Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.mft
File: zT29X8b5G4B7e8TPbmRuNFhirz4.mft (raw, json)
Hash identifier: /eUDGHiBT9JPGJRrBdXrxKjZ04wSsPYToJoV1BA4VwQ=
Subject key identifier: E3:D2:8E:3A:49:93:62:53:C1:40:19:6F:33:94:1E:B2:9A:74:8A:84
Authority key identifier: CD:3D:BD:5F:C6:F9:1B:80:7B:7B:C4:CF:6E:64:6E:34:58:62:AF:3E
Certificate issuer: /CN=cd3dbd5fc6f91b807b7bc4cf6e646e345862af3e
Certificate serial: 019EC18013B22E5C8AD94999AA042BF8D02F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zT29X8b5G4B7e8TPbmRuNFhirz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.mft
Manifest number: 0901
Signing time: Sat 13 Jun 2026 15:00:56 +0000
Manifest this update: Sat 13 Jun 2026 15:00:56 +0000
Manifest next update: Sun 14 Jun 2026 15:00:56 +0000
Files and hashes: 1: W37sGJ1Z1wl4UUbIKXQMtHltG0E.roa (hash: hXtR6w7vecs+GA3es0V1qVgIw93rkqQSf8/pd9Bww6I=)
2: zT29X8b5G4B7e8TPbmRuNFhirz4.crl (hash: D9H/4+9NXkBCQNI6kP8ZQtBMneiJOkQZHyzfPwgRxnQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zT29X8b5G4B7e8TPbmRuNFhirz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 15:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:80:13:b2:2e:5c:8a:d9:49:99:aa:04:2b:f8:d0:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd3dbd5fc6f91b807b7bc4cf6e646e345862af3e
Validity
Not Before: Jun 13 15:00:56 2026 GMT
Not After : Jun 14 15:00:56 2026 GMT
Subject: CN=e3d28e3a49936253c140196f33941eb29a748a84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:fe:ac:ab:74:c9:bb:68:5b:26:85:1d:72:8c:
0c:f0:92:e6:e6:95:f6:5b:3b:07:8f:88:f3:08:3c:
d9:d9:5a:10:70:6f:fb:c1:e4:96:6d:b7:58:85:eb:
d1:95:2b:e9:cd:8f:21:b8:81:ba:ba:47:a4:cb:85:
27:d5:cd:a5:84:d9:d7:fb:b7:1f:51:96:a6:8d:2f:
82:fd:5c:1e:7f:20:80:0b:a0:33:02:72:ab:2f:e9:
bd:69:1c:1b:04:6d:a5:9f:ed:b5:41:9b:82:e1:a9:
b7:10:95:77:f0:a7:be:5e:98:9d:bd:98:9d:eb:12:
21:26:e9:4e:c0:81:a8:38:63:9c:7f:1e:6d:02:60:
9c:08:a1:15:b3:fc:d8:bb:1b:e7:f0:c2:7e:f6:20:
f1:ab:b1:aa:4e:27:64:61:c2:28:9b:5e:29:6a:56:
1f:30:3f:8e:78:a7:67:e2:8e:9c:25:86:38:66:da:
c8:b3:31:90:dd:cf:d0:63:84:a0:28:db:d8:0c:58:
ac:89:d1:f8:7d:3a:e9:5c:bc:47:4c:37:30:5f:36:
4d:b3:aa:48:8f:e0:88:09:92:4f:d3:a9:1e:1d:d8:
3d:76:22:7e:4f:c9:ed:96:9f:3f:b5:6f:ef:78:ff:
7a:2b:c5:15:b7:d3:10:70:b1:bc:89:29:25:da:e8:
41:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:D2:8E:3A:49:93:62:53:C1:40:19:6F:33:94:1E:B2:9A:74:8A:84
X509v3 Authority Key Identifier:
keyid:CD:3D:BD:5F:C6:F9:1B:80:7B:7B:C4:CF:6E:64:6E:34:58:62:AF:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zT29X8b5G4B7e8TPbmRuNFhirz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:53:d0:df:7c:62:df:95:9f:cc:2a:f6:2a:39:c8:2e:ab:c6:
77:15:13:28:aa:77:16:bc:74:14:0c:15:ea:fa:42:ac:cb:1a:
43:ad:3b:f5:f7:1e:1f:2c:78:0e:ca:47:85:dd:06:6c:61:42:
f5:ec:63:72:a6:5a:f8:0b:44:8c:dd:59:03:92:74:fa:c7:da:
bb:a3:79:55:d2:d2:6e:f9:35:6a:14:ba:49:72:ef:e4:56:0d:
5b:ae:a8:04:a8:22:33:d4:47:89:1b:2a:2e:03:06:ff:7d:aa:
44:41:f8:be:46:b5:f7:9e:4a:39:81:7d:23:c1:58:c2:b1:f1:
47:a6:13:ea:0a:aa:c8:60:01:ba:06:b0:02:09:38:f2:55:4c:
02:21:32:60:15:04:ea:ad:b5:cb:e4:3c:fc:95:7f:32:25:e9:
8f:7a:6e:25:d2:37:89:2b:4e:3c:3b:a3:43:1d:80:bf:31:a8:
23:7b:d2:e2:f0:99:1f:08:70:25:fa:6c:d4:67:c7:66:58:29:
89:14:03:0d:e1:24:48:dd:34:f3:c0:46:0c:a1:75:43:26:aa:
86:23:94:62:62:4e:9a:ac:74:19:42:5c:c7:0d:8b:d1:5f:5b:
fc:7a:7e:a6:8f:95:64:bd:dc:54:cc:d5:54:cc:21:79:85:e5:
87:9e:f1:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:31:42 2026 by rpki-client