Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.mft
File: z_N0ZX9XB488oscRCdNZJ8IkhoE.mft (raw, json)
Hash identifier: TZb/RfSzMBiAII3AaTmTBIdQ6ahNYa7Hj/3wXU75+EU=
Subject key identifier: 83:3E:A3:68:35:CE:06:8C:F0:9D:4A:22:45:07:F2:7D:F3:FB:4D:7E
Authority key identifier: CF:F3:74:65:7F:57:07:8F:3C:A2:C7:11:09:D3:59:27:C2:24:86:81
Certificate issuer: /CN=cff374657f57078f3ca2c71109d35927c2248681
Certificate serial: 019ED461F8D8BA69D8DDAD81B2A085CA66B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z_N0ZX9XB488oscRCdNZJ8IkhoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.mft
Manifest number: 12A7
Signing time: Wed 17 Jun 2026 07:00:50 +0000
Manifest this update: Wed 17 Jun 2026 07:00:50 +0000
Manifest next update: Thu 18 Jun 2026 07:00:50 +0000
Files and hashes: 1: 0m2Q39AVzMvmJbXvZVeAp5BUqHM.roa (hash: 4ENNyihBFdH7BC6Hukkp0FP8JTMdCiKInQ5i0yx7kBg=)
2: ld2nVBzkdbNeG0PFY_dUC7B6WIs.roa (hash: Jqk77Lv//XRofZ2i9r4w2rfiDp6DOlIJobQS/uFZtSA=)
3: z_N0ZX9XB488oscRCdNZJ8IkhoE.crl (hash: zwJjypPVGZNOhDo2OBx31zdysNUyBVh0ba/H9+MJzcY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/z_N0ZX9XB488oscRCdNZJ8IkhoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 07:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d4:61:f8:d8:ba:69:d8:dd:ad:81:b2:a0:85:ca:66:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cff374657f57078f3ca2c71109d35927c2248681
Validity
Not Before: Jun 17 07:00:50 2026 GMT
Not After : Jun 18 07:00:50 2026 GMT
Subject: CN=833ea36835ce068cf09d4a224507f27df3fb4d7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:83:e7:d0:cd:74:78:71:c8:8b:57:3f:d5:6a:
36:aa:22:55:8d:8e:b9:9b:36:6b:6a:0c:ef:a2:ba:
70:2d:54:91:42:a8:56:eb:0d:29:06:92:a2:c2:db:
81:8a:78:30:d8:06:6f:86:38:ad:b9:d1:3b:9c:aa:
f5:b5:28:84:53:a8:2c:e2:d7:8f:b0:b5:da:c5:7f:
1a:9b:a3:92:04:99:1a:dc:43:ca:4d:18:44:6c:12:
de:36:ea:e3:dd:93:0d:3b:df:14:81:e0:78:77:71:
b4:bc:4e:d5:13:c8:f1:31:75:ca:02:db:e8:1c:3c:
fc:d5:d9:ce:7c:7c:72:9a:08:dc:8f:a1:3f:71:0e:
c8:d1:49:5e:d5:25:d6:79:08:86:d7:4d:b9:78:db:
60:9d:da:ea:f3:4f:18:1f:3a:e7:46:1a:d1:83:e2:
0b:b2:4c:37:48:d1:ae:11:36:5e:49:97:0d:a2:de:
2c:e4:1b:68:1a:bd:c6:f4:14:53:ae:ae:4d:aa:43:
94:38:4e:f0:70:23:08:43:6d:5e:b7:76:1b:e2:af:
94:75:bd:5a:d7:2d:63:83:c9:bf:c6:2b:ba:3a:cf:
7e:6f:77:71:b6:f1:96:7a:b0:cf:81:18:6e:8c:33:
6d:18:3b:4f:ca:4a:3d:67:0b:8e:bf:f0:cb:c7:f9:
ec:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:3E:A3:68:35:CE:06:8C:F0:9D:4A:22:45:07:F2:7D:F3:FB:4D:7E
X509v3 Authority Key Identifier:
keyid:CF:F3:74:65:7F:57:07:8F:3C:A2:C7:11:09:D3:59:27:C2:24:86:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z_N0ZX9XB488oscRCdNZJ8IkhoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:7e:06:47:dd:c6:82:a4:24:ae:0e:98:95:f5:9b:f7:89:ab:
96:3b:de:e3:94:f9:11:32:25:08:f9:6d:d6:7e:0d:a8:49:22:
f8:89:9f:62:09:74:02:47:2a:48:b6:b9:1a:97:75:0d:86:eb:
f0:c0:b2:6b:49:d7:88:99:4a:75:e1:b3:62:4c:b7:1c:a2:5f:
5c:c3:8b:77:1f:da:3b:49:b4:3c:bf:24:70:f4:78:a7:e1:3c:
4e:9b:78:3c:79:d0:63:29:6b:87:de:b2:63:ea:1a:bc:98:ae:
8d:64:50:be:9f:6a:ad:3d:12:ac:5b:e7:64:dc:9e:10:7d:47:
8a:b9:69:48:f6:9a:46:ad:5d:91:d1:a8:12:4f:ab:6c:46:1c:
5d:9e:b5:20:b2:76:3c:fb:ad:7d:7f:ea:c9:6b:d5:77:c8:f5:
36:8f:74:03:62:f6:ac:cc:2e:c1:fc:9c:6f:86:e9:45:e2:f2:
54:81:c5:b9:ff:c5:89:cb:5c:c8:ee:e1:0b:73:3c:bf:1e:a8:
39:db:62:58:09:bd:b7:e2:7a:99:0d:c5:6f:3a:1b:c2:4b:a7:
b8:67:8b:f3:36:86:61:20:2c:c2:e8:8d:d4:a0:67:9b:e9:6f:
79:07:70:54:39:5b:47:11:9e:13:ff:d9:8e:49:09:ff:58:e5:
4d:ce:a4:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7UYfjYumnY3a2BsqCFyma4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmZjM3NDY1N2Y1NzA3OGYzY2EyYzcxMTA5ZDM1OTI3YzIy
NDg2ODEwHhcNMjYwNjE3MDcwMDUwWhcNMjYwNjE4MDcwMDUwWjAzMTEwLwYDVQQD
Eyg4MzNlYTM2ODM1Y2UwNjhjZjA5ZDRhMjI0NTA3ZjI3ZGYzZmI0ZDdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4oPn0M10eHHIi1c/1Wo2qiJVjY65
mzZragzvorpwLVSRQqhW6w0pBpKiwtuBingw2AZvhjitudE7nKr1tSiEU6gs4teP
sLXaxX8am6OSBJka3EPKTRhEbBLeNurj3ZMNO98UgeB4d3G0vE7VE8jxMXXKAtvo
HDz81dnOfHxymgjcj6E/cQ7I0Ule1SXWeQiG1025eNtgndrq808YHzrnRhrRg+IL
skw3SNGuETZeSZcNot4s5BtoGr3G9BRTrq5NqkOUOE7wcCMIQ21et3Yb4q+Udb1a
1y1jg8m/xiu6Os9+b3dxtvGWerDPgRhujDNtGDtPyko9ZwuOv/DLx/nslQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIM+o2g1zgaM8J1KIkUH8n3z+01+MB8GA1UdIwQY
MBaAFM/zdGV/VwePPKLHEQnTWSfCJIaBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvel9OMFpYOVhCNDg4b3NjUkNkTlpKOElraG9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jZDIxNDYtN2ZiZS00ZTVkLTkzYmEt
M2VhMmViZmU4NzA3LzEvel9OMFpYOVhCNDg4b3NjUkNkTlpKOElraG9FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9jZDIxNDYtN2ZiZS00ZTVkLTkzYmEtM2VhMmViZmU4NzA3
LzEvel9OMFpYOVhCNDg4b3NjUkNkTlpKOElraG9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANX4GR93G
gqQkrg6YlfWb94mrljve45T5ETIlCPlt1n4NqEki+ImfYgl0AkcqSLa5Gpd1DYbr
8MCya0nXiJlKdeGzYky3HKJfXMOLdx/aO0m0PL8kcPR4p+E8Tpt4PHnQYylrh96y
Y+oavJiujWRQvp9qrT0SrFvnZNyeEH1HirlpSPaaRq1dkdGoEk+rbEYcXZ61ILJ2
PPutfX/qyWvVd8j1No90A2L2rMwuwfycb4bpReLyVIHFuf/FictcyO7hC3M8vx6o
OdtiWAm9t+J6mQ3FbzobwkunuGeL8zaGYSAswuiN1KBnm+lveQdwVDlbRxGeE//Z
jkkJ/1jlTc6kGw==
-----END CERTIFICATE-----
Generated at Wed Jun 17 11:20:28 2026 by rpki-client