Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.mft
File: zNNXkIMM50aalMWbLizLv1420T8.mft (raw, json)
Hash identifier: 8G0IWwWCWqlObBHyzv5aLwoFYF+vYUNJ6o/0FgTIRPs=
Subject key identifier: F2:E6:52:24:21:4B:9E:77:F6:11:87:52:38:63:9D:39:09:EA:68:F2
Authority key identifier: CC:D3:57:90:83:0C:E7:46:9A:94:C5:9B:2E:2C:CB:BF:5E:36:D1:3F
Certificate issuer: /CN=ccd35790830ce7469a94c59b2e2ccbbf5e36d13f
Certificate serial: 019EBF23B6E10373138212884DFDCAB1832D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNNXkIMM50aalMWbLizLv1420T8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.mft
Manifest number: 13D1
Signing time: Sat 13 Jun 2026 04:00:49 +0000
Manifest this update: Sat 13 Jun 2026 04:00:49 +0000
Manifest next update: Sun 14 Jun 2026 04:00:49 +0000
Files and hashes: 1: TUvmrgBE44ev_WdD8HZ7-Tqrsvk.roa (hash: eGtgmPAMsFLuXajQP6UacgNI2KT3PlnsWKJ/DF91EtU=)
2: v87hPEGnMIsf-U-27Xa5aB7InJ0.roa (hash: vpt3+IR1X8NAWDYMxgQL6E8vBwuUgUGdnpH6ThIVLCI=)
3: zNNXkIMM50aalMWbLizLv1420T8.crl (hash: WPOwZihZ/xSydpeANE62yCOkU5yXtax0oHIT2ZAAqrg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zNNXkIMM50aalMWbLizLv1420T8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:23:b6:e1:03:73:13:82:12:88:4d:fd:ca:b1:83:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd35790830ce7469a94c59b2e2ccbbf5e36d13f
Validity
Not Before: Jun 13 04:00:49 2026 GMT
Not After : Jun 14 04:00:49 2026 GMT
Subject: CN=f2e65224214b9e77f611875238639d3909ea68f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1d:1b:3b:4d:3b:9d:1e:ea:b0:bb:48:a4:21:
ac:e6:30:c1:16:21:bb:28:70:40:92:39:c9:58:58:
9c:fb:06:e6:fd:b3:f9:c6:84:e9:f4:08:50:3c:72:
8e:ea:e0:00:c7:fe:9e:33:16:a1:fd:8d:41:4d:55:
85:57:c0:73:4e:35:80:03:7d:2b:27:f9:15:59:c0:
9c:ac:cd:8e:95:67:e0:20:ca:6e:c7:c5:14:99:ec:
34:c1:ae:a4:a9:60:bb:19:e1:e4:4d:04:bc:91:68:
4d:92:6a:e2:cf:0c:63:2c:7f:76:2c:a0:4c:cf:bd:
5e:84:42:ce:9b:c9:ed:82:15:6c:22:4b:0f:3e:38:
01:eb:be:88:07:7b:d2:6e:69:cf:c6:38:43:76:85:
32:d3:57:0c:b4:5f:e1:4a:a3:d0:15:26:78:c4:17:
8c:2d:78:92:72:f4:4f:8c:00:83:cd:21:03:76:ed:
3a:ae:49:62:c7:47:a1:61:45:f7:d6:4d:23:8b:a8:
cd:13:f9:b3:3b:00:df:19:95:f6:fb:72:10:97:e6:
f5:a7:b5:29:95:f0:9d:b6:95:e2:93:ff:0f:0b:bf:
c3:d0:7f:26:9c:c1:6f:8b:82:e7:72:d4:d7:6e:cc:
26:a1:b8:e6:14:e1:94:e2:cc:03:aa:44:58:67:10:
ee:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:E6:52:24:21:4B:9E:77:F6:11:87:52:38:63:9D:39:09:EA:68:F2
X509v3 Authority Key Identifier:
keyid:CC:D3:57:90:83:0C:E7:46:9A:94:C5:9B:2E:2C:CB:BF:5E:36:D1:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNNXkIMM50aalMWbLizLv1420T8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:d5:c2:7c:44:ee:33:2f:18:5f:99:af:73:01:83:e3:94:24:
84:37:e9:fd:57:f6:0a:cc:eb:c0:0f:9c:01:08:c1:57:19:bb:
b1:95:e2:57:f0:36:6f:29:62:50:53:2c:e2:62:62:71:01:59:
1e:7a:5f:0d:87:ed:d8:85:ff:c0:07:4c:ee:ab:b2:57:55:78:
40:60:56:5d:46:1d:38:c9:29:d7:da:0a:b8:91:56:c1:c1:64:
22:82:60:61:2f:20:75:2c:11:d8:5d:23:e2:b2:5f:8a:f9:6e:
3d:85:64:9c:ac:68:4e:c5:9e:0a:de:de:c6:5b:9a:e6:c3:7a:
29:7f:31:65:74:fa:a4:f0:e9:fd:9d:4b:e9:47:f6:2d:c2:37:
d1:a4:f8:93:3a:00:7f:7f:8d:67:c4:1c:d5:a4:23:d4:a5:6c:
a9:c9:29:8d:85:97:8f:47:58:49:f9:be:9d:f1:8a:9e:8b:41:
d7:5a:f4:62:dc:89:b2:68:16:67:00:ba:80:f1:f0:76:d8:33:
79:f3:17:a2:5b:97:d2:aa:fa:43:3f:d0:e1:7b:91:b2:7b:90:
67:ef:94:56:1f:8a:be:48:67:42:01:dc:de:83:80:45:9e:5f:
73:6b:82:42:69:fd:83:8f:ab:66:e1:c7:89:eb:77:96:5b:b2:
b7:a5:a2:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:14:25 2026 by rpki-client