Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d0c56b-67ef-4007-905f-da3c267a2528/1/zhAQE4i3zjeHB5k6BXaqPd2VqXk.mft
File: zhAQE4i3zjeHB5k6BXaqPd2VqXk.mft (raw, json)
Hash identifier: A5mjenZ2cdc/lMdyLpxf2o/aWPqFl1FaI/bE8k2YWLU=
Subject key identifier: AB:3A:E3:BB:D4:D9:A9:53:77:F5:46:74:F2:32:34:4A:C7:78:A9:84
Authority key identifier: CE:10:10:13:88:B7:CE:37:87:07:99:3A:05:76:AA:3D:DD:95:A9:79
Certificate issuer: /CN=ce10101388b7ce378707993a0576aa3ddd95a979
Certificate serial: 019F141D10408A6BC4DEDB595F2416221782
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zhAQE4i3zjeHB5k6BXaqPd2VqXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/d0c56b-67ef-4007-905f-da3c267a2528/1/zhAQE4i3zjeHB5k6BXaqPd2VqXk.mft
Manifest number: 0125
Signing time: Mon 29 Jun 2026 16:01:16 +0000
Manifest this update: Mon 29 Jun 2026 16:01:16 +0000
Manifest next update: Tue 30 Jun 2026 16:01:16 +0000
Files and hashes: 1: i9y06XpGQ7gr-mdfp0S7uUFwlS4.roa (hash: /g2Zo7QZ+s2u4dfNouu8ACPFZIuHW58Outw73PTsBo0=)
2: zhAQE4i3zjeHB5k6BXaqPd2VqXk.crl (hash: GPVi4l3t9/IBR63kxgOtVNq5TDDHZftR6HGX1hHuJuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/d0c56b-67ef-4007-905f-da3c267a2528/1/zhAQE4i3zjeHB5k6BXaqPd2VqXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/d0c56b-67ef-4007-905f-da3c267a2528/1/zhAQE4i3zjeHB5k6BXaqPd2VqXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/zhAQE4i3zjeHB5k6BXaqPd2VqXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 14:12:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:14:1d:10:40:8a:6b:c4:de:db:59:5f:24:16:22:17:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce10101388b7ce378707993a0576aa3ddd95a979
Validity
Not Before: Jun 29 16:01:16 2026 GMT
Not After : Jun 30 16:01:16 2026 GMT
Subject: CN=ab3ae3bbd4d9a95377f54674f232344ac778a984
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1f:41:4d:b8:01:11:91:bb:6d:71:8d:a2:7a:
19:d3:63:72:e9:ff:4f:e5:95:c0:4d:d2:46:58:04:
d8:08:5a:f2:98:0f:90:ee:08:a6:d6:d8:27:5e:33:
24:ec:ef:36:be:e8:99:c2:7d:8a:b2:f1:1f:f9:d5:
a4:f8:f5:d5:02:55:9f:fd:12:f9:3c:15:1d:f1:b8:
52:ae:23:6a:fd:60:a1:97:af:05:ba:92:8e:11:f9:
6d:6b:e3:42:13:f9:bc:6e:22:b1:12:dd:24:62:cd:
52:18:35:fc:44:17:aa:89:86:0d:a4:a1:ec:93:18:
ef:b8:bb:ff:18:2d:c7:89:99:1f:36:dc:b0:cb:23:
37:37:35:81:06:fc:ee:e1:df:7d:3c:15:8e:32:94:
5d:68:76:dd:57:78:57:8b:fd:87:4f:a8:92:63:91:
dc:2e:91:20:c3:a8:cc:8b:19:a3:ff:d5:94:a6:1c:
33:de:25:e8:8c:6d:ff:7c:6e:60:fe:95:42:54:b6:
51:a5:c5:bd:e1:8f:3f:5e:14:e9:e6:6e:16:78:0f:
69:85:d9:63:b6:92:fc:74:c2:1e:da:e8:a1:5c:12:
6f:f9:0d:0a:73:ea:76:7c:64:71:0a:7b:9b:e3:28:
14:af:ca:de:73:14:b3:ea:e7:48:fe:65:bf:37:46:
b9:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:3A:E3:BB:D4:D9:A9:53:77:F5:46:74:F2:32:34:4A:C7:78:A9:84
X509v3 Authority Key Identifier:
keyid:CE:10:10:13:88:B7:CE:37:87:07:99:3A:05:76:AA:3D:DD:95:A9:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zhAQE4i3zjeHB5k6BXaqPd2VqXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d0c56b-67ef-4007-905f-da3c267a2528/1/zhAQE4i3zjeHB5k6BXaqPd2VqXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d0c56b-67ef-4007-905f-da3c267a2528/1/zhAQE4i3zjeHB5k6BXaqPd2VqXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:19:b4:cd:3b:1f:24:6b:76:8e:5a:05:cd:84:1e:51:b6:cb:
3b:e6:df:26:84:9f:2c:2f:32:dc:d9:28:1f:10:03:7d:63:55:
b0:15:30:5a:97:25:57:c5:d5:3d:22:5f:14:a6:d5:4e:8d:2f:
b4:5f:0d:13:e6:c7:9f:52:1c:6a:6e:d3:dc:be:8a:97:10:be:
97:e4:e1:8f:75:8c:18:a2:70:e3:16:4b:83:30:df:f5:94:09:
4e:98:e6:1c:80:ed:cb:ae:16:1b:3e:3b:ee:95:ce:0d:e4:94:
b0:8f:1d:5c:15:55:1c:1b:e8:ce:ac:7e:6b:dd:10:cf:c7:a9:
b6:fc:40:c7:55:a7:e5:dd:9a:c3:99:06:c0:87:4a:9d:41:ee:
82:d1:27:db:5d:cd:93:be:79:a4:0a:44:67:b0:2a:19:67:83:
d7:a5:f1:d4:91:18:6d:20:85:59:c5:e8:c2:0b:7d:e5:fb:7e:
e3:5d:84:f6:41:3e:33:08:08:10:0b:0b:39:a4:77:7c:5d:4b:
d5:9e:4f:6b:d5:75:f4:f3:84:c4:c3:a2:7b:6d:14:59:ab:5e:
1a:12:f2:fe:f4:8c:f8:dd:34:2d:b1:f6:4d:6e:63:ae:0a:e0:
e4:5a:e8:c2:7d:3e:11:c3:b7:2e:6a:5a:e5:7f:88:8b:64:68:
a5:a1:dd:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 18:54:49 2026 by rpki-client