Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft
File: zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft (raw, json)
Hash identifier: ggMykF2SMaH8M9qLsIJZOj2crjS8DmVuehb7Ca47PBs=
Subject key identifier: CF:97:88:E3:8E:47:4B:AF:E1:05:F0:F4:5A:80:A7:B7:DF:AB:13:C9
Authority key identifier: CE:38:47:66:75:10:F4:F2:E5:9B:B1:B3:94:AE:27:E8:DA:D0:DC:97
Certificate issuer: /CN=ce3847667510f4f2e59bb1b394ae27e8dad0dc97
Certificate serial: 019F1A1F9D2006333194E37CEB9F0EDB276D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft
Manifest number: 0939
Signing time: Tue 30 Jun 2026 20:01:47 +0000
Manifest this update: Tue 30 Jun 2026 20:01:47 +0000
Manifest next update: Wed 01 Jul 2026 20:01:47 +0000
Files and hashes: 1: 8SFtp1aCFpYsdLLGD8-X8oWNs5M.roa (hash: vW27EEEHFIjxPNptjKVXW1mndyFG/tHqMAs2SVdYCFw=)
2: BXr8T58hSJEA-WIUlWA_j2WefBk.roa (hash: PXtNEgJxgvpk0g/Oj/zCBk+DYm9a/J1sVkZt5dkYamA=)
3: zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.crl (hash: gWC0r4JT1Vsin4Vtm4/lnD6OFaPcVmFQsOBOpGB4/pk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1a:1f:9d:20:06:33:31:94:e3:7c:eb:9f:0e:db:27:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce3847667510f4f2e59bb1b394ae27e8dad0dc97
Validity
Not Before: Jun 30 20:01:47 2026 GMT
Not After : Jul 1 20:01:47 2026 GMT
Subject: CN=cf9788e38e474bafe105f0f45a80a7b7dfab13c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1b:d3:0f:35:52:46:d1:84:01:bf:45:6b:a9:
39:82:46:16:6e:7e:d3:91:83:d4:3c:c3:de:29:f7:
d3:5f:05:fd:86:01:e2:9d:8d:48:c5:b1:c0:89:44:
37:6d:da:75:08:c1:6b:fa:a8:46:5a:03:60:e0:55:
9d:5c:a6:12:dd:92:c6:a7:ad:04:db:0b:06:58:58:
0d:4d:2b:6a:07:95:5d:20:ac:d8:0f:47:af:fe:8f:
24:59:20:c7:13:f6:c6:ee:cb:da:fa:9f:0e:7c:01:
bd:90:1e:a0:0b:8f:9b:4b:42:24:0b:9a:35:b4:b9:
6e:64:4e:b8:27:78:3d:bd:a1:88:fc:f7:ad:98:c0:
45:53:a0:6d:13:ca:d2:e6:91:91:e1:33:e5:b2:70:
87:be:e3:7b:e5:42:fc:0c:02:2d:7c:d6:8f:84:65:
da:c1:27:f7:74:13:9a:c8:ce:5b:02:55:16:fe:1f:
ee:e4:7f:70:86:69:52:0a:9d:15:7e:20:5c:53:1d:
9d:a6:98:e2:23:20:6a:2b:8c:0c:03:8a:61:8f:08:
91:ba:cc:00:c2:c9:2a:f4:12:5d:01:de:70:27:5b:
cf:4e:70:1f:55:c8:c0:70:ab:49:bb:7b:20:61:07:
5f:49:c6:85:e4:a0:04:a5:6b:07:b4:3a:8e:d5:da:
98:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:97:88:E3:8E:47:4B:AF:E1:05:F0:F4:5A:80:A7:B7:DF:AB:13:C9
X509v3 Authority Key Identifier:
keyid:CE:38:47:66:75:10:F4:F2:E5:9B:B1:B3:94:AE:27:E8:DA:D0:DC:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:b7:e8:56:90:5c:e6:9c:8f:75:59:06:c0:ca:d1:2c:95:8f:
d3:dc:44:d9:57:4e:68:b0:e0:1e:21:7f:4a:27:8b:89:ee:07:
64:8c:d2:c8:4b:a6:6f:23:88:01:7b:81:8c:10:ee:99:7c:c3:
2d:b0:36:96:de:04:08:9a:20:ce:c3:23:8c:92:97:da:0d:89:
ba:88:a3:e1:2a:d2:c5:55:01:90:57:10:f4:57:20:55:09:ed:
53:32:01:05:31:00:63:2f:79:7b:51:08:51:94:08:57:c7:6c:
a3:63:fb:8d:d0:32:a6:c5:18:5c:39:6b:3d:33:96:97:bf:3b:
ea:84:d1:70:63:2e:11:b3:9a:84:d9:b2:cf:08:1b:7b:5d:d9:
c6:84:23:2a:a2:d8:fe:36:d8:1b:5d:f5:a8:20:0e:ab:4b:88:
69:8e:c3:19:0d:24:4e:fb:36:20:c6:a2:ae:73:8f:4b:6b:8b:
7e:5f:ee:a8:eb:f7:a9:8b:e6:b9:8f:11:22:0c:39:47:54:74:
71:52:42:f3:b1:c1:e2:a5:43:3a:91:e5:a0:e7:7f:82:0c:2b:
d1:eb:30:18:d0:85:c9:c8:f6:a9:2c:d8:17:e9:d2:7d:24:53:
d4:32:ed:43:26:65:d6:bb:a8:ba:64:6c:d3:d0:9d:bb:ed:96:
39:ba:24:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8aH50gBjMxlON8658O2ydtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlMzg0NzY2NzUxMGY0ZjJlNTliYjFiMzk0YWUyN2U4ZGFk
MGRjOTcwHhcNMjYwNjMwMjAwMTQ3WhcNMjYwNzAxMjAwMTQ3WjAzMTEwLwYDVQQD
EyhjZjk3ODhlMzhlNDc0YmFmZTEwNWYwZjQ1YTgwYTdiN2RmYWIxM2M5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBvTDzVSRtGEAb9Fa6k5gkYWbn7T
kYPUPMPeKffTXwX9hgHinY1IxbHAiUQ3bdp1CMFr+qhGWgNg4FWdXKYS3ZLGp60E
2wsGWFgNTStqB5VdIKzYD0ev/o8kWSDHE/bG7sva+p8OfAG9kB6gC4+bS0IkC5o1
tLluZE64J3g9vaGI/PetmMBFU6BtE8rS5pGR4TPlsnCHvuN75UL8DAItfNaPhGXa
wSf3dBOayM5bAlUW/h/u5H9whmlSCp0VfiBcUx2dppjiIyBqK4wMA4phjwiRuswA
wskq9BJdAd5wJ1vPTnAfVcjAcKtJu3sgYQdfScaF5KAEpWsHtDqO1dqYHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM+XiOOOR0uv4QXw9FqAp7ffqxPJMB8GA1UdIwQY
MBaAFM44R2Z1EPTy5Zuxs5SuJ+ja0NyXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvempoSFpuVVE5UExsbTdHemxLNG42TnJRM0pjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8xNGYyYTgtZDNiNy00NDNkLWFjM2It
NGJhNDQzNzdiZDg2LzEvempoSFpuVVE5UExsbTdHemxLNG42TnJRM0pjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8xNGYyYTgtZDNiNy00NDNkLWFjM2ItNGJhNDQzNzdiZDg2
LzEvempoSFpuVVE5UExsbTdHemxLNG42TnJRM0pjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAorfoVpBc
5pyPdVkGwMrRLJWP09xE2VdOaLDgHiF/SieLie4HZIzSyEumbyOIAXuBjBDumXzD
LbA2lt4ECJogzsMjjJKX2g2Juoij4SrSxVUBkFcQ9FcgVQntUzIBBTEAYy95e1EI
UZQIV8dso2P7jdAypsUYXDlrPTOWl7876oTRcGMuEbOahNmyzwgbe13ZxoQjKqLY
/jbYG131qCAOq0uIaY7DGQ0kTvs2IMairnOPS2uLfl/uqOv3qYvmuY8RIgw5R1R0
cVJC87HB4qVDOpHloOd/ggwr0eswGNCFycj2qSzYF+nSfSRT1DLtQyZl1ruoumRs
09Cdu+2WObokrw==
-----END CERTIFICATE-----
Generated at Tue Jun 30 22:44:42 2026 by rpki-client