
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/0f419e-942c-4bc4-a75d-2c7d1812ba3e/1/zDh6hAQSMxrhkT3t0L6kxhm4pzA.mft
File: zDh6hAQSMxrhkT3t0L6kxhm4pzA.mft (raw, json)
Hash identifier: jIjr4fADJoJp7R258/MsfivnOO1IpDr4GCaEU2J7vEk=
Subject key identifier: D0:DA:A8:88:45:16:39:FA:AE:53:75:BB:44:1B:D0:DF:AB:5B:DE:39
Authority key identifier: CC:38:7A:84:04:12:33:1A:E1:91:3D:ED:D0:BE:A4:C6:19:B8:A7:30
Certificate issuer: /CN=cc387a840412331ae1913dedd0bea4c619b8a730
Certificate serial: 019EC06DD7B3C331AA56A70A9146BFEFC64B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zDh6hAQSMxrhkT3t0L6kxhm4pzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/0f419e-942c-4bc4-a75d-2c7d1812ba3e/1/zDh6hAQSMxrhkT3t0L6kxhm4pzA.mft
Manifest number: 010F
Signing time: Sat 13 Jun 2026 10:01:24 +0000
Manifest this update: Sat 13 Jun 2026 10:01:24 +0000
Manifest next update: Sun 14 Jun 2026 10:01:24 +0000
Files and hashes: 1: qIYB0A4RSZN6LE7W59v3zP7y3P0.roa (hash: 5gqhlF6BkyZHYPK5fz4mRNQz3WRvXUePbuSTbTO9q8g=)
2: zDh6hAQSMxrhkT3t0L6kxhm4pzA.crl (hash: HyLhJLS0xkjgTx7u2htPpZCuBtmuNzbRwuaF0HF3JwI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/0f419e-942c-4bc4-a75d-2c7d1812ba3e/1/zDh6hAQSMxrhkT3t0L6kxhm4pzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/0f419e-942c-4bc4-a75d-2c7d1812ba3e/1/zDh6hAQSMxrhkT3t0L6kxhm4pzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zDh6hAQSMxrhkT3t0L6kxhm4pzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:6d:d7:b3:c3:31:aa:56:a7:0a:91:46:bf:ef:c6:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc387a840412331ae1913dedd0bea4c619b8a730
Validity
Not Before: Jun 13 10:01:24 2026 GMT
Not After : Jun 14 10:01:24 2026 GMT
Subject: CN=d0daa888451639faae5375bb441bd0dfab5bde39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d9:10:5d:5c:41:7b:d9:ee:26:73:62:fc:20:
f3:46:c2:54:f4:be:10:34:de:ef:80:0c:1a:28:8b:
95:70:86:9d:55:51:ba:e9:9b:d0:eb:81:ae:28:65:
b0:35:f2:29:7f:2e:80:ca:21:1e:b9:e8:f3:45:ae:
44:0d:56:db:c6:b1:ea:99:3e:61:32:69:81:67:32:
9f:c3:42:a9:8b:95:b9:6b:a3:f8:5e:a4:bc:c4:a0:
91:cf:05:8c:8b:e1:d2:91:37:08:4d:c8:8e:d5:c3:
7e:36:f0:d9:da:33:a9:dd:0c:0e:5b:58:ad:db:8a:
29:0b:1c:2b:7b:98:af:43:06:12:b9:11:64:34:6a:
73:32:0b:36:e0:f2:54:fb:71:a6:4c:43:cc:35:92:
a0:a2:c5:5b:9e:dd:9d:1d:b9:df:03:3c:4c:2f:e4:
b5:6b:98:49:84:d0:05:1b:81:0c:94:6a:ed:e1:89:
ec:b8:6b:6f:a7:36:0e:79:6a:6e:49:7c:02:7c:cb:
79:f9:10:c6:d0:c2:2d:0a:6c:9b:d1:42:89:b6:90:
e1:4c:34:ba:86:ce:13:52:a5:a2:34:63:5d:92:89:
2e:07:83:86:d0:2b:d9:85:d0:73:fd:1e:ba:e6:e1:
03:e3:06:10:f9:ed:17:01:19:f4:54:9d:02:26:2b:
3f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:DA:A8:88:45:16:39:FA:AE:53:75:BB:44:1B:D0:DF:AB:5B:DE:39
X509v3 Authority Key Identifier:
keyid:CC:38:7A:84:04:12:33:1A:E1:91:3D:ED:D0:BE:A4:C6:19:B8:A7:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zDh6hAQSMxrhkT3t0L6kxhm4pzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/0f419e-942c-4bc4-a75d-2c7d1812ba3e/1/zDh6hAQSMxrhkT3t0L6kxhm4pzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/0f419e-942c-4bc4-a75d-2c7d1812ba3e/1/zDh6hAQSMxrhkT3t0L6kxhm4pzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:a8:05:d7:e0:81:80:1c:90:bb:6d:ce:03:b0:76:77:03:22:
9a:69:50:2d:ba:0f:e0:bd:37:98:7a:19:3c:71:cb:b0:05:ec:
35:a5:4f:48:02:a8:86:f9:0f:45:24:5c:9a:1d:53:76:b2:0f:
ce:97:6d:f4:0a:60:65:ef:9e:38:48:65:2d:06:86:c7:da:b1:
41:67:24:4f:8e:19:0f:b4:64:2a:fc:22:e7:4c:ce:4e:47:59:
72:19:af:29:e8:ae:29:3f:24:15:5f:9f:01:2f:a9:39:4f:b5:
59:c2:c1:1e:57:8b:ae:1e:60:c1:c1:cc:44:ee:22:c5:c6:2f:
21:be:4e:e2:16:50:18:1c:4d:39:69:75:ff:1c:ef:ef:4b:a9:
d7:da:3f:f3:74:75:a0:e3:4b:e5:10:14:d5:b8:17:a7:f2:f9:
1e:42:48:1e:da:11:af:72:d8:aa:6f:31:ac:56:93:70:eb:2b:
ef:66:14:a2:1e:6d:a6:96:d1:2d:60:47:83:66:92:35:99:1e:
52:a8:aa:2b:eb:86:bb:2b:33:8c:a2:46:2f:e8:be:b1:9e:d9:
f8:2f:f3:69:7d:af:7e:bd:0b:ad:54:7b:af:00:95:af:28:d8:
d7:90:02:dc:42:09:8c:b6:f8:84:6d:2f:44:63:cb:6e:5d:00:
aa:03:3d:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:38:02 2026 by rpki-client