Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.mft
File: rzrc42ZL8Of2iP9BIlUXNMTRR1Y.mft (raw, json)
Hash identifier: ROhiMMjcqUKNUmc0rONrggy1UMU/FmWieavFCaEbU+w=
Subject key identifier: 19:28:20:F6:43:E5:76:CB:18:4D:7F:77:C7:6C:BA:2A:62:81:8D:C4
Authority key identifier: AF:3A:DC:E3:66:4B:F0:E7:F6:88:FF:41:22:55:17:34:C4:D1:47:56
Certificate issuer: /CN=af3adce3664bf0e7f688ff4122551734c4d14756
Certificate serial: 019E9BBC8803E900E630C1D42F9280848E8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.mft
Manifest number: 037D
Signing time: Sat 06 Jun 2026 07:01:24 +0000
Manifest this update: Sat 06 Jun 2026 07:01:24 +0000
Manifest next update: Sun 07 Jun 2026 07:01:24 +0000
Files and hashes: 1: WKKdAS92LVILbjnTiiXNrRI_064.asa (hash: WU7xtDYPq+tmZfgD8wJKGXUqlisupARfwtckbBQ0ds0=)
2: rzrc42ZL8Of2iP9BIlUXNMTRR1Y.crl (hash: JoNH0FinJQkJD5dDAt3kHQb8ik07eVZ9wxIdCtWPKjE=)
3: ymjEj-AVl-jhoYqun7KK_jww1EY.roa (hash: Lravz6mXezUcFlH14r837C4PlhGpAXXPBKh9Ost0iM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 07:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9b:bc:88:03:e9:00:e6:30:c1:d4:2f:92:80:84:8e:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af3adce3664bf0e7f688ff4122551734c4d14756
Validity
Not Before: Jun 6 07:01:24 2026 GMT
Not After : Jun 7 07:01:24 2026 GMT
Subject: CN=192820f643e576cb184d7f77c76cba2a62818dc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:37:5b:16:08:ac:9f:e5:54:fe:97:2f:6d:b4:
71:34:33:c1:7a:06:ef:c2:32:ce:14:80:c6:c3:71:
01:ba:c1:48:14:8e:2c:31:c1:c5:b2:52:a1:b2:95:
eb:b6:7c:84:98:c3:a5:99:a1:07:30:c5:e1:ea:da:
67:dd:f8:c4:30:61:db:8f:61:d2:99:a2:13:50:79:
41:f5:fa:1f:d3:56:61:ad:4f:96:55:0b:48:cc:7c:
c4:26:a9:0f:87:54:95:59:4b:2d:25:90:0a:3e:26:
a2:7f:47:fe:44:42:9f:f3:46:91:d8:69:9e:62:00:
95:90:ee:f2:6d:8e:d3:ba:7f:67:d5:37:7f:4d:44:
ed:bd:39:52:64:47:6e:72:40:4a:42:3c:ad:6b:96:
6b:a0:c0:85:dc:ef:f0:ea:c2:40:3e:f0:ba:e0:ac:
a7:63:24:38:fa:22:64:74:8f:c3:07:65:78:d0:e7:
b6:fa:17:1a:1e:3c:fb:73:1e:5b:8e:36:fb:a4:43:
c0:e5:9e:f4:f1:bd:9b:0e:bb:4d:18:c0:df:3e:ab:
7b:bb:11:0c:5e:77:0f:f8:c5:e7:40:53:0e:80:ac:
29:99:ad:f5:31:c6:38:f2:c1:9f:89:18:0a:31:c2:
24:41:bd:fa:13:1e:0c:8d:5b:5e:dd:0f:2a:8b:25:
d1:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:28:20:F6:43:E5:76:CB:18:4D:7F:77:C7:6C:BA:2A:62:81:8D:C4
X509v3 Authority Key Identifier:
keyid:AF:3A:DC:E3:66:4B:F0:E7:F6:88:FF:41:22:55:17:34:C4:D1:47:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:bd:bb:6a:40:fb:c5:0c:a1:c1:c4:cb:21:8a:76:76:3a:ea:
f0:d1:e8:b1:cf:85:2b:49:af:00:58:e7:70:f1:b6:63:6c:08:
47:ba:d7:f7:65:df:03:df:3a:61:50:78:5d:3e:0b:43:46:af:
07:5d:a6:74:84:9c:2a:bc:2f:c7:3b:70:f8:26:83:c5:db:6b:
b8:33:bf:ef:0f:91:ec:0c:33:b6:7b:c6:04:72:8c:7c:22:2f:
a5:bb:ba:17:bb:54:92:2b:eb:84:b6:47:77:d3:8c:49:3b:29:
2e:fa:d2:fb:e3:9e:12:0e:16:4b:61:80:0a:d0:56:93:33:21:
21:99:ad:3a:8a:f2:22:7f:9e:f3:e7:8a:85:3a:3f:77:ae:0b:
cd:af:f3:f2:58:73:21:ce:7c:70:3a:da:03:98:67:23:73:e5:
bf:dc:26:62:00:86:37:05:fc:8a:80:53:cd:1c:2e:bf:4b:8c:
ae:86:75:96:68:c9:ad:f4:42:aa:04:fc:63:21:00:4f:d0:33:
9b:a9:93:11:39:6c:5a:f5:fb:13:fb:6a:54:77:05:1c:6b:6f:
21:e5:5d:99:5f:c6:a4:2e:a3:fe:40:21:ef:e0:1e:05:05:ad:
4e:d8:26:51:1e:79:7a:96:42:b4:e4:7c:5f:e8:f2:21:b9:58:
5b:1a:00:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 16:52:38 2026 by rpki-client