Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.mft
File: znQefeZX5KEPk8qSxReoGywLJR4.mft (raw, json)
Hash identifier: RZnVJ/hvOuWtT7jWIcJ1QtOqtBlprfF0nTFCZvxy0fo=
Subject key identifier: A4:58:23:0D:71:18:CD:85:F0:15:03:7D:AE:24:E8:20:3F:FF:EA:EC
Authority key identifier: CE:74:1E:7D:E6:57:E4:A1:0F:93:CA:92:C5:17:A8:1B:2C:0B:25:1E
Certificate issuer: /CN=ce741e7de657e4a10f93ca92c517a81b2c0b251e
Certificate serial: 019EB9C6924D3021D78C302B1CA5A135DF1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/znQefeZX5KEPk8qSxReoGywLJR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.mft
Manifest number: 0F4B
Signing time: Fri 12 Jun 2026 03:00:58 +0000
Manifest this update: Fri 12 Jun 2026 03:00:58 +0000
Manifest next update: Sat 13 Jun 2026 03:00:58 +0000
Files and hashes: 1: 9As_XsenM5-QTmM1X_BCn4yPeqA.roa (hash: Dxtnn5XYXXhgv4gymsVhkJbLhB4m0DGlBCGRadS6kHQ=)
2: znQefeZX5KEPk8qSxReoGywLJR4.crl (hash: GlPg2BxvWBTucTbMJc4VLSsuvoIotvEUQWbbOd2qhZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/znQefeZX5KEPk8qSxReoGywLJR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:c6:92:4d:30:21:d7:8c:30:2b:1c:a5:a1:35:df:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce741e7de657e4a10f93ca92c517a81b2c0b251e
Validity
Not Before: Jun 12 03:00:58 2026 GMT
Not After : Jun 13 03:00:58 2026 GMT
Subject: CN=a458230d7118cd85f015037dae24e8203fffeaec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c1:b2:fb:e8:1c:e6:30:34:71:b9:8e:29:de:
a1:15:be:e3:da:d9:98:ca:61:78:d9:54:ca:7f:38:
56:07:08:bf:49:9e:da:06:8c:25:1f:99:fb:3c:71:
6d:c6:39:94:42:d5:e7:f9:24:f4:4c:c6:57:f5:25:
de:4a:c0:dd:99:38:de:2c:b6:f5:5b:35:46:3c:43:
f6:85:4a:b5:84:fe:b0:34:54:4d:f6:db:9e:06:e5:
aa:55:4e:fc:14:50:13:4c:46:51:aa:b4:73:78:01:
ef:f1:74:1e:6f:ec:85:5b:66:b0:c6:a1:62:59:29:
10:c0:aa:41:66:88:ba:76:3f:b8:97:54:42:a9:97:
f0:89:e4:6d:db:8c:cc:d1:9a:7d:05:ca:0c:c2:b1:
7e:0b:99:51:45:a4:60:c7:60:53:73:13:00:c7:c9:
eb:9c:03:44:06:39:f0:8f:a9:01:3e:2c:c7:57:2d:
4a:66:45:34:b9:87:0f:d4:86:3a:c3:a7:a7:fe:65:
86:c8:e9:a2:e4:5e:a6:55:11:aa:90:d2:91:93:72:
48:50:bb:7a:4e:17:b8:b5:68:c4:14:d4:a7:2e:96:
90:40:66:6d:5d:5d:7e:e8:07:ce:03:a6:c4:df:84:
e2:10:2e:11:87:82:00:f2:5c:48:0d:7d:d8:91:88:
f6:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:58:23:0D:71:18:CD:85:F0:15:03:7D:AE:24:E8:20:3F:FF:EA:EC
X509v3 Authority Key Identifier:
keyid:CE:74:1E:7D:E6:57:E4:A1:0F:93:CA:92:C5:17:A8:1B:2C:0B:25:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znQefeZX5KEPk8qSxReoGywLJR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:f4:72:f5:8a:53:04:2a:a1:d5:da:fd:35:11:bd:32:39:c1:
1d:d4:d7:22:07:9a:b2:af:1c:fc:64:5d:b9:fa:a1:95:77:e6:
bb:95:f5:a6:4e:d3:e7:e1:e4:2c:5a:8b:3d:8e:19:bb:3f:f3:
60:38:be:28:8c:64:23:bf:14:bf:0f:94:d2:c1:be:7d:04:10:
26:7e:d6:f8:c0:dd:a4:b2:56:59:a4:e4:20:20:16:d6:cd:c9:
42:76:ac:e8:94:68:19:2b:f7:35:cd:2d:b0:80:b7:e3:65:07:
f2:b7:bd:4f:39:d0:7f:7a:4d:fa:44:d0:2c:a3:7b:dc:50:b9:
cd:7c:5f:fa:73:6e:b8:b5:2c:9e:0e:86:72:cf:40:96:a2:76:
a8:55:aa:99:1f:d7:65:24:0b:9e:37:2d:b9:95:24:91:3b:fc:
d8:16:dd:5b:4c:59:e1:3e:9f:ec:15:86:dc:0a:af:5a:43:63:
88:ec:fe:25:15:b0:a1:3d:06:3e:8d:93:c4:ee:2d:e3:95:de:
2e:6e:b0:3b:4c:8a:36:6a:4a:5d:ae:65:28:8a:cb:67:65:ac:
07:a4:70:74:e0:49:7c:12:5d:1e:18:63:56:c9:f3:06:06:26:
a0:06:28:9d:75:9e:9d:3d:4e:0c:c1:9d:57:7b:68:cc:9c:3c:
38:55:e3:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 05:36:21 2026 by rpki-client