 2026 GMT
Subject: CN=648b123f787a0b6403964d4c88aad62bc9e6c746
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fd:51:87:e0:c5:fe:11:bc:ff:76:02:0b:75:
d9:90:34:c2:dd:35:07:5d:b9:89:ae:f9:d4:73:0d:
6f:d0:17:cd:a5:66:47:12:e3:e4:db:b8:fb:92:46:
38:0b:3c:a2:97:f5:fa:70:d3:bb:73:e1:2e:d1:a5:
17:b5:ad:63:bb:c0:69:ae:cc:f9:3d:de:20:09:e3:
e0:df:c9:69:71:c7:a3:ff:86:c2:60:e6:fe:60:fa:
44:f7:4b:c3:b1:1a:8a:64:22:f0:74:a5:0f:dd:06:
09:26:15:0b:5c:ed:9c:07:ec:eb:01:36:80:bd:66:
a0:fe:f9:9a:89:dd:57:c9:0e:7e:b3:b0:d1:83:78:
18:ef:b2:6b:a0:8e:c6:66:32:e0:56:f3:6e:54:89:
ff:b7:fc:02:3a:00:b6:9e:fe:15:a7:1b:56:10:ee:
dd:ac:04:5c:c6:67:13:3c:47:e5:9f:5d:b1:82:8d:
c1:53:d7:ef:ea:df:61:3e:20:ff:49:a7:df:41:96:
17:e5:c1:5e:44:14:f4:0e:d9:0b:c1:cd:fb:8a:44:
c1:b1:71:92:1f:1b:df:75:03:68:c0:d9:8a:0c:98:
e1:a9:d6:4b:f7:b7:53:f2:16:48:e2:ce:4b:8d:4b:
30:25:08:fd:d2:07:dc:be:06:82:b6:b8:40:41:e8:
0a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:8B:12:3F:78:7A:0B:64:03:96:4D:4C:88:AA:D6:2B:C9:E6:C7:46
X509v3 Authority Key Identifier:
keyid:CE:74:1E:7D:E6:57:E4:A1:0F:93:CA:92:C5:17:A8:1B:2C:0B:25:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znQefeZX5KEPk8qSxReoGywLJR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:6c:fe:34:45:40:d7:f1:bc:8d:0b:3a:14:fa:13:5f:5c:be:
9e:30:9e:88:66:d2:a1:74:f5:48:f6:34:58:b7:e1:ee:17:c2:
8d:1a:30:73:55:67:e6:53:1c:72:59:65:4d:2f:e0:36:51:70:
66:d4:e8:2d:2e:d2:c1:9e:eb:a8:a9:6d:ee:20:83:16:1b:5e:
19:15:86:01:68:2f:b3:d2:ad:cf:b9:e8:4d:1c:6c:87:3c:20:
27:dd:f6:80:8f:0a:f7:69:ee:d9:31:75:be:90:54:6a:6e:12:
51:62:77:c2:db:3b:3a:af:f7:b4:1a:57:04:68:15:6c:48:a0:
72:71:45:cd:33:f0:34:07:ce:ec:27:8c:37:40:56:e2:94:f4:
7f:c7:25:e9:11:63:66:c1:5c:ea:ba:ad:00:0c:bb:92:11:bc:
3b:a2:6b:89:a7:77:80:3c:91:24:f3:1c:d5:64:51:57:6f:aa:
4a:52:f4:68:2e:f4:37:a4:24:72:76:e8:81:e3:ff:6e:0e:c4:
78:ef:cf:0c:8e:f4:f5:ad:cd:82:63:6a:90:fd:1f:8c:d5:c4:
99:ca:3d:f8:04:23:1e:ba:e0:2b:f8:6f:30:4e:04:a7:c1:c5:
dd:d2:14:2a:1c:92:a8:58:71:04:74:39:34:c2:06:c5:c1:8f:
52:c0:ae:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:22:40 2026 by rpki-client