Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.mft
File: zxT86bGaXupTLhfYPajB3NHeGMA.mft (raw, json)
Hash identifier: gGUqs8Q2bK7zXoNqqH/LuHxrDb+QMj4tbBzjG2dykaU=
Subject key identifier: 33:97:46:82:97:CD:88:87:CB:D4:72:EB:8A:56:9A:75:57:40:A5:6A
Authority key identifier: CF:14:FC:E9:B1:9A:5E:EA:53:2E:17:D8:3D:A8:C1:DC:D1:DE:18:C0
Certificate issuer: /CN=cf14fce9b19a5eea532e17d83da8c1dcd1de18c0
Certificate serial: 019F11527E2C4F7DAD6756F390B8D1B7CD35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zxT86bGaXupTLhfYPajB3NHeGMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.mft
Manifest number: 07A6
Signing time: Mon 29 Jun 2026 03:00:46 +0000
Manifest this update: Mon 29 Jun 2026 03:00:46 +0000
Manifest next update: Tue 30 Jun 2026 03:00:46 +0000
Files and hashes: 1: DQ01J-Cq4hUemzI_hsxFb8NofP8.asa (hash: fcPlXypjGU8YaSASqBijwf7gz4frCYBc1/uFvytFDWw=)
2: sQDcvzwfINZL1YKhOjuNrTumwws.roa (hash: 1SADRpnWZPKf4KWSJGPvG1rU1NGMXTSVZgSGEdq16/Q=)
3: zxT86bGaXupTLhfYPajB3NHeGMA.crl (hash: rlrFSxv4VwZEMWpIZtb3UvaKG4UGdKxyIqq1ILVTZq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zxT86bGaXupTLhfYPajB3NHeGMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:52:7e:2c:4f:7d:ad:67:56:f3:90:b8:d1:b7:cd:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf14fce9b19a5eea532e17d83da8c1dcd1de18c0
Validity
Not Before: Jun 29 03:00:46 2026 GMT
Not After : Jun 30 03:00:46 2026 GMT
Subject: CN=3397468297cd8887cbd472eb8a569a755740a56a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:fc:ef:d6:f4:6f:8e:fc:f6:39:e7:03:88:82:
8d:97:51:ed:b5:ca:1c:fa:7d:de:0e:26:2f:cd:1f:
e7:76:42:49:fd:7c:11:84:c0:9b:d2:b7:bc:e2:77:
fa:75:29:c9:27:c9:24:71:10:fd:cb:9a:0f:98:1c:
37:be:7b:06:d2:b5:2f:07:db:36:93:ff:06:f4:56:
37:0c:56:e2:1f:fa:4c:f4:71:88:ac:b5:ea:34:ab:
14:49:4a:e3:9d:37:a8:dc:76:10:c3:18:d0:01:8d:
00:92:99:58:90:38:05:50:02:5e:1b:c6:dc:3c:52:
2c:97:76:3a:25:4d:ca:36:e5:75:d7:d2:56:f5:18:
f3:57:29:17:ee:0d:7a:3c:b7:8a:0e:fe:c0:d0:ee:
b5:c6:fb:73:5d:a9:5c:67:bc:12:3e:4b:bf:ac:68:
5f:7c:6f:87:db:67:de:6d:60:fe:4e:64:3a:75:9a:
08:a1:a0:c6:5a:f4:b9:61:d4:a6:a9:b1:0a:0a:f3:
de:ca:62:a7:68:a1:68:96:cc:93:d1:49:5f:e3:e5:
7c:a7:93:2b:51:aa:60:12:cf:61:66:2c:dc:36:9f:
b9:4a:d1:d7:94:0e:3f:e6:7e:be:08:52:04:01:3e:
c0:c6:5b:2a:7e:f6:5f:9b:79:60:2c:8e:4d:5a:d1:
4d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:97:46:82:97:CD:88:87:CB:D4:72:EB:8A:56:9A:75:57:40:A5:6A
X509v3 Authority Key Identifier:
keyid:CF:14:FC:E9:B1:9A:5E:EA:53:2E:17:D8:3D:A8:C1:DC:D1:DE:18:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxT86bGaXupTLhfYPajB3NHeGMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:10:7b:e1:e3:cd:8a:92:2b:81:8c:65:61:db:ab:eb:40:de:
c3:ff:b3:92:56:b0:60:46:e1:7f:53:ae:b8:a5:a3:78:90:de:
5a:93:5a:07:cf:51:59:c4:ab:1d:b8:f8:2b:d2:5e:38:37:05:
67:40:e7:89:8a:b7:84:a7:d6:33:37:7c:85:f2:91:cb:c8:c1:
be:db:f1:86:60:34:f9:dd:25:55:26:a6:9b:7e:7b:75:d4:4c:
a1:80:2c:e1:44:7e:68:86:4c:cf:a0:6d:3d:6e:35:62:45:ca:
79:07:de:47:2c:31:bc:fd:33:a6:60:bc:48:a4:55:fd:30:70:
ed:ce:68:78:79:72:19:51:cd:eb:e4:3c:e4:47:5c:6c:ba:ff:
3b:9e:8c:e7:82:fd:54:2d:23:32:15:eb:db:09:5a:a0:f9:ec:
2c:ea:90:01:e8:23:14:d4:5d:64:19:87:01:33:03:63:c4:06:
54:25:86:86:f6:2d:ce:b7:81:5e:51:c6:d2:b1:a5:3b:de:ff:
4a:98:23:7b:84:73:c3:67:66:7b:1e:16:aa:53:e4:dd:ce:10:
59:b2:43:c4:2f:b6:7f:60:db:d2:8a:3c:a1:d3:93:25:8f:89:
52:4d:ed:88:90:f3:b8:88:79:d3:c9:97:dc:c5:e6:59:a8:c8:
ea:30:c5:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:36:40 2026 by rpki-client