Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/4bba08-be36-47eb-ab2c-6359f92e1d2f/1/zK1o9-irrfRHJiM0OjJWFQciQYk.mft
File: zK1o9-irrfRHJiM0OjJWFQciQYk.mft (raw, json)
Hash identifier: iqNSRN6fqAfrWzXMaiohUNx8TC2LeFMUhzefSyGENHU=
Subject key identifier: 8C:B6:22:9E:43:80:85:12:38:E4:C1:FE:E2:70:27:D0:E3:7E:A3:E3
Authority key identifier: CC:AD:68:F7:E8:AB:AD:F4:47:26:23:34:3A:32:56:15:07:22:41:89
Certificate issuer: /CN=ccad68f7e8abadf4472623343a32561507224189
Certificate serial: 019EBFC90F1E9B073CA1DB6163DCC325E5AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zK1o9-irrfRHJiM0OjJWFQciQYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/4bba08-be36-47eb-ab2c-6359f92e1d2f/1/zK1o9-irrfRHJiM0OjJWFQciQYk.mft
Manifest number: 0ACC
Signing time: Sat 13 Jun 2026 07:01:25 +0000
Manifest this update: Sat 13 Jun 2026 07:01:25 +0000
Manifest next update: Sun 14 Jun 2026 07:01:25 +0000
Files and hashes: 1: GvdosnM4oTQr42AAbs5kaRK7G5k.asa (hash: +q7C0091/BCLWI1y72MQuuHCj669pr/poTHiNIbXYFE=)
2: wEZZX0o5N8nlP47tu1RwoQ2y0AY.roa (hash: ddJPky6VMI6qp8TK3QriFAzhCSzbyfK/JMSPvgj4FCE=)
3: zK1o9-irrfRHJiM0OjJWFQciQYk.crl (hash: CLmFu6qEnC2ou6Pyo5FN6wqvdJNzRhgQXcpFSTX5+ak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/4bba08-be36-47eb-ab2c-6359f92e1d2f/1/zK1o9-irrfRHJiM0OjJWFQciQYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/4bba08-be36-47eb-ab2c-6359f92e1d2f/1/zK1o9-irrfRHJiM0OjJWFQciQYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/zK1o9-irrfRHJiM0OjJWFQciQYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:c9:0f:1e:9b:07:3c:a1:db:61:63:dc:c3:25:e5:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccad68f7e8abadf4472623343a32561507224189
Validity
Not Before: Jun 13 07:01:25 2026 GMT
Not After : Jun 14 07:01:25 2026 GMT
Subject: CN=8cb6229e4380851238e4c1fee27027d0e37ea3e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4c:3b:ea:9d:a5:90:66:d9:95:eb:48:5e:0d:
05:07:87:ce:cc:5d:fe:36:ee:f8:e6:1d:f2:26:a1:
41:0b:a7:08:94:6a:2d:b8:ac:6c:e7:1e:2e:a2:d1:
f4:9e:73:cd:36:23:72:30:fb:32:64:91:f8:c1:42:
18:50:2d:01:ef:a6:5a:8e:68:84:13:01:85:88:c4:
ab:6c:c1:94:00:0d:dd:f3:7f:87:4e:5d:17:16:e1:
6f:9f:b9:fc:97:f3:71:06:af:6f:7e:04:54:33:19:
0e:52:fe:5a:f6:22:cb:4d:43:8f:25:3a:cd:51:10:
f9:6f:97:a2:05:3c:81:4d:e1:74:91:3c:d4:f6:1f:
34:18:86:a2:1e:a9:c2:e1:26:d4:df:30:ba:7a:77:
65:d5:46:0e:27:3d:10:12:64:52:a9:a8:89:db:01:
fe:68:a9:3d:46:54:8d:f3:1c:1a:18:1e:92:93:3e:
20:7a:72:f8:58:4f:98:2c:6a:0d:45:09:d0:55:cc:
61:0c:6f:d6:0f:af:55:e2:78:b2:41:f0:a4:43:41:
80:b8:b8:ce:83:6e:66:37:36:bc:83:3c:3e:1b:11:
8d:8b:ef:e4:14:f7:e7:55:ae:24:57:d7:79:a3:31:
97:1a:f4:d5:c3:4f:3f:e1:22:90:b1:47:a4:14:16:
b6:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:B6:22:9E:43:80:85:12:38:E4:C1:FE:E2:70:27:D0:E3:7E:A3:E3
X509v3 Authority Key Identifier:
keyid:CC:AD:68:F7:E8:AB:AD:F4:47:26:23:34:3A:32:56:15:07:22:41:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zK1o9-irrfRHJiM0OjJWFQciQYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4bba08-be36-47eb-ab2c-6359f92e1d2f/1/zK1o9-irrfRHJiM0OjJWFQciQYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4bba08-be36-47eb-ab2c-6359f92e1d2f/1/zK1o9-irrfRHJiM0OjJWFQciQYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:7c:c0:10:10:74:c5:48:87:77:9a:06:4b:7a:b6:4a:0c:85:
ea:63:66:61:40:e8:e1:bd:c7:15:a0:95:f9:1d:c6:2a:27:96:
e8:1f:ef:09:7c:00:56:2d:a1:25:8b:68:8e:4d:5d:bc:48:23:
6d:15:83:57:b4:5b:18:bb:22:f5:f8:60:17:a9:b4:af:82:15:
66:cd:39:b8:f4:e5:9a:5b:6d:cd:b8:e0:eb:11:7d:a2:d9:89:
24:e3:38:09:62:9f:04:72:38:84:64:6a:1d:1a:12:32:24:7c:
1b:84:5a:9d:62:3f:8e:25:03:9e:cf:c6:5d:fd:4d:c8:3c:8d:
0f:5d:9e:65:4f:27:22:64:f8:27:75:49:56:f2:ce:7f:71:6b:
f8:53:79:ea:c6:52:d5:c0:80:f8:4d:ba:d9:0a:11:0f:8b:ba:
77:2b:f6:29:44:03:e0:2c:87:91:fe:ae:ba:bb:fe:bc:50:3d:
33:c7:b2:02:ff:93:43:c9:e4:2a:de:14:94:95:ee:c5:e8:f3:
e2:0d:15:e9:a0:28:21:f7:c0:49:f1:1d:38:0c:a1:4a:6f:78:
bd:55:56:33:01:d5:03:23:a2:63:64:c9:26:7d:17:eb:8e:00:
c8:89:b6:46:07:dc:cf:64:10:a7:b4:63:09:f4:e9:c0:b5:f0:
59:22:d1:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:35:14 2026 by rpki-client