Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/ZnKfnQeG9ooezVxakrw5LYaRl14.mft
File: ZnKfnQeG9ooezVxakrw5LYaRl14.mft (raw, json)
Hash identifier: HYrjokIixI9xAskq1tN6AP1uhXEG+MSBX2tPm4l+0ag=
Subject key identifier: 8D:04:AA:09:26:65:DA:EE:26:2D:6F:30:B1:CD:42:C6:FF:FD:8A:00
Authority key identifier: 66:72:9F:9D:07:86:F6:8A:1E:CD:5C:5A:92:BC:39:2D:86:91:97:5E
Certificate issuer: /CN=66729f9d0786f68a1ecd5c5a92bc392d8691975e
Certificate serial: 019ED4D04D62951E570DC23CDA19DFE39B4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZnKfnQeG9ooezVxakrw5LYaRl14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/ZnKfnQeG9ooezVxakrw5LYaRl14.mft
Manifest number: 1548
Signing time: Wed 17 Jun 2026 09:01:21 +0000
Manifest this update: Wed 17 Jun 2026 09:01:21 +0000
Manifest next update: Thu 18 Jun 2026 09:01:21 +0000
Files and hashes: 1: ZnKfnQeG9ooezVxakrw5LYaRl14.crl (hash: wpMcll6L8GEceiYBMqBN4fL+nS+HitOV7vCahkNvUYs=)
2: uoe5Gtg5RLHmca7orVX_kgMJ6LA.roa (hash: fAkGAUFUUGm9PtxJMnL3fGCs6QplpIcm9Vtk+9FgVDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/ZnKfnQeG9ooezVxakrw5LYaRl14.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/ZnKfnQeG9ooezVxakrw5LYaRl14.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZnKfnQeG9ooezVxakrw5LYaRl14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 08:33:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d4:d0:4d:62:95:1e:57:0d:c2:3c:da:19:df:e3:9b:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66729f9d0786f68a1ecd5c5a92bc392d8691975e
Validity
Not Before: Jun 17 09:01:21 2026 GMT
Not After : Jun 18 09:01:21 2026 GMT
Subject: CN=8d04aa092665daee262d6f30b1cd42c6fffd8a00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:13:93:9a:31:b5:9d:e3:d3:b0:ad:29:16:c5:
06:71:f9:2e:88:4c:75:dc:8a:d7:16:ce:c1:41:17:
3f:cd:76:ce:c3:0c:73:aa:61:69:a7:09:c7:20:93:
68:d2:3f:9b:13:0b:b1:f1:f8:1b:b3:b7:d2:25:bc:
9e:1a:18:2e:63:91:7f:5b:22:4b:b2:b9:bf:70:cc:
42:59:d6:d9:f1:5c:c8:aa:2c:e0:09:6b:f6:1f:cd:
68:2c:5e:a6:a2:98:de:7d:2b:86:40:47:ab:ed:56:
da:13:ef:62:05:30:6d:e0:fe:0b:cf:2d:a8:d4:31:
a1:bd:74:2d:6a:f3:6f:07:ae:5f:a7:fb:b5:14:96:
56:03:0f:b4:c6:92:ea:25:83:ed:08:e5:93:6b:fe:
a9:40:80:3f:9b:58:27:d1:94:6c:b8:bb:b4:4c:2f:
cf:8f:01:ee:a1:74:c2:5d:70:9e:d1:a7:b3:0f:4b:
88:c5:9d:d6:c2:44:31:8c:e3:78:fe:a7:e9:22:d4:
6a:cf:59:a8:10:33:43:37:4a:d7:c0:bf:4e:41:3a:
0f:8e:8c:1b:b2:ab:8a:98:cd:65:db:6f:58:c7:d3:
cd:d7:42:f9:d2:fc:94:c4:a1:00:04:60:fc:5e:f7:
1d:cc:9e:2e:3c:8d:63:1d:1e:db:54:e4:8a:e7:6f:
e8:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:04:AA:09:26:65:DA:EE:26:2D:6F:30:B1:CD:42:C6:FF:FD:8A:00
X509v3 Authority Key Identifier:
keyid:66:72:9F:9D:07:86:F6:8A:1E:CD:5C:5A:92:BC:39:2D:86:91:97:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZnKfnQeG9ooezVxakrw5LYaRl14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/ZnKfnQeG9ooezVxakrw5LYaRl14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/ZnKfnQeG9ooezVxakrw5LYaRl14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:df:17:52:aa:69:01:b0:2d:9c:dd:51:2b:2a:3f:cb:cf:33:
23:fb:b9:75:db:54:a8:d4:4f:75:71:63:d1:f3:6d:8f:bc:75:
44:3b:19:12:67:30:4d:22:e1:00:c4:e1:1a:e4:7e:c4:09:4b:
65:72:08:91:c1:a7:d1:88:5d:f9:4e:cc:58:60:e2:7e:36:3b:
e9:2d:60:15:3d:ac:c2:19:2d:07:73:f0:cf:c0:c1:92:d4:98:
c5:e2:65:23:ef:b5:7f:ee:90:c2:34:e2:bc:cc:df:ec:61:fe:
7c:59:ac:eb:1a:fc:26:49:e8:40:cc:54:1e:6a:8d:08:93:78:
96:68:30:25:16:32:6f:a6:49:26:4d:57:e2:d9:68:ed:e3:be:
e8:5f:0b:de:02:b0:0b:43:32:f0:1d:07:fd:75:83:1d:29:48:
f5:ee:8c:16:93:12:81:cf:f8:6a:35:84:04:d2:10:a4:62:6a:
e1:30:d2:06:d9:74:ff:a8:69:39:1f:49:c9:c6:25:33:59:d3:
f5:d9:e8:56:34:1a:d9:73:09:62:37:4c:eb:04:8e:ff:47:63:
d2:a2:ac:51:2c:40:ed:c3:e3:a4:98:ba:58:3e:52:bc:2d:4c:
20:a5:67:83:af:a8:3c:41:dd:cc:5c:b5:29:d9:12:72:db:30:
09:93:e5:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 13:02:33 2026 by rpki-client