Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/194e97-e5db-4a6a-afb5-552e210354f4/1/ZfhSy9HN8kShcO2sJEDQ0vS9Uxk.mft
File: ZfhSy9HN8kShcO2sJEDQ0vS9Uxk.mft (raw, json)
Hash identifier: AKc03n2dWC3bt7p/q7UiEeQLdxFQkHPny603xfdADCg=
Subject key identifier: A7:E8:A7:D9:F5:68:88:ED:D2:4F:1B:97:07:24:2F:C5:C1:F4:D2:A2
Authority key identifier: 65:F8:52:CB:D1:CD:F2:44:A1:70:ED:AC:24:40:D0:D2:F4:BD:53:19
Certificate issuer: /CN=65f852cbd1cdf244a170edac2440d0d2f4bd5319
Certificate serial: 019EBF9192BA1F1AA1D98D07E7DA657AADB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZfhSy9HN8kShcO2sJEDQ0vS9Uxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/194e97-e5db-4a6a-afb5-552e210354f4/1/ZfhSy9HN8kShcO2sJEDQ0vS9Uxk.mft
Manifest number: 8C
Signing time: Sat 13 Jun 2026 06:00:48 +0000
Manifest this update: Sat 13 Jun 2026 06:00:48 +0000
Manifest next update: Sun 14 Jun 2026 06:00:48 +0000
Files and hashes: 1: ZfhSy9HN8kShcO2sJEDQ0vS9Uxk.crl (hash: Rd1QPy/NoWYSr7C5wrr/4NHCbnYTmoeq3LkK20fn1xM=)
2: fX47DA3aknJjMaNF3kpMk1RfVDY.roa (hash: QnbSVkKJ1tgtZD036KjNU81Gb7v/2YPgVvv50U+eDiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/194e97-e5db-4a6a-afb5-552e210354f4/1/ZfhSy9HN8kShcO2sJEDQ0vS9Uxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/194e97-e5db-4a6a-afb5-552e210354f4/1/ZfhSy9HN8kShcO2sJEDQ0vS9Uxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZfhSy9HN8kShcO2sJEDQ0vS9Uxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 06:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:91:92:ba:1f:1a:a1:d9:8d:07:e7:da:65:7a:ad:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65f852cbd1cdf244a170edac2440d0d2f4bd5319
Validity
Not Before: Jun 13 06:00:48 2026 GMT
Not After : Jun 14 06:00:48 2026 GMT
Subject: CN=a7e8a7d9f56888edd24f1b9707242fc5c1f4d2a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:1f:c9:f6:d3:e4:85:bc:14:ac:c5:34:ee:0a:
28:66:d5:37:0b:50:e4:00:de:99:41:27:86:de:76:
67:85:20:6c:31:58:85:41:54:e0:fa:c4:df:92:45:
6d:07:ec:0d:00:0a:90:e6:1c:cc:84:75:69:ba:52:
cd:64:c6:f4:7a:00:14:9a:e0:03:7d:c6:70:d9:9a:
d9:24:df:b6:51:bb:7c:06:2a:80:c8:94:bc:67:bc:
8d:3b:6d:87:f6:ec:8c:38:0e:d3:86:5f:e0:e7:a8:
ff:6a:35:ce:ae:4a:e2:ba:b7:23:e4:70:27:3c:a6:
ad:64:7c:2b:09:66:00:03:8f:ef:e6:5e:ff:22:af:
22:82:bb:7a:f7:3a:4e:0e:c2:ec:8a:57:dd:ca:fb:
a1:82:fb:09:8a:e0:de:ce:48:3d:37:ed:8f:d6:c8:
57:0b:a5:2d:9f:e9:40:46:e6:e3:c0:78:67:2f:8d:
7f:9c:43:be:12:bb:cd:c8:30:33:7e:ca:5d:e1:a1:
70:e8:d8:65:57:07:a9:d7:c1:23:fd:fc:77:af:5a:
77:27:15:50:c5:7e:0c:8a:2d:21:5f:60:4e:c7:a0:
02:ed:c8:c3:60:2f:33:0b:b5:17:e6:64:60:bb:6c:
7d:1c:39:ed:c2:c9:33:b2:62:4c:8a:46:ed:a9:41:
32:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:E8:A7:D9:F5:68:88:ED:D2:4F:1B:97:07:24:2F:C5:C1:F4:D2:A2
X509v3 Authority Key Identifier:
keyid:65:F8:52:CB:D1:CD:F2:44:A1:70:ED:AC:24:40:D0:D2:F4:BD:53:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZfhSy9HN8kShcO2sJEDQ0vS9Uxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/194e97-e5db-4a6a-afb5-552e210354f4/1/ZfhSy9HN8kShcO2sJEDQ0vS9Uxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/194e97-e5db-4a6a-afb5-552e210354f4/1/ZfhSy9HN8kShcO2sJEDQ0vS9Uxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:0f:ab:4b:5c:65:5b:73:45:47:c3:01:49:33:6e:61:1b:e5:
c2:5f:b2:e6:7b:4d:45:57:82:e1:4d:65:04:24:10:34:cc:2e:
b0:d2:4f:3a:b3:f8:94:fd:b7:25:9b:f4:75:6f:7f:05:00:7c:
43:5f:7b:a2:2f:98:9b:6f:28:12:cf:64:2d:67:10:6f:b4:f0:
75:51:bb:25:d0:30:e0:87:8d:8c:80:fe:c7:68:11:bb:d0:16:
0c:58:94:6c:a4:c9:78:75:6d:b5:f5:dc:c5:49:77:9e:13:e6:
e3:88:ec:9c:e4:ea:46:87:55:12:99:00:f8:be:91:2b:20:12:
22:82:24:6d:fe:3a:33:51:42:a5:2f:ba:e0:b0:96:a9:8f:eb:
34:c9:1b:41:bd:3c:c9:6e:c8:98:3d:9f:37:08:95:60:6d:01:
44:3e:ab:8b:ec:26:85:42:4d:41:29:47:7b:4e:25:f9:e0:aa:
6a:40:78:93:d8:dd:2b:8d:ec:69:75:ea:a4:08:33:4a:2d:31:
c4:1c:86:61:7b:85:da:df:6d:13:16:a7:a2:75:08:19:87:78:
3f:c7:c6:8f:29:d1:2f:e6:82:8d:71:ea:15:3d:cc:d8:db:00:
d7:0c:7f:8b:66:5b:b2:66:56:cc:48:30:e2:7d:a2:47:f3:74:
2f:2a:1b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:38:13 2026 by rpki-client