Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.mft
File: Z31OosAWzieXr3rrc30TKHVmnxI.mft (raw, json)
Hash identifier: +KPWm8tKGtHGspB38w6JmDIq5Dj8ITR7iDDgOlW87TQ=
Subject key identifier: 1C:C4:2C:2B:1B:42:8D:90:FF:BB:B3:19:67:07:2A:51:0E:62:0C:71
Authority key identifier: 67:7D:4E:A2:C0:16:CE:27:97:AF:7A:EB:73:7D:13:28:75:66:9F:12
Certificate issuer: /CN=677d4ea2c016ce2797af7aeb737d132875669f12
Certificate serial: 019EC33766C87AC40A20CA9BF328A2C66ECD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z31OosAWzieXr3rrc30TKHVmnxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.mft
Manifest number: 0E6B
Signing time: Sat 13 Jun 2026 23:00:48 +0000
Manifest this update: Sat 13 Jun 2026 23:00:48 +0000
Manifest next update: Sun 14 Jun 2026 23:00:48 +0000
Files and hashes: 1: 4Bv5xQ3eOktWbNiksOI6_CyDYwE.roa (hash: AzbxLrQ0rBUs69Ie4HmTc38VBCdV7Bu9rChwxjbGaTI=)
2: Z31OosAWzieXr3rrc30TKHVmnxI.crl (hash: bVUuV2lGB4oqjP40xfBOS13iLrbg5TpsfCMQVi5JoW0=)
3: fdwbgBklrjdovCeYbqvQYFGn8iQ.roa (hash: 8Me+/KWLgHoPwHgTQu4VQrh3NLbvTzJ2Ie0jnlhQSkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z31OosAWzieXr3rrc30TKHVmnxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 23:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:37:66:c8:7a:c4:0a:20:ca:9b:f3:28:a2:c6:6e:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=677d4ea2c016ce2797af7aeb737d132875669f12
Validity
Not Before: Jun 13 23:00:48 2026 GMT
Not After : Jun 14 23:00:48 2026 GMT
Subject: CN=1cc42c2b1b428d90ffbbb31967072a510e620c71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:55:d8:c2:b9:89:4f:c2:9f:8f:e1:96:cf:93:
fd:3b:d1:78:79:33:0b:96:68:92:e8:b2:5c:e4:09:
8f:b2:61:f0:60:5b:d2:f2:03:a2:e1:7d:3e:b1:20:
5e:19:5d:57:24:3f:1d:94:8d:02:4b:d9:fc:b8:06:
f2:a8:14:c0:16:53:e7:c2:be:30:5d:39:9f:4c:cb:
1d:35:1c:37:f3:01:bb:33:93:7b:fd:d2:0f:63:d1:
74:59:a9:c5:82:dd:50:32:6f:bc:c6:4b:43:9e:48:
7b:fe:e3:d1:f5:bc:c4:4a:ae:1f:15:9b:08:f7:48:
29:7b:0c:20:f1:06:ae:fc:ec:0f:45:51:f3:61:fd:
2f:a1:9e:62:a9:45:88:f1:5c:65:6a:a4:f5:60:26:
c4:dc:74:45:8b:85:87:fb:34:ca:e4:bf:3b:ee:22:
c7:4c:70:1e:4f:fe:fb:5d:7d:9e:6b:b0:53:10:11:
0b:ea:26:d2:96:4a:9f:1e:a9:4b:a3:9f:27:a1:bc:
6b:c2:fc:9f:83:e5:88:f8:3a:1d:c2:e7:b4:71:8d:
de:02:1c:21:a6:62:ad:30:01:d9:eb:f3:0f:e8:c4:
b7:54:60:b3:3f:05:c3:8b:22:c3:28:fe:d2:74:61:
f6:72:78:0a:6a:99:21:23:bf:3c:0f:b1:bf:c4:3f:
15:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:C4:2C:2B:1B:42:8D:90:FF:BB:B3:19:67:07:2A:51:0E:62:0C:71
X509v3 Authority Key Identifier:
keyid:67:7D:4E:A2:C0:16:CE:27:97:AF:7A:EB:73:7D:13:28:75:66:9F:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z31OosAWzieXr3rrc30TKHVmnxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:d5:d3:69:6b:e5:39:65:b5:e3:0f:eb:3a:b4:6f:84:13:b9:
d9:b8:26:c2:7a:e1:cd:92:6f:78:54:68:3b:df:ff:d1:cb:25:
06:bd:72:13:e4:a2:46:ba:08:7d:55:b8:1a:87:c9:72:29:5e:
04:e4:bc:a8:4d:83:98:d6:e1:fa:30:21:fa:0d:4f:a4:be:52:
d7:8c:a2:8c:ba:7d:8e:e4:6e:e6:bb:c1:06:53:b8:4d:dd:2e:
b4:9f:d9:12:aa:5c:2c:7a:24:6a:6c:55:cd:84:ac:74:7b:e6:
09:47:41:da:9b:73:ab:b2:8e:e5:65:65:f8:8d:ba:f6:6e:23:
e4:7a:42:15:8b:7f:54:99:49:35:cb:9d:30:8e:ab:29:d2:33:
4f:cd:16:ca:ad:99:ab:df:b9:49:59:2b:d3:43:36:3c:65:0b:
1d:93:89:51:48:1a:62:8e:90:08:29:ef:4d:2a:33:78:b4:dd:
e4:0a:f0:91:9f:b7:74:1c:ba:60:5f:36:07:20:d4:ec:50:0e:
7a:b4:d2:bf:d6:ab:8d:a7:e4:10:1b:6d:37:36:97:ac:ea:56:
73:0e:f7:ad:69:69:25:dc:f4:90:b1:90:63:ae:bf:76:52:97:
26:59:57:17:ed:41:3f:43:99:30:e6:ef:bc:ee:8b:ff:1c:6c:
2a:af:f2:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:36:33 2026 by rpki-client