Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.mft
File: cZSbR98xPLq5RS2pj8xjdgipCb0.mft (raw, json)
Hash identifier: 7SRNQiBuMW6uqm14ZRVy+X1uGsJsVuPeaP+JC4Dusxg=
Subject key identifier: E2:7E:30:0D:59:01:66:05:1D:07:37:98:EA:4A:D5:0F:D4:D8:D5:91
Authority key identifier: 71:94:9B:47:DF:31:3C:BA:B9:45:2D:A9:8F:CC:63:76:08:A9:09:BD
Certificate issuer: /CN=71949b47df313cbab9452da98fcc637608a909bd
Certificate serial: 019EB80EB618652CEDFFFF1CA3FA0E33583A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cZSbR98xPLq5RS2pj8xjdgipCb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.mft
Manifest number: 1978
Signing time: Thu 11 Jun 2026 19:00:32 +0000
Manifest this update: Thu 11 Jun 2026 19:00:32 +0000
Manifest next update: Fri 12 Jun 2026 19:00:32 +0000
Files and hashes: 1: 4QGNMsc5EGKo58Zw8Ral2zodI2I.roa (hash: YULKFII3+bo9JTIVj/N+lbxzQak7k1SW83B1ho5/0B8=)
2: 7nQSU3KcKFGzNpk1S9m7Pg_R3QA.roa (hash: hhvez6L7iOSamemiziLCMKx9JI55MAZ7ghp/mQWgqbI=)
3: cZSbR98xPLq5RS2pj8xjdgipCb0.crl (hash: zAmti7Eabavyogu0mQArPnx16mtOOgCu0lb35mWC+d0=)
4: iqsTReQX-wslFa4ZJjVVBZ1O16I.roa (hash: HHgLFIJy8JtakXSElLjUicZ/9YwRa/+1lz1+D14ujGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cZSbR98xPLq5RS2pj8xjdgipCb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 19:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:0e:b6:18:65:2c:ed:ff:ff:1c:a3:fa:0e:33:58:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71949b47df313cbab9452da98fcc637608a909bd
Validity
Not Before: Jun 11 19:00:32 2026 GMT
Not After : Jun 12 19:00:32 2026 GMT
Subject: CN=e27e300d590166051d073798ea4ad50fd4d8d591
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:dc:66:ec:df:6e:7c:cc:a3:73:55:13:e5:6b:
ae:fd:94:0c:07:96:ea:da:d9:5a:aa:cd:69:6d:13:
55:a3:6e:bc:e7:f3:ed:ba:e7:1b:40:fd:aa:79:4c:
fa:9f:e1:d2:f8:01:0f:0a:81:f6:80:6a:20:fa:b6:
df:80:fe:fa:6f:54:9e:c1:22:21:ee:63:3e:21:d0:
df:6c:dc:f5:66:52:a7:75:1c:e2:3e:f3:47:6f:e2:
f1:bf:39:c4:28:d8:4f:73:ca:11:6a:d8:c7:22:43:
b6:a2:7e:3e:e8:1e:c4:5b:05:dd:5b:ca:a9:ce:10:
c7:5f:48:8c:f7:fb:e8:34:2b:1a:ad:23:ab:5f:66:
b3:90:3d:6a:96:0e:bd:99:e5:73:f4:33:e0:68:4a:
18:45:33:4b:fb:71:dd:ad:3c:f6:e3:2f:60:99:01:
d2:50:c9:44:87:b6:72:73:ad:45:f6:54:3e:5d:07:
1f:82:24:2e:65:b9:5a:ad:92:c6:bf:42:14:3c:9c:
63:7a:0c:0a:66:90:07:c7:2c:5e:a8:b2:08:d4:a3:
fb:2a:c9:0d:47:62:9b:0e:c8:3f:1c:ff:65:73:ac:
91:dd:3e:e4:be:8c:45:f9:70:e4:36:53:2a:1d:3f:
d9:3d:58:80:51:3d:57:da:db:59:df:7e:58:12:af:
97:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:7E:30:0D:59:01:66:05:1D:07:37:98:EA:4A:D5:0F:D4:D8:D5:91
X509v3 Authority Key Identifier:
keyid:71:94:9B:47:DF:31:3C:BA:B9:45:2D:A9:8F:CC:63:76:08:A9:09:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cZSbR98xPLq5RS2pj8xjdgipCb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:db:c0:a4:1b:04:75:9f:b1:8a:d0:e9:6d:65:d4:8c:cb:9a:
07:ef:50:d2:07:b4:58:17:8c:b0:3d:e3:8e:78:9f:00:01:90:
af:48:eb:52:40:8c:2b:68:11:c4:30:b9:b8:53:94:ce:77:a8:
42:bf:3c:c7:34:3e:0d:5d:0a:be:df:0f:ee:ba:ef:cf:df:1c:
f8:d9:93:fa:38:1d:c3:dd:13:b5:51:22:66:ed:e4:8a:67:ec:
ee:7a:8a:df:ef:85:9e:05:90:3c:3a:c6:9c:00:3e:0d:ab:cd:
ec:8a:c5:bd:ed:0f:d6:92:1d:0f:4c:c4:53:89:0c:43:8d:74:
cf:8a:fe:80:fa:c3:9b:bd:31:f7:35:b7:6a:15:94:0f:fa:03:
46:31:ba:aa:ec:0f:19:5a:31:f0:4c:8d:48:72:71:ff:6a:a8:
4f:d9:be:96:86:01:07:f5:a0:85:ca:a2:d6:ab:1e:c6:20:b7:
5a:30:79:ee:2f:25:c3:46:ac:22:de:64:bb:32:3e:45:15:3f:
ca:6c:50:46:84:e3:ab:0b:1f:be:90:96:86:e1:7c:3e:6d:e2:
87:77:b4:1c:21:dc:ed:de:64:c1:74:77:af:9d:31:9a:10:fb:
df:e9:29:77:b4:d3:c7:df:75:21:68:fa:ab:70:25:db:4d:40:
e7:7c:e4:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:39:10 2026 by rpki-client