Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/364ab5-de95-4259-8927-9d2e42f7f9ac/1/zP_mT0Kp8Euf1s11g3Kh21zYsZE.mft
File: zP_mT0Kp8Euf1s11g3Kh21zYsZE.mft (raw, json)
Hash identifier: 0BccQNmUmh7idyZnOIPJkAzJI+EB5oXDhbMuXKe3Fq8=
Subject key identifier: 5E:CD:1F:EC:62:6D:64:16:08:5B:BF:04:B9:7A:7A:B8:D3:84:1B:60
Authority key identifier: CC:FF:E6:4F:42:A9:F0:4B:9F:D6:CD:75:83:72:A1:DB:5C:D8:B1:91
Certificate issuer: /CN=ccffe64f42a9f04b9fd6cd758372a1db5cd8b191
Certificate serial: 019EBF238AFCF4AFD4B58F831A1B2006722A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zP_mT0Kp8Euf1s11g3Kh21zYsZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/364ab5-de95-4259-8927-9d2e42f7f9ac/1/zP_mT0Kp8Euf1s11g3Kh21zYsZE.mft
Manifest number: 1667
Signing time: Sat 13 Jun 2026 04:00:37 +0000
Manifest this update: Sat 13 Jun 2026 04:00:37 +0000
Manifest next update: Sun 14 Jun 2026 04:00:37 +0000
Files and hashes: 1: bWCw9QvZ0n-9vSDkgSO_NuyUw34.roa (hash: Nv8e19B6F0Z+GsL3XuEotkyjFs4rEednWhdiNCJb51g=)
2: zP_mT0Kp8Euf1s11g3Kh21zYsZE.crl (hash: RRnvq8nX1AdSlqiDwpD93DvPvcKGBQYKDz5Up+7gYhY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/364ab5-de95-4259-8927-9d2e42f7f9ac/1/zP_mT0Kp8Euf1s11g3Kh21zYsZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/364ab5-de95-4259-8927-9d2e42f7f9ac/1/zP_mT0Kp8Euf1s11g3Kh21zYsZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zP_mT0Kp8Euf1s11g3Kh21zYsZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:23:8a:fc:f4:af:d4:b5:8f:83:1a:1b:20:06:72:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccffe64f42a9f04b9fd6cd758372a1db5cd8b191
Validity
Not Before: Jun 13 04:00:37 2026 GMT
Not After : Jun 14 04:00:37 2026 GMT
Subject: CN=5ecd1fec626d6416085bbf04b97a7ab8d3841b60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f3:22:16:6a:db:af:53:e1:aa:a2:36:e0:56:
20:12:96:4b:b0:fa:d9:5b:ee:35:39:a3:01:29:1c:
c5:4d:41:bb:2c:88:24:86:10:41:4e:c8:ac:fe:76:
01:d6:45:db:92:a6:98:44:7d:a9:f0:1c:ce:55:87:
30:94:26:ee:73:d9:2b:63:4e:6c:61:2e:c8:70:d0:
f1:10:20:31:85:e6:45:99:81:89:f7:1a:47:e7:56:
a5:61:e8:ce:67:4a:21:bd:c9:e8:1f:83:44:62:2b:
b2:33:ff:75:25:fe:5c:2f:7f:e9:9e:5e:4f:8f:ae:
f0:43:b6:66:02:4a:cb:5f:50:be:ff:29:73:fb:f7:
3b:53:77:ce:9e:64:c3:14:81:8f:93:f9:29:b9:40:
b5:6f:ea:be:9e:7e:01:94:19:18:d6:4e:04:79:c9:
8a:e4:6d:cb:c8:3d:0d:52:c3:90:bd:e3:b3:40:88:
40:de:b8:f4:76:0e:b7:a7:cc:6e:9b:e9:53:a7:bb:
fa:f7:c7:5b:41:4d:e8:07:21:89:a1:72:31:1c:35:
75:0b:1f:5f:c8:66:de:ff:de:2c:40:f1:18:d5:e6:
06:6a:1f:4d:bb:55:12:81:02:59:bc:95:a6:53:de:
9d:b5:5e:0d:3b:83:38:8c:45:65:b5:33:1c:42:cf:
88:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:CD:1F:EC:62:6D:64:16:08:5B:BF:04:B9:7A:7A:B8:D3:84:1B:60
X509v3 Authority Key Identifier:
keyid:CC:FF:E6:4F:42:A9:F0:4B:9F:D6:CD:75:83:72:A1:DB:5C:D8:B1:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zP_mT0Kp8Euf1s11g3Kh21zYsZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/364ab5-de95-4259-8927-9d2e42f7f9ac/1/zP_mT0Kp8Euf1s11g3Kh21zYsZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/364ab5-de95-4259-8927-9d2e42f7f9ac/1/zP_mT0Kp8Euf1s11g3Kh21zYsZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:98:6d:1c:dc:e5:11:cf:33:d5:41:2b:0d:43:a9:2d:60:39:
73:b4:c3:01:4e:1a:1b:a2:2f:f6:29:46:70:9e:b7:2e:5a:44:
21:59:2f:18:8d:85:6c:94:ce:e0:90:cd:b0:db:84:61:06:81:
a1:9b:0e:19:7f:8d:8a:1f:b6:ca:40:8b:b7:c6:73:7a:d1:d9:
8e:78:43:d6:02:80:a5:e4:ef:4d:13:2e:4f:45:17:f1:7a:34:
52:54:74:43:a2:af:74:56:1f:ef:88:00:32:ab:ae:dd:9a:57:
55:e8:97:90:1e:ae:8d:03:fc:e3:ae:a2:55:21:da:53:23:d7:
ca:c5:86:e0:cc:2e:66:d6:c6:95:37:06:a2:f7:3d:eb:60:32:
00:6b:bc:a2:74:ef:c1:24:91:df:a0:b7:91:9b:da:a1:1a:ee:
86:1b:80:c8:49:91:04:e7:5e:2b:91:3c:5e:71:9b:53:03:aa:
ad:fa:dd:a5:d8:77:e1:da:0e:11:1b:22:f1:cd:e7:7c:d1:48:
3f:1d:1d:97:a7:e0:2d:c7:64:24:db:c1:56:e7:98:c8:b9:a7:
32:e3:cc:cd:34:9b:24:fe:34:27:f5:8d:68:f3:0b:c9:2d:44:
74:3a:1a:0c:f6:55:64:7e:c6:40:54:d1:cf:e8:46:98:b6:8b:
24:f2:48:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:35:01 2026 by rpki-client