Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5ca328-f114-4b3f-b8ba-50d7d94e2b9f/1/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.mft
File: z1jLxKrj-AxJs3KRGo1Ehhzf7ss.mft (raw, json)
Hash identifier: XqhmC2ROzqaHR2PuEXP/BwYzGP1yg0p8RhppT/HsGmM=
Subject key identifier: 09:F5:2B:21:C7:F5:00:97:04:39:DF:BA:04:33:EE:72:22:2A:C1:D5
Authority key identifier: CF:58:CB:C4:AA:E3:F8:0C:49:B3:72:91:1A:8D:44:86:1C:DF:EE:CB
Certificate issuer: /CN=cf58cbc4aae3f80c49b372911a8d44861cdfeecb
Certificate serial: 019F18D6C0422F1CD509F6F3DDFD3E3D93EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/5ca328-f114-4b3f-b8ba-50d7d94e2b9f/1/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.mft
Manifest number: 198E
Signing time: Tue 30 Jun 2026 14:02:34 +0000
Manifest this update: Tue 30 Jun 2026 14:02:34 +0000
Manifest next update: Wed 01 Jul 2026 14:02:34 +0000
Files and hashes: 1: D4uyY53Lmy1XuEBR8gb-mU5orsY.roa (hash: 8oSSSK/7hQ8ikVIjak5cGWlYgkzTSsHj01P8F5aOk0c=)
2: _-wZGwfKC4JuWvajehhHWsCMKV0.roa (hash: d+1R/IWP3rQJYixIA4F2RI4IuR3jIDKC1rUEN0I2u8s=)
3: z1jLxKrj-AxJs3KRGo1Ehhzf7ss.crl (hash: ZKOIT0FRurtkxgVF4MqeyEuRdtDUcg3LmXo9H52ZIsE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/5ca328-f114-4b3f-b8ba-50d7d94e2b9f/1/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/5ca328-f114-4b3f-b8ba-50d7d94e2b9f/1/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.mft
rsync://rpki.ripe.net/repository/DEFAULT/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:02:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:d6:c0:42:2f:1c:d5:09:f6:f3:dd:fd:3e:3d:93:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf58cbc4aae3f80c49b372911a8d44861cdfeecb
Validity
Not Before: Jun 30 14:02:34 2026 GMT
Not After : Jul 1 14:02:34 2026 GMT
Subject: CN=09f52b21c7f500970439dfba0433ee72222ac1d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:91:d7:52:04:64:d3:60:e4:b5:45:7e:a2:36:
99:ee:3e:46:ab:28:5a:57:b0:f2:58:fa:e0:95:a0:
e9:39:b1:c5:85:4a:08:1f:c5:23:b8:a2:31:72:3f:
51:83:36:f5:5c:01:4f:63:e4:bd:52:36:4b:54:0f:
6e:38:94:97:96:9d:6c:46:6a:a9:09:62:58:ff:52:
ca:96:f1:2f:d0:e8:2c:c6:2c:29:a1:d6:fe:ac:e7:
71:dd:e4:5a:3f:0a:ac:c1:e6:31:b1:3b:42:15:36:
eb:9c:3c:26:0e:e4:57:f8:73:bf:8a:f7:0a:ea:e2:
15:ee:7d:db:7d:74:92:93:05:c8:5c:9d:cc:50:76:
e4:8c:46:ae:56:03:f9:28:be:99:49:62:04:8f:62:
e3:d8:f7:63:99:7e:ec:69:f5:64:aa:86:a0:60:31:
cf:25:e6:86:b2:af:95:ca:6e:d4:80:16:ca:b9:b6:
a0:43:66:61:18:ee:9c:f9:32:99:53:63:c0:84:57:
d4:ac:1b:a4:cc:d4:e0:f3:cd:2f:5b:64:29:32:95:
2c:82:42:3a:4d:99:cf:1f:89:fa:9a:97:9f:24:25:
3f:18:8d:80:ba:ef:1c:d2:d4:2c:87:96:b0:65:3d:
9d:7b:45:1a:54:1c:5f:51:17:15:a4:af:dd:0c:f8:
e8:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:F5:2B:21:C7:F5:00:97:04:39:DF:BA:04:33:EE:72:22:2A:C1:D5
X509v3 Authority Key Identifier:
keyid:CF:58:CB:C4:AA:E3:F8:0C:49:B3:72:91:1A:8D:44:86:1C:DF:EE:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5ca328-f114-4b3f-b8ba-50d7d94e2b9f/1/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5ca328-f114-4b3f-b8ba-50d7d94e2b9f/1/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:9b:4b:12:21:64:f5:ec:46:58:08:64:4b:17:6d:d0:4f:6f:
b6:b5:fd:b0:40:49:a2:66:69:bc:f0:f6:0c:45:94:f1:d4:94:
3b:ac:1e:af:c1:f7:05:9d:a9:67:e2:5b:0b:4d:4f:a7:15:56:
94:84:bb:92:29:99:30:73:2c:e3:96:11:23:2b:4e:b4:93:7a:
1f:23:b4:57:97:9e:0f:f7:d5:e8:3d:2f:28:b8:da:0d:b1:9a:
0d:d5:b6:dd:b1:c3:13:ca:75:79:fe:1a:6e:7d:83:ad:a9:37:
61:46:68:19:11:63:45:c9:c5:65:73:7e:1e:ab:30:d8:74:5c:
03:62:50:69:ad:e9:a8:75:26:cc:eb:c1:ce:d6:fb:43:a4:ae:
e9:e6:8f:2b:64:c6:8d:5f:58:73:aa:4f:e3:4d:27:23:4d:9c:
73:9a:22:ea:42:ad:24:24:76:db:e8:b0:24:ce:e6:a8:01:b3:
b9:f6:f0:d1:21:07:da:76:c2:89:7e:2d:57:8f:a7:25:03:07:
88:2d:3f:34:20:3f:8b:b7:45:71:aa:06:62:a5:d8:d6:13:55:
ca:25:a2:ba:c3:11:ac:42:79:c8:89:56:f6:bd:af:72:a7:53:
13:c1:05:05:97:8f:5a:f5:2f:b9:52:df:ed:a0:29:6a:31:aa:
50:0b:c5:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 23:17:33 2026 by rpki-client