Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.mft
File: zTCHzHAsjZNT_nj3kyRAt-hC_G4.mft (raw, json)
Hash identifier: pKuwwhMhBejBt5JKr4Ge0BonCCqs8oA46q3jrjWCQv8=
Subject key identifier: AE:20:F0:52:C7:B3:C1:9F:EF:C2:8B:07:97:C4:EF:94:FC:E3:2A:3F
Authority key identifier: CD:30:87:CC:70:2C:8D:93:53:FE:78:F7:93:24:40:B7:E8:42:FC:6E
Certificate issuer: /CN=cd3087cc702c8d9353fe78f7932440b7e842fc6e
Certificate serial: 019EC33779467F34DABB9046D4FD2852BB56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zTCHzHAsjZNT_nj3kyRAt-hC_G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.mft
Manifest number: 12DA
Signing time: Sat 13 Jun 2026 23:00:53 +0000
Manifest this update: Sat 13 Jun 2026 23:00:53 +0000
Manifest next update: Sun 14 Jun 2026 23:00:53 +0000
Files and hashes: 1: a0kN2gfK01wMuqhoW-MZjPAbstc.roa (hash: mmiujuewrIIcuNRFw3juwDDGpDhJAvUuobcjAggyfUE=)
2: zTCHzHAsjZNT_nj3kyRAt-hC_G4.crl (hash: B3qmt7PnwrjVW4rWuV04yaKl0hnShJHu4G9SWla3oYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zTCHzHAsjZNT_nj3kyRAt-hC_G4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:37:79:46:7f:34:da:bb:90:46:d4:fd:28:52:bb:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd3087cc702c8d9353fe78f7932440b7e842fc6e
Validity
Not Before: Jun 13 23:00:53 2026 GMT
Not After : Jun 14 23:00:53 2026 GMT
Subject: CN=ae20f052c7b3c19fefc28b0797c4ef94fce32a3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:1d:bd:9f:96:16:6b:5e:70:d6:5f:4b:54:dc:
b3:0a:f4:21:39:52:87:43:db:b7:e8:d7:43:32:03:
1d:7c:96:36:26:5d:aa:9d:28:3f:57:4d:d6:70:e5:
f5:74:51:fd:3a:10:0c:88:53:62:ee:14:17:25:11:
17:3f:8e:ae:a2:a1:71:23:c6:07:af:28:94:66:42:
01:83:01:40:cd:04:92:9d:1f:71:d2:26:19:05:6d:
fe:ba:62:3c:1f:e7:16:5c:7d:98:c0:b3:71:48:4b:
27:f9:f6:2b:30:21:74:6a:d5:7c:eb:71:8e:ac:2d:
05:0c:6e:91:15:8d:ab:d6:20:9f:55:94:25:b7:f7:
b3:d4:70:6e:46:5e:ac:6c:aa:2e:85:19:01:d7:cc:
36:6e:45:9f:73:53:d8:2e:58:e7:dd:1b:35:5c:f8:
fc:8a:3e:26:f2:10:96:4c:2b:4c:d0:78:ef:97:b5:
20:5c:ed:1d:d5:ef:04:3a:f1:51:c0:82:92:1e:cf:
49:a6:a4:c1:73:ee:f5:0d:f3:18:80:9b:dd:f0:5c:
7e:ff:3e:80:53:20:55:f0:b5:97:2c:a8:b3:bf:db:
b5:8c:04:c4:6b:6c:ec:ab:d1:b4:8f:2b:0a:3f:0b:
d0:53:71:d6:b7:93:9c:95:b4:19:d1:86:c6:8b:a9:
ed:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:20:F0:52:C7:B3:C1:9F:EF:C2:8B:07:97:C4:EF:94:FC:E3:2A:3F
X509v3 Authority Key Identifier:
keyid:CD:30:87:CC:70:2C:8D:93:53:FE:78:F7:93:24:40:B7:E8:42:FC:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zTCHzHAsjZNT_nj3kyRAt-hC_G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:29:f4:a1:2c:a8:b9:ee:e2:bf:6e:a6:c6:2d:99:af:85:09:
d4:57:87:5a:40:0d:2e:03:97:0c:bf:d1:6a:3f:5d:36:7d:ad:
d0:da:37:ee:51:20:7f:29:28:57:cb:df:95:98:22:36:3b:55:
41:31:59:d2:35:30:b3:b6:63:b7:a8:17:b9:4b:10:c5:a8:60:
d2:1c:74:e9:f6:2f:ef:c5:15:f3:eb:7f:d1:7f:f3:63:37:bb:
81:60:7f:be:d2:ea:6f:c2:db:98:b7:6a:d1:fa:b1:76:f0:83:
fb:37:81:49:e7:86:5f:ae:47:35:3c:59:e1:bf:73:8e:33:18:
74:5c:3b:ef:73:cc:13:70:b6:51:91:2b:9b:2e:44:4e:a4:6c:
df:4d:7c:7c:e3:fc:f5:f1:95:91:81:3f:66:b5:06:32:76:4c:
4d:0a:bd:2c:89:ff:83:6f:55:bd:fa:2c:25:d4:c3:cc:98:6f:
c3:76:6f:d6:e1:70:47:f4:91:27:fc:c8:2d:8b:ff:69:03:20:
34:b2:f9:89:5b:58:fc:ca:37:3a:d4:2f:e2:fd:13:3c:40:cf:
55:67:57:c7:9c:9b:4e:19:5c:3d:7a:24:cc:2d:80:c7:26:28:
58:5e:b7:58:59:ae:63:bf:a0:fa:00:fe:e4:16:5b:ee:0d:e0:
c4:6a:0e:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:31:25 2026 by rpki-client