Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/mZK1NCb7YU2aWm2D9ABWamYMndI.mft
File: mZK1NCb7YU2aWm2D9ABWamYMndI.mft (raw, json)
Hash identifier: pTP8RqOaKwuJ2wm7yEfBss3R/pGTUFj/kayoKpeJxyE=
Subject key identifier: E1:45:CB:DE:E5:5F:D1:0B:29:65:FD:B4:51:92:58:72:7C:14:BA:B5
Authority key identifier: 99:92:B5:34:26:FB:61:4D:9A:5A:6D:83:F4:00:56:6A:66:0C:9D:D2
Certificate issuer: /CN=9992b53426fb614d9a5a6d83f400566a660c9dd2
Certificate serial: 019ED42BA4420646BB9FFA9BFDCF295CCC68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mZK1NCb7YU2aWm2D9ABWamYMndI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/mZK1NCb7YU2aWm2D9ABWamYMndI.mft
Manifest number: 1538
Signing time: Wed 17 Jun 2026 06:01:30 +0000
Manifest this update: Wed 17 Jun 2026 06:01:30 +0000
Manifest next update: Thu 18 Jun 2026 06:01:30 +0000
Files and hashes: 1: LKFdqAxekSyGKQc0Md8_7Xelo-E.roa (hash: hzROPb2XKPcBYg2mXSPUmlxSomnvcQdFm4oNZy6YiVs=)
2: mZK1NCb7YU2aWm2D9ABWamYMndI.crl (hash: CSSyGvAeGx9gVO9ppkeJgJuvbDyPR0Lf4O5gf05LIaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/mZK1NCb7YU2aWm2D9ABWamYMndI.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/mZK1NCb7YU2aWm2D9ABWamYMndI.mft
rsync://rpki.ripe.net/repository/DEFAULT/mZK1NCb7YU2aWm2D9ABWamYMndI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 06:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d4:2b:a4:42:06:46:bb:9f:fa:9b:fd:cf:29:5c:cc:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9992b53426fb614d9a5a6d83f400566a660c9dd2
Validity
Not Before: Jun 17 06:01:30 2026 GMT
Not After : Jun 18 06:01:30 2026 GMT
Subject: CN=e145cbdee55fd10b2965fdb4519258727c14bab5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:7a:a8:d7:70:01:a2:a1:27:06:45:68:c2:e3:
a1:63:6b:f5:05:a8:da:06:17:d8:98:bf:97:09:c2:
ac:7c:d4:c6:4f:da:9d:e9:e3:d5:eb:68:34:4a:cc:
8f:3e:ec:07:54:02:5b:50:63:d0:69:e5:58:55:ec:
60:0f:61:da:14:09:91:bb:7c:44:f0:a8:9d:73:83:
96:4a:fa:66:ea:68:74:39:f0:8a:3e:f3:5e:cf:1b:
79:a5:ee:51:e6:7f:43:ab:26:f5:26:3f:db:2b:8f:
ed:47:e3:fa:d8:18:22:dc:54:c8:f1:eb:67:c2:ea:
09:dc:39:d6:62:94:8a:fc:5a:9f:36:33:23:4f:73:
e0:55:3c:bb:7e:27:74:04:66:29:f8:1a:f5:29:53:
35:76:d9:32:85:b5:a1:80:85:c2:8f:7a:9d:ff:00:
84:d6:73:25:12:8a:82:87:ff:c1:68:11:d9:c3:78:
34:8a:fa:69:b0:a5:54:e5:bc:0b:e7:f6:d1:7e:9c:
30:a2:53:36:b8:f6:a1:a2:09:7f:de:67:20:a4:95:
1f:ed:6f:5e:41:ae:53:e6:80:f3:68:e8:91:75:5e:
58:aa:a9:42:9d:20:6f:61:85:93:c2:9e:a4:01:32:
a3:e3:14:6f:e9:42:e1:56:53:16:8b:81:b6:a3:8f:
62:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:45:CB:DE:E5:5F:D1:0B:29:65:FD:B4:51:92:58:72:7C:14:BA:B5
X509v3 Authority Key Identifier:
keyid:99:92:B5:34:26:FB:61:4D:9A:5A:6D:83:F4:00:56:6A:66:0C:9D:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZK1NCb7YU2aWm2D9ABWamYMndI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/mZK1NCb7YU2aWm2D9ABWamYMndI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/mZK1NCb7YU2aWm2D9ABWamYMndI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:64:aa:c3:fc:06:c9:fc:0b:57:f9:b0:86:49:1b:6f:2e:e9:
8c:f1:c3:fa:5d:43:ea:9b:11:d2:f0:7d:d4:cf:96:25:da:40:
43:10:96:e6:f3:e1:15:9e:57:bf:58:23:26:3d:2c:15:38:fb:
79:e6:0f:12:f1:26:36:2c:21:0e:dc:9b:0f:ff:15:23:1b:ca:
e5:8e:53:6f:fb:41:7a:43:e8:37:fb:44:2e:7e:bb:c8:4c:f7:
05:8c:8f:3c:c6:1c:ea:ec:0f:a7:4c:96:b4:a6:61:18:e5:fe:
13:1a:92:4e:98:c9:92:43:c5:9d:60:a6:2a:d8:e1:24:04:89:
90:44:f4:1c:0a:70:fc:55:d1:9a:09:b1:20:97:a7:72:4b:7a:
bd:58:6b:31:74:21:33:a8:99:33:75:b0:12:8f:15:a2:65:52:
78:c1:e5:97:de:f4:c2:a1:2a:1d:35:50:4e:ab:0d:a3:21:b2:
da:ca:db:9d:95:67:ed:7b:bf:f9:7b:da:bf:24:5f:05:f4:a3:
b5:08:0b:da:cb:cf:0a:ff:d3:3f:b6:cf:69:ca:82:96:ae:ce:
f9:4e:45:c2:6d:86:6e:1d:5b:5d:28:3b:ae:47:49:7f:05:ef:
82:5a:44:22:2c:0d:7d:77:6c:0d:7e:96:51:66:7b:9e:37:e1:
bb:3e:c5:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:45:42 2026 by rpki-client