Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/64dabb-7a01-40d5-a587-ee27cbca747e/1/ZjBuOs8-uQPMc5c_tihgtmNRbJM.mft
File: ZjBuOs8-uQPMc5c_tihgtmNRbJM.mft (raw, json)
Hash identifier: 19iipp/LJE5udPqt9U0daQM7PC49k5AkgXomQcz448E=
Subject key identifier: 4A:AF:77:56:99:9C:48:A3:0A:2F:33:17:18:5D:C3:C6:2F:66:D3:A9
Authority key identifier: 66:30:6E:3A:CF:3E:B9:03:CC:73:97:3F:B6:28:60:B6:63:51:6C:93
Certificate issuer: /CN=66306e3acf3eb903cc73973fb62860b663516c93
Certificate serial: 019E9BF27C616BE204F2BF854E6C45D1E7AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZjBuOs8-uQPMc5c_tihgtmNRbJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/64dabb-7a01-40d5-a587-ee27cbca747e/1/ZjBuOs8-uQPMc5c_tihgtmNRbJM.mft
Manifest number: 0239
Signing time: Sat 06 Jun 2026 08:00:20 +0000
Manifest this update: Sat 06 Jun 2026 08:00:20 +0000
Manifest next update: Sun 07 Jun 2026 08:00:20 +0000
Files and hashes: 1: 8ndDa5rRng5A6n53ieZF5n0zI7s.roa (hash: KtGt0NdlDvyNnvEnoJfeg2xWBfVSAuPvOu/PVmj7YGM=)
2: LYW2fplHFaYQiPqvAdr_sKehM90.roa (hash: 8MK6zJkVz5x6OyzTFZpsWSxtzB4SrLx4cMMtXCGfh10=)
3: ZjBuOs8-uQPMc5c_tihgtmNRbJM.crl (hash: fqtDlvRy93MiF2pVNmWZahcq8GEqHcvIhVkrSVzX3/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/64dabb-7a01-40d5-a587-ee27cbca747e/1/ZjBuOs8-uQPMc5c_tihgtmNRbJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/64dabb-7a01-40d5-a587-ee27cbca747e/1/ZjBuOs8-uQPMc5c_tihgtmNRbJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZjBuOs8-uQPMc5c_tihgtmNRbJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9b:f2:7c:61:6b:e2:04:f2:bf:85:4e:6c:45:d1:e7:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66306e3acf3eb903cc73973fb62860b663516c93
Validity
Not Before: Jun 6 08:00:20 2026 GMT
Not After : Jun 7 08:00:20 2026 GMT
Subject: CN=4aaf7756999c48a30a2f3317185dc3c62f66d3a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:78:f6:71:45:10:4c:84:e3:92:f4:05:e4:2e:
75:93:fd:5e:ee:aa:76:18:39:9e:3a:41:4f:15:3e:
7f:2f:9d:27:94:c0:24:cb:48:48:79:b6:c1:ea:47:
ce:d0:99:cf:7a:83:22:6e:a5:2a:e3:13:fb:d7:48:
1c:60:95:ed:60:e5:0b:4a:7d:de:c0:b9:1a:f5:ea:
92:73:fd:59:4a:c2:a8:d3:0a:cd:10:82:4d:f1:c8:
fd:aa:71:36:aa:7a:c5:c2:fc:94:b7:10:ea:c0:9e:
97:cb:0c:d9:78:95:0b:43:64:10:42:22:42:d0:4d:
e4:d1:41:4c:42:e3:3c:df:6d:e8:ba:3b:fe:01:89:
82:00:3b:59:44:72:ca:d4:3b:98:de:c8:c3:5d:c4:
ea:a3:47:86:c4:0a:fb:cc:bc:dd:12:25:88:d7:0e:
0a:59:68:b0:46:a6:8c:94:59:5f:63:5f:14:2a:b7:
88:7c:08:e9:e4:49:ab:43:67:e4:74:4c:8a:3f:4b:
de:23:5f:e0:33:c7:d7:9c:0d:b2:85:a3:d7:3d:d2:
03:76:92:4d:4c:37:f4:71:8b:7a:eb:9a:cd:4d:31:
c6:d1:0c:65:8f:06:88:47:a7:7b:52:4d:37:b3:3e:
4b:65:c1:51:4e:69:0f:6a:09:0f:fe:df:9c:5f:88:
30:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:AF:77:56:99:9C:48:A3:0A:2F:33:17:18:5D:C3:C6:2F:66:D3:A9
X509v3 Authority Key Identifier:
keyid:66:30:6E:3A:CF:3E:B9:03:CC:73:97:3F:B6:28:60:B6:63:51:6C:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZjBuOs8-uQPMc5c_tihgtmNRbJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/64dabb-7a01-40d5-a587-ee27cbca747e/1/ZjBuOs8-uQPMc5c_tihgtmNRbJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/64dabb-7a01-40d5-a587-ee27cbca747e/1/ZjBuOs8-uQPMc5c_tihgtmNRbJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:9e:72:1a:b9:36:23:9b:62:03:5e:5e:06:ab:a0:c6:23:6b:
2f:d7:8c:4f:6b:a0:c3:68:8a:0f:18:e2:6a:d5:ab:41:e9:cc:
c8:dd:50:41:37:2b:c9:6d:3d:ef:a5:dd:1d:f0:b2:a3:0f:fa:
cb:c0:68:eb:b6:bd:88:8d:2a:6f:6f:f3:00:d4:f0:d6:f6:e1:
5d:cd:73:99:36:52:92:56:c3:d6:19:3a:cc:5b:05:7e:05:17:
d0:dc:8a:45:37:ee:54:06:db:90:01:55:b5:d5:16:ff:0f:c9:
ac:fc:97:8d:67:8e:13:e5:62:fc:e7:3b:3e:dc:83:53:1f:36:
c9:05:fd:cb:a0:f7:bc:fd:d1:aa:0c:aa:4a:af:a4:8f:d8:b2:
7d:28:ea:5b:b2:a8:24:50:41:b5:3e:7b:74:58:1c:5c:59:02:
3b:1a:23:6e:3c:c9:b4:7c:0b:89:3f:d9:ff:e3:7e:8b:aa:b4:
4b:76:2b:43:4e:20:f7:1c:4a:23:ea:c2:d2:24:72:6b:60:07:
31:d5:f5:9c:0b:c6:29:c9:ed:55:c3:29:8a:7a:34:41:5f:78:
42:99:fc:c6:3c:1c:b0:56:04:c6:71:4e:20:1e:88:fb:41:dc:
7a:89:e8:33:1c:0c:fc:94:d4:64:9d:79:6c:49:6f:08:31:44:
e3:7a:2c:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 16:51:22 2026 by rpki-client