Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft
File: z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft (raw, json)
Hash identifier: S9X/dNSYXuRNHhVuR2rGuUU69pMLIxWkqKxC7WTW6Hg=
Subject key identifier: 96:63:5B:7C:DC:83:A9:D4:C0:51:4B:A9:3F:7B:69:C7:49:CF:F1:96
Authority key identifier: CF:5B:F0:F1:9A:99:4C:7F:68:6D:55:AB:FC:16:87:5D:39:E5:D4:E2
Certificate issuer: /CN=cf5bf0f19a994c7f686d55abfc16875d39e5d4e2
Certificate serial: 019EBF5AAB2206A8C99CD96E91036DB32300
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z1vw8ZqZTH9obVWr_BaHXTnl1OI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft
Manifest number: 067B
Signing time: Sat 13 Jun 2026 05:00:50 +0000
Manifest this update: Sat 13 Jun 2026 05:00:50 +0000
Manifest next update: Sun 14 Jun 2026 05:00:50 +0000
Files and hashes: 1: VBl0vhkZ0p5h13VJMHzt2wrsQ7A.roa (hash: VVaZ8MZsUSIufXGhoXhGO0V1DGyl/LodpDCAxeW4mZ0=)
2: voKmqzxnpt1_Etyi16YW_6f_LiA.roa (hash: FSyRyjfIYpd8tAuhdZ0kMGNXftsQsnkKkGGZLUK2+XE=)
3: z1vw8ZqZTH9obVWr_BaHXTnl1OI.crl (hash: xniHGdnyvlQVFuCtaBjAFwHXV6tc+ndLVKHa8dSPHMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft
rsync://rpki.ripe.net/repository/DEFAULT/z1vw8ZqZTH9obVWr_BaHXTnl1OI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:5a:ab:22:06:a8:c9:9c:d9:6e:91:03:6d:b3:23:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf5bf0f19a994c7f686d55abfc16875d39e5d4e2
Validity
Not Before: Jun 13 05:00:50 2026 GMT
Not After : Jun 14 05:00:50 2026 GMT
Subject: CN=96635b7cdc83a9d4c0514ba93f7b69c749cff196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f5:09:98:24:0a:3a:d9:62:c5:a8:7d:c6:29:
31:a5:89:41:d6:06:73:4a:fb:f2:26:f4:d4:cf:0a:
cc:53:86:86:eb:f0:1f:0f:ee:e4:34:19:69:bd:fe:
81:7a:f7:bb:dc:6f:b8:82:ad:c2:14:f3:b8:25:27:
16:d2:d2:5c:db:d2:21:da:5d:74:f0:fc:fe:c9:9f:
70:29:23:08:73:fd:43:11:09:a3:75:f3:51:54:31:
82:08:65:a4:09:fe:5a:20:a5:ec:83:37:2e:8d:f5:
55:74:3b:70:03:15:53:5b:43:a1:ff:e2:57:ba:47:
f1:be:65:74:09:59:99:39:31:7e:fb:17:7b:7e:77:
3e:70:6f:3e:c3:1a:2d:8c:10:23:7b:81:28:33:06:
52:d2:4a:a3:08:6a:bd:10:2f:94:c8:b3:6d:52:5e:
e5:f8:e6:18:32:1a:21:f1:86:dc:0b:1d:cc:d5:8e:
06:ba:9e:14:b2:d9:be:48:6a:47:eb:70:f3:a5:ea:
2c:09:17:13:00:7b:0b:53:84:50:93:c6:5b:13:27:
7a:71:9e:6a:fb:cb:b6:c3:ef:9d:bb:15:49:53:52:
bf:2d:39:d9:7f:a9:06:e3:d4:20:33:8f:37:ff:ea:
17:4d:28:a0:5f:ca:a9:67:c4:62:03:71:cf:e6:40:
89:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:63:5B:7C:DC:83:A9:D4:C0:51:4B:A9:3F:7B:69:C7:49:CF:F1:96
X509v3 Authority Key Identifier:
keyid:CF:5B:F0:F1:9A:99:4C:7F:68:6D:55:AB:FC:16:87:5D:39:E5:D4:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z1vw8ZqZTH9obVWr_BaHXTnl1OI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:6e:09:a4:7c:26:1a:37:84:70:61:b8:fc:b0:4f:18:0a:5e:
8a:86:d6:e3:8b:33:17:0f:41:9a:3d:51:e8:ac:3a:53:8b:6b:
29:47:e9:96:d0:94:25:bf:96:1d:97:91:89:a6:25:c0:52:d6:
79:4e:26:15:d1:08:52:23:47:27:a7:7a:96:c1:9e:09:f7:d4:
70:49:27:2b:fc:9c:65:51:08:84:f8:4f:cd:2d:04:38:88:56:
3e:ad:a3:d0:79:0c:2e:43:49:1c:b8:c4:41:ea:14:d3:59:41:
5c:64:fa:00:cf:3f:91:8d:b2:01:9a:1c:9d:a8:68:12:a6:15:
70:75:e4:c1:f7:81:7e:91:f1:e1:16:82:c0:f7:e3:74:4c:52:
3c:ee:0c:ca:8c:c7:0a:9d:78:3e:42:4d:56:66:4a:47:02:7d:
7f:4f:d3:34:9c:16:b8:e3:da:1f:03:97:ee:81:63:f2:22:d5:
c9:9f:09:96:b0:4b:95:69:df:06:c7:b7:fb:c2:20:b0:ae:80:
da:fb:4e:fc:79:75:4a:e7:9f:4b:16:32:29:91:b2:79:d4:52:
55:20:65:fa:77:27:18:ae:3d:04:8f:e9:4b:93:38:79:37:85:
f3:7a:1d:51:71:d0:e5:8f:53:f8:0a:ba:09:09:e9:81:0a:3e:
80:e2:03:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:59:15 2026 by rpki-client