
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/cfd41e-398d-4f1b-9995-1a3ff532bc20/1/zQPRPdJvAESig_xqEedWoqK1aRs.mft
File: zQPRPdJvAESig_xqEedWoqK1aRs.mft (raw, json)
Hash identifier: d/4+IF7dyOA9BANFGftauBrSvIVaLjtdOAcq3fxFihA=
Subject key identifier: 08:51:7A:AD:21:92:1C:B1:9B:34:AD:F3:36:E0:C6:2A:94:AC:C4:4F
Authority key identifier: CD:03:D1:3D:D2:6F:00:44:A2:83:FC:6A:11:E7:56:A2:A2:B5:69:1B
Certificate issuer: /CN=cd03d13dd26f0044a283fc6a11e756a2a2b5691b
Certificate serial: 019EBFFF45B7EDCAB2EED5595FB5B1EAEB58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQPRPdJvAESig_xqEedWoqK1aRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/cfd41e-398d-4f1b-9995-1a3ff532bc20/1/zQPRPdJvAESig_xqEedWoqK1aRs.mft
Manifest number: 0460
Signing time: Sat 13 Jun 2026 08:00:38 +0000
Manifest this update: Sat 13 Jun 2026 08:00:38 +0000
Manifest next update: Sun 14 Jun 2026 08:00:38 +0000
Files and hashes: 1: DV_1PU5sghttOAyD5Fk0auja6M4.roa (hash: vyYX2XFHKs4PfXvL2MDa+XaKNUQzIY/+9Y9TmVp9CiU=)
2: zQPRPdJvAESig_xqEedWoqK1aRs.crl (hash: iXqzVR0p5K1bERacQ+TTDYQY9p9wDHmu0zIdNrZmekg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/cfd41e-398d-4f1b-9995-1a3ff532bc20/1/zQPRPdJvAESig_xqEedWoqK1aRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/cfd41e-398d-4f1b-9995-1a3ff532bc20/1/zQPRPdJvAESig_xqEedWoqK1aRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/zQPRPdJvAESig_xqEedWoqK1aRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:ff:45:b7:ed:ca:b2:ee:d5:59:5f:b5:b1:ea:eb:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd03d13dd26f0044a283fc6a11e756a2a2b5691b
Validity
Not Before: Jun 13 08:00:38 2026 GMT
Not After : Jun 14 08:00:38 2026 GMT
Subject: CN=08517aad21921cb19b34adf336e0c62a94acc44f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:13:a3:30:a2:76:78:53:89:8d:4d:ec:83:8e:
5f:7b:40:89:20:84:17:82:63:55:2d:9c:f4:86:f0:
5b:e0:c7:89:1e:2a:a4:30:94:81:c3:aa:ad:4d:57:
e4:72:0c:ff:41:4e:88:eb:aa:f2:9a:0e:fc:af:db:
43:6d:3c:4d:36:ac:a9:73:69:22:94:2b:2a:cb:a0:
ab:51:7c:02:f7:e3:1b:09:2e:75:de:bf:14:67:f6:
1c:1e:b2:5d:19:24:1f:a3:04:d5:d6:ec:53:ed:24:
09:ab:03:09:ce:98:f4:70:50:d7:c0:ab:87:78:46:
55:25:e9:4b:83:92:13:e7:bd:02:52:c9:64:64:b8:
8a:dd:e3:57:7e:21:75:d4:6b:31:3e:08:01:66:c5:
be:fd:02:87:10:e8:36:ca:57:6d:64:21:bd:09:f2:
ac:95:54:3e:f7:83:5b:0a:ea:1c:2e:3c:51:27:69:
80:3d:21:a1:0c:22:e6:00:0a:10:2a:a1:04:06:91:
b6:76:78:a5:20:4f:3b:01:77:14:25:c1:38:01:87:
a4:08:e5:51:5c:ae:b3:db:b0:5d:b9:c8:a3:c7:d8:
5c:9d:70:86:4c:ce:db:0b:6d:d6:47:63:62:03:93:
12:d5:c0:53:6e:ca:07:5c:18:c6:7f:33:52:5c:37:
d5:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:51:7A:AD:21:92:1C:B1:9B:34:AD:F3:36:E0:C6:2A:94:AC:C4:4F
X509v3 Authority Key Identifier:
keyid:CD:03:D1:3D:D2:6F:00:44:A2:83:FC:6A:11:E7:56:A2:A2:B5:69:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQPRPdJvAESig_xqEedWoqK1aRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/cfd41e-398d-4f1b-9995-1a3ff532bc20/1/zQPRPdJvAESig_xqEedWoqK1aRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/cfd41e-398d-4f1b-9995-1a3ff532bc20/1/zQPRPdJvAESig_xqEedWoqK1aRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:10:bc:e9:58:31:73:94:60:30:09:b0:bc:bb:8c:a7:53:da:
1b:43:99:02:2e:f2:a8:6c:96:ec:d0:e6:8f:b6:c6:c9:84:ae:
23:65:88:d3:5e:81:f9:ac:89:84:37:16:94:85:aa:21:b1:39:
09:02:57:45:46:f3:b2:0e:57:10:7e:c1:c6:a0:be:d3:6b:d1:
03:aa:38:13:5c:a0:a9:47:94:96:36:3f:5b:d9:8c:6b:79:ed:
10:3b:bd:54:55:f5:b9:ad:58:2e:fb:01:25:1e:d1:40:64:c7:
0f:36:90:e0:58:d4:ff:f1:4c:0d:23:a4:0d:16:46:8a:84:bc:
11:1d:1b:99:ed:7d:0d:c3:1c:fd:81:32:d9:44:af:7f:15:4c:
6d:a0:85:c2:eb:1b:4b:b3:9c:00:29:f3:4f:bf:b2:01:f6:fd:
ab:d7:01:90:7e:7e:28:f4:3b:d2:3f:7f:fa:7d:93:54:35:93:
ef:9e:18:f9:58:98:97:7c:56:b4:0e:95:f8:b8:3c:2d:5a:b6:
01:cf:d6:6b:7c:3f:1b:3d:8b:9b:53:33:43:8d:d2:76:63:d5:
8b:1d:63:86:4b:67:35:16:dd:87:b3:d4:af:96:41:ca:b1:12:
ad:4c:ef:d9:18:ce:50:dc:60:87:58:2e:4b:25:48:cd:1b:c5:
6b:1f:3f:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:34:11 2026 by rpki-client