Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.mft
File: zPqIwisefFLecaN2Q96jw_zdSVQ.mft (raw, json)
Hash identifier: TUh5O0u0/Bly5v3yRPAdz2TALpbWFGodXbln9+eAY9g=
Subject key identifier: 16:F6:DE:D0:EF:D4:2B:80:58:3E:99:4E:07:2F:4A:E6:44:E6:4F:C4
Authority key identifier: CC:FA:88:C2:2B:1E:7C:52:DE:71:A3:76:43:DE:A3:C3:FC:DD:49:54
Certificate issuer: /CN=ccfa88c22b1e7c52de71a37643dea3c3fcdd4954
Certificate serial: 019EBAA1EB3C35BF181E384BFE26D2A32F6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zPqIwisefFLecaN2Q96jw_zdSVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.mft
Manifest number: 18E9
Signing time: Fri 12 Jun 2026 07:00:34 +0000
Manifest this update: Fri 12 Jun 2026 07:00:34 +0000
Manifest next update: Sat 13 Jun 2026 07:00:34 +0000
Files and hashes: 1: TnpKsIrCpfum69mVWYffLpmGkW4.roa (hash: GTcF25unpZajDdgtvW9ktN1du2kJWKPqouAAWsJtWlU=)
2: iUEHX1o0_l8jTQlhzAvjptzhPL0.roa (hash: DpWo5iq7cHsCZy0a6PUHW0Vs0n1oWSh3Ty0O4gm3/dU=)
3: zPqIwisefFLecaN2Q96jw_zdSVQ.crl (hash: jZ2q2y2qYbGe6ebP7wwrlDlyE8TcoArURUL1/11YndY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/zPqIwisefFLecaN2Q96jw_zdSVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 07:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ba:a1:eb:3c:35:bf:18:1e:38:4b:fe:26:d2:a3:2f:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccfa88c22b1e7c52de71a37643dea3c3fcdd4954
Validity
Not Before: Jun 12 07:00:34 2026 GMT
Not After : Jun 13 07:00:34 2026 GMT
Subject: CN=16f6ded0efd42b80583e994e072f4ae644e64fc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ba:9b:6e:53:89:ff:50:f1:a7:61:be:0a:cb:
4d:f4:08:56:55:14:92:b6:f1:da:2d:77:71:ab:e2:
b7:e0:37:af:62:2e:19:b5:f1:a9:9b:6e:b1:a8:e4:
e4:40:de:7b:9e:3c:7d:cb:42:75:d5:83:ee:d8:99:
c8:af:73:22:d3:32:9d:a1:56:42:fe:66:5d:4c:7a:
fa:5c:50:42:28:58:b5:94:19:d2:a9:c1:96:df:c9:
0a:66:b7:36:bd:25:08:c4:b3:6f:ce:af:df:26:68:
6c:fa:d7:39:e2:c1:61:e9:53:cb:96:79:18:c5:f1:
03:32:7d:fb:da:a9:91:c5:f8:c4:26:7c:7d:b4:c5:
cb:27:8e:bd:ef:86:e2:c2:6f:56:b3:fb:ee:9b:f5:
68:35:af:20:bf:0b:48:ac:c5:04:7c:43:d2:11:58:
1f:1a:1c:8f:47:3a:cd:6b:e7:f9:93:dd:69:70:d0:
40:23:10:3d:f4:c9:2b:f6:27:a1:90:0a:53:cf:b8:
0c:11:52:a9:d9:33:ce:9d:2e:42:b5:fa:f1:7e:32:
f8:f9:e7:61:7a:4b:a0:36:89:a9:57:83:35:65:99:
1d:44:aa:83:73:62:35:6e:a3:9b:79:25:28:38:65:
86:b5:8d:38:7d:c6:94:11:25:33:cb:26:2a:5c:42:
e3:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:F6:DE:D0:EF:D4:2B:80:58:3E:99:4E:07:2F:4A:E6:44:E6:4F:C4
X509v3 Authority Key Identifier:
keyid:CC:FA:88:C2:2B:1E:7C:52:DE:71:A3:76:43:DE:A3:C3:FC:DD:49:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPqIwisefFLecaN2Q96jw_zdSVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:30:b4:fb:31:09:16:ab:e8:cb:42:f0:e2:2f:98:d8:59:52:
4f:59:d5:05:16:6f:ce:d5:41:e8:ce:2f:74:4d:b6:82:e4:d3:
48:eb:11:61:0f:44:53:2c:68:7f:17:79:ac:8f:34:e4:fe:b6:
c0:a8:2f:65:a9:a5:8b:d6:b3:b8:b2:cc:86:00:86:97:33:bc:
5a:97:ac:50:c4:c0:47:2a:8f:aa:c4:17:27:f8:99:97:a0:5f:
77:7f:9d:85:d9:b9:6e:22:b3:d6:f2:a5:20:15:99:8b:6f:9c:
65:80:64:b1:74:3d:2f:ff:7a:fd:83:86:32:65:eb:46:3c:51:
5c:54:e6:81:c9:c5:fb:fe:f4:64:3b:f3:7e:94:ad:05:67:b3:
ad:88:18:9e:88:ac:d9:c5:6d:d1:43:55:7f:ea:60:59:a7:d2:
ac:ad:60:70:73:bd:48:10:50:8a:b5:74:fa:dc:f9:a2:fe:5d:
67:67:75:cc:8d:29:28:77:ec:0e:de:a8:20:88:f7:6b:93:21:
9f:6d:10:25:3e:08:53:ea:7a:6b:ea:ac:80:a3:66:c6:21:3f:
a7:a8:da:19:45:c1:26:f7:b2:80:da:95:9b:0a:f7:96:8a:ec:
2b:f6:40:ff:03:70:d9:a1:ef:88:31:2d:5d:ad:74:84:fb:42:
37:99:f8:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ66oes8Nb8YHjhL/ibSoy9tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjZmE4OGMyMmIxZTdjNTJkZTcxYTM3NjQzZGVhM2MzZmNk
ZDQ5NTQwHhcNMjYwNjEyMDcwMDM0WhcNMjYwNjEzMDcwMDM0WjAzMTEwLwYDVQQD
EygxNmY2ZGVkMGVmZDQyYjgwNTgzZTk5NGUwNzJmNGFlNjQ0ZTY0ZmM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7qbblOJ/1Dxp2G+CstN9AhWVRSS
tvHaLXdxq+K34DevYi4ZtfGpm26xqOTkQN57njx9y0J11YPu2JnIr3Mi0zKdoVZC
/mZdTHr6XFBCKFi1lBnSqcGW38kKZrc2vSUIxLNvzq/fJmhs+tc54sFh6VPLlnkY
xfEDMn372qmRxfjEJnx9tMXLJ46974biwm9Ws/vum/VoNa8gvwtIrMUEfEPSEVgf
GhyPRzrNa+f5k91pcNBAIxA99Mkr9iehkApTz7gMEVKp2TPOnS5CtfrxfjL4+edh
ekugNompV4M1ZZkdRKqDc2I1bqObeSUoOGWGtY04fcaUESUzyyYqXELjuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBb23tDv1CuAWD6ZTgcvSuZE5k/EMB8GA1UdIwQY
MBaAFMz6iMIrHnxS3nGjdkPeo8P83UlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelBxSXdpc2VmRkxlY2FOMlE5Nmp3X3pkU1ZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8xYWUyYjAtZDkzYS00NjNjLWE2Yjkt
ODI3YjY0M2FmM2Q3LzEvelBxSXdpc2VmRkxlY2FOMlE5Nmp3X3pkU1ZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS8xYWUyYjAtZDkzYS00NjNjLWE2YjktODI3YjY0M2FmM2Q3
LzEvelBxSXdpc2VmRkxlY2FOMlE5Nmp3X3pkU1ZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACDC0+zEJ
Fqvoy0Lw4i+Y2FlST1nVBRZvztVB6M4vdE22guTTSOsRYQ9EUyxofxd5rI805P62
wKgvZamli9azuLLMhgCGlzO8WpesUMTARyqPqsQXJ/iZl6Bfd3+dhdm5biKz1vKl
IBWZi2+cZYBksXQ9L/96/YOGMmXrRjxRXFTmgcnF+/70ZDvzfpStBWezrYgYnois
2cVt0UNVf+pgWafSrK1gcHO9SBBQirV0+tz5ov5dZ2d1zI0pKHfsDt6oIIj3a5Mh
n20QJT4IU+p6a+qsgKNmxiE/p6jaGUXBJveygNqVmwr3lorsK/ZA/wNw2aHviDEt
Xa10hPtCN5n4FA==
-----END CERTIFICATE-----
Generated at Fri Jun 12 15:06:10 2026 by rpki-client