
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/043544-80e7-4486-bec4-aaf6e13410f5/1/ZUNvaLjc4Zd_WVt6Eisx7OD9yWs.mft
File: ZUNvaLjc4Zd_WVt6Eisx7OD9yWs.mft (raw, json)
Hash identifier: FZNcaYdihSruCqeC+GSMKEPEwy6YQbsXHKFzF9xduiI=
Subject key identifier: D4:FA:10:94:75:72:C5:E3:33:5A:C0:BD:35:B9:1C:9A:E9:CB:8D:BE
Authority key identifier: 65:43:6F:68:B8:DC:E1:97:7F:59:5B:7A:12:2B:31:EC:E0:FD:C9:6B
Certificate issuer: /CN=65436f68b8dce1977f595b7a122b31ece0fdc96b
Certificate serial: 019EB80E71162E091A58F4C20B2FABA565FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZUNvaLjc4Zd_WVt6Eisx7OD9yWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/043544-80e7-4486-bec4-aaf6e13410f5/1/ZUNvaLjc4Zd_WVt6Eisx7OD9yWs.mft
Manifest number: 25
Signing time: Thu 11 Jun 2026 19:00:14 +0000
Manifest this update: Thu 11 Jun 2026 19:00:14 +0000
Manifest next update: Fri 12 Jun 2026 19:00:14 +0000
Files and hashes: 1: 1UDryGb6uD6P-Aju0_ZIzCDQQPs.roa (hash: J074jx0s15KYq6OtmYxwyQ++hAEyrLR4KI6gJZWM7GE=)
2: ZUNvaLjc4Zd_WVt6Eisx7OD9yWs.crl (hash: +KFmFSo9RJSh9k7wpmbqX1KNUUgAKyf6Bc706JU7GUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/043544-80e7-4486-bec4-aaf6e13410f5/1/ZUNvaLjc4Zd_WVt6Eisx7OD9yWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/043544-80e7-4486-bec4-aaf6e13410f5/1/ZUNvaLjc4Zd_WVt6Eisx7OD9yWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZUNvaLjc4Zd_WVt6Eisx7OD9yWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:0e:71:16:2e:09:1a:58:f4:c2:0b:2f:ab:a5:65:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65436f68b8dce1977f595b7a122b31ece0fdc96b
Validity
Not Before: Jun 11 19:00:14 2026 GMT
Not After : Jun 12 19:00:14 2026 GMT
Subject: CN=d4fa10947572c5e3335ac0bd35b91c9ae9cb8dbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e3:c3:ca:42:b7:a0:a5:d0:15:e4:aa:03:13:
26:4d:6f:b7:78:0d:6a:6b:87:b6:ad:11:c7:f8:03:
5a:47:28:b0:fa:5e:fe:07:a9:0e:6e:5f:85:78:65:
1e:10:b3:a1:b7:a6:18:fa:c0:02:0f:14:f6:7c:03:
ee:8f:2a:30:60:9a:bd:4d:d8:46:9c:3c:1f:cc:da:
1d:07:04:1d:34:33:24:48:61:0d:e9:6b:c9:ec:5e:
d2:4a:9c:e5:3b:fe:6f:a4:3c:3f:02:f4:f4:1e:9e:
b8:40:c5:76:1d:ef:7c:58:9e:40:2e:9e:27:b0:7e:
28:51:38:79:a6:41:8f:15:d8:c1:11:a7:25:8d:3b:
a5:93:13:13:e5:34:bf:24:fa:8c:16:84:34:cc:71:
bc:01:fc:20:e8:2b:49:1c:1d:5d:3b:70:7b:07:9a:
2b:7c:a0:40:08:6a:c6:02:62:c0:80:72:75:fb:4e:
9e:7d:de:f6:e5:0d:43:13:83:dd:43:da:8f:f5:53:
82:a9:cf:cd:24:6f:6e:25:42:db:85:9c:56:2d:76:
a6:b1:31:12:9b:f7:ed:85:9f:98:e6:91:e6:dc:d1:
2d:20:c8:f6:3d:6c:02:84:1f:48:91:4f:b2:a0:6a:
a3:44:2d:dd:da:d9:5a:2b:12:cf:c9:35:d5:52:15:
88:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:FA:10:94:75:72:C5:E3:33:5A:C0:BD:35:B9:1C:9A:E9:CB:8D:BE
X509v3 Authority Key Identifier:
keyid:65:43:6F:68:B8:DC:E1:97:7F:59:5B:7A:12:2B:31:EC:E0:FD:C9:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZUNvaLjc4Zd_WVt6Eisx7OD9yWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/043544-80e7-4486-bec4-aaf6e13410f5/1/ZUNvaLjc4Zd_WVt6Eisx7OD9yWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/043544-80e7-4486-bec4-aaf6e13410f5/1/ZUNvaLjc4Zd_WVt6Eisx7OD9yWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:bf:a8:19:36:c5:73:11:4a:16:11:dc:e0:b8:f0:39:d5:cd:
37:da:90:0c:c3:63:9f:5e:22:86:ec:a7:43:ec:3c:ce:08:0f:
61:fb:9a:64:19:b3:e0:e3:89:9c:bf:7b:26:a3:e5:03:9d:83:
29:ab:5b:df:1d:cf:99:ce:5c:18:d2:48:e6:35:04:40:2a:91:
a1:7a:a6:e0:54:04:bd:77:c6:30:ca:12:d9:1c:94:f2:31:c1:
e3:e1:22:15:ea:97:dd:9d:f6:47:a7:49:8d:bb:a3:be:79:b3:
37:99:36:e5:06:42:f7:33:27:ba:90:cf:56:68:23:0f:75:dc:
10:80:8a:e1:fb:c3:c5:1e:7f:81:ad:f9:1f:21:13:14:b5:7c:
81:e9:82:d7:42:aa:c9:b5:b8:52:69:7c:f5:a1:1e:ab:92:1c:
bf:46:80:4f:2d:fe:a4:51:23:f2:1a:f9:fb:1c:99:ba:d9:46:
02:b9:3f:07:54:44:5c:96:c3:39:48:02:ac:38:1b:ca:34:be:
5a:bf:db:c2:9a:20:13:2f:6a:f0:94:a3:e3:ec:ed:a3:2c:11:
fb:c9:7a:a9:03:45:90:26:22:52:e5:9a:8a:5e:f3:ca:62:dc:
ac:b6:7c:16:55:60:32:79:57:d3:98:b5:2a:bd:b2:07:18:4c:
8e:0e:dd:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:51:05 2026 by rpki-client