Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft
File: Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft (raw, json)
Hash identifier: IyzODIg7bFjSLFrN2LXmVeVyOrtvjJ/uf3UFpNeRzwg=
Subject key identifier: 42:4E:F8:92:65:A8:E3:03:A4:2D:31:DB:BC:57:AD:A6:4D:9A:A4:5E
Authority key identifier: 67:58:9D:5F:E4:BB:1C:5B:DB:83:A3:53:C2:73:7D:C6:04:34:13:26
Certificate issuer: /CN=67589d5fe4bb1c5bdb83a353c2737dc604341326
Certificate serial: 019EC29295BD87D35FF94C0627099842F330
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft
Manifest number: 049D
Signing time: Sat 13 Jun 2026 20:00:46 +0000
Manifest this update: Sat 13 Jun 2026 20:00:46 +0000
Manifest next update: Sun 14 Jun 2026 20:00:46 +0000
Files and hashes: 1: KyuLPj5o4j_n8r1tPjoVcUGqn_c.roa (hash: 6rz3nPgtR7nYzXOgSBXCSqdxgUf8eCA4QNV+oiGauy0=)
2: Z1idX-S7HFvbg6NTwnN9xgQ0EyY.crl (hash: F2Z/LRBqrtBGK8VFSUHTkPs0Qdy/v1hdhyrMX6dyI5A=)
3: xYG26TB2RrgqHuMvZiHsPq1NDVM.roa (hash: W2+WDoIzPRMoYogzmzQsW/rEEBQkgPMptZQ4oMSwz/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:92:95:bd:87:d3:5f:f9:4c:06:27:09:98:42:f3:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67589d5fe4bb1c5bdb83a353c2737dc604341326
Validity
Not Before: Jun 13 20:00:46 2026 GMT
Not After : Jun 14 20:00:46 2026 GMT
Subject: CN=424ef89265a8e303a42d31dbbc57ada64d9aa45e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4d:42:38:47:32:cc:23:01:ef:9e:1e:4c:02:
4f:c2:38:b5:a7:f9:f2:27:36:2b:24:e4:75:aa:04:
0e:92:b0:a1:6b:cd:95:4f:68:89:b5:27:3c:b2:92:
57:bb:07:bb:1f:08:20:40:92:d1:d3:45:b7:8a:58:
d1:db:3c:a4:79:7a:25:e5:ab:3d:de:f2:45:5c:dd:
0f:14:64:98:6c:f2:b0:21:f3:00:4f:46:8b:22:9e:
bd:e0:f4:64:4b:0f:11:d9:0c:32:47:42:75:6e:10:
40:07:ef:95:ca:0d:43:d4:64:f8:5d:ca:ca:28:5d:
58:38:17:aa:ee:b8:40:3d:64:34:33:7c:b7:1d:ca:
70:bb:d4:49:82:f4:bf:40:71:98:c3:69:99:c0:1b:
6d:27:d6:97:a3:a3:dd:d7:cc:ae:b0:d5:34:6f:e0:
0a:a2:3a:83:5a:88:4e:7b:f4:e0:bf:3d:6c:08:a4:
83:f0:1c:73:68:5f:e2:e8:42:91:0f:9e:89:67:d4:
46:c8:ee:3b:6a:c0:d5:77:f9:a7:72:02:19:5b:94:
c9:20:e8:6c:a4:f3:6d:f3:46:ae:93:0c:6b:db:f5:
17:66:77:5b:d9:45:65:da:04:64:29:24:77:de:57:
56:da:f1:d6:c3:63:c6:56:7a:7a:f1:01:1f:0e:0a:
e8:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:4E:F8:92:65:A8:E3:03:A4:2D:31:DB:BC:57:AD:A6:4D:9A:A4:5E
X509v3 Authority Key Identifier:
keyid:67:58:9D:5F:E4:BB:1C:5B:DB:83:A3:53:C2:73:7D:C6:04:34:13:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:7a:60:b2:83:66:f5:97:01:37:89:58:21:1f:c4:af:67:39:
00:b1:a7:27:7a:0a:32:03:69:9b:e6:16:bc:5b:55:46:30:e0:
b0:bf:ba:5e:c3:ea:ab:49:3b:27:cd:79:59:ba:00:94:de:4e:
d0:9e:d6:ca:24:19:0e:3b:db:08:30:e0:7b:9a:e0:35:5b:fe:
3c:aa:2e:f5:70:c6:e8:71:b7:11:af:5c:fc:44:94:89:11:22:
ac:cc:a8:33:8e:cb:0b:65:ff:a4:46:bd:7a:b1:e2:ad:96:25:
c3:a0:10:ad:3f:ea:fd:22:f6:df:08:f6:b4:32:f4:8f:e6:4f:
0d:8e:d4:98:eb:95:d5:9b:9e:4d:45:be:7c:56:c6:09:4c:e0:
80:90:8a:0f:ff:15:e7:00:95:e6:be:b2:20:ed:f7:d3:08:b7:
03:9a:1a:6c:15:4f:3b:d2:aa:6f:17:73:41:4c:b9:2e:f2:2f:
f0:4a:f4:ef:5d:17:3b:98:d8:69:b4:96:e8:21:b6:9d:5f:20:
2a:1f:3c:aa:32:04:ec:2d:3e:0c:49:61:10:97:01:4f:01:67:
76:54:a9:be:ab:69:eb:23:f3:ae:a2:8d:76:1b:43:d3:6b:24:
ba:82:f1:5a:1d:64:3a:4a:91:80:e0:f4:a1:94:5d:fc:23:3e:
bf:b1:9c:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:50:31 2026 by rpki-client