Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft
File: ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft (raw, json)
Hash identifier: qU1mBLQ4XMXPbEwnlxjV3c7KS/UBM1eJBJk98j/JjkM=
Subject key identifier: 32:D1:73:CD:B1:D1:E6:C5:3A:95:05:42:06:26:80:64:62:E8:81:DB
Authority key identifier: 65:A4:24:CE:E2:FD:B0:07:2B:54:14:38:D9:13:D2:66:36:A9:B8:8B
Certificate issuer: /CN=65a424cee2fdb0072b541438d913d26636a9b88b
Certificate serial: 019EBEEC7A4C072F237595D922CBC2EFFEF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZaQkzuL9sAcrVBQ42RPSZjapuIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft
Manifest number: 1969
Signing time: Sat 13 Jun 2026 03:00:29 +0000
Manifest this update: Sat 13 Jun 2026 03:00:29 +0000
Manifest next update: Sun 14 Jun 2026 03:00:29 +0000
Files and hashes: 1: DKRX12LW62Pwhd7lkkBTAIcEFmg.roa (hash: JQDtg/PbgFXKpQJ1cWIs8ZbTBrSDwWrj/eo/b+RXeDU=)
2: ZaQkzuL9sAcrVBQ42RPSZjapuIs.crl (hash: RfdnS0qsgmmYNue3bxLoCuJW/YAG8lRDHK1NecVoyuU=)
3: f56SXyzVaFxPipkSbWjQspBnG6k.asa (hash: kTkK/KuPdlPU1v4Iqn9nm0PLfpF6FLDnJnaGt4nEmLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZaQkzuL9sAcrVBQ42RPSZjapuIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:ec:7a:4c:07:2f:23:75:95:d9:22:cb:c2:ef:fe:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65a424cee2fdb0072b541438d913d26636a9b88b
Validity
Not Before: Jun 13 03:00:29 2026 GMT
Not After : Jun 14 03:00:29 2026 GMT
Subject: CN=32d173cdb1d1e6c53a9505420626806462e881db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b8:08:52:02:8e:d2:ad:ea:46:92:de:74:a9:
ff:82:3b:8c:f6:5b:e9:9f:a2:97:97:06:41:dc:b3:
53:e8:47:49:08:0d:bb:4a:32:cc:04:84:62:da:a4:
a4:5d:e5:35:ae:ff:4f:71:89:8e:af:21:da:87:de:
9d:63:73:fd:dd:b6:cd:01:dc:5c:c2:ab:5a:6d:6e:
8c:23:8a:6c:2e:d5:2f:52:c1:6a:14:8b:a2:a5:0d:
36:3b:77:2f:68:ea:7c:b8:a7:69:8b:81:05:15:3b:
ec:24:7c:bf:b0:37:9a:70:67:2b:01:0b:ba:7f:a6:
dd:e8:6c:8f:e1:8b:ea:61:59:78:ed:d6:73:4b:c5:
66:50:8e:43:a2:15:de:40:ed:94:18:f9:ba:d5:f8:
74:e6:b4:b4:b6:f4:18:41:28:24:8b:c6:44:44:a3:
7c:1e:e4:0a:6d:db:2c:ec:bd:9c:9c:75:ae:94:29:
f6:92:03:a1:54:9a:4b:29:fd:22:de:ad:d2:29:c4:
a5:94:86:c6:3b:25:59:38:16:9a:46:42:e2:87:24:
7f:e0:6c:ce:75:13:89:4d:95:49:ac:c3:cb:26:7d:
f4:b6:0c:5e:5c:9c:9b:6a:ed:d9:f8:b8:69:a4:07:
49:ae:bb:3a:44:9c:36:e9:c9:e3:f6:ad:e3:82:1b:
7b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:D1:73:CD:B1:D1:E6:C5:3A:95:05:42:06:26:80:64:62:E8:81:DB
X509v3 Authority Key Identifier:
keyid:65:A4:24:CE:E2:FD:B0:07:2B:54:14:38:D9:13:D2:66:36:A9:B8:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZaQkzuL9sAcrVBQ42RPSZjapuIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:a2:30:83:2b:88:15:4b:72:65:12:28:8b:49:f5:56:38:58:
cb:eb:7d:bd:f0:13:68:87:f9:b4:81:c3:7e:57:64:56:7d:2c:
70:fc:7c:a2:9a:20:2a:cc:a7:25:17:cd:06:19:f6:7a:ee:72:
59:56:98:53:cd:3d:67:70:73:6f:3e:35:bf:5f:76:4f:59:bf:
b9:0b:1f:92:30:80:b7:cc:94:6b:c4:a6:16:8e:56:66:1e:1d:
2b:de:eb:4b:31:50:a3:8e:86:b8:58:70:f4:90:f7:bc:83:09:
a4:9b:9b:f6:e4:b2:f2:7a:1a:12:70:15:0d:66:81:c8:31:a2:
63:52:a0:7e:60:e3:39:09:a3:b7:42:c0:cc:19:64:42:77:69:
6c:5f:59:ff:7b:9a:1a:63:39:d5:14:31:5e:e2:c9:f2:65:48:
36:d0:1d:83:62:4a:ac:a6:20:24:b4:51:e3:34:3b:36:c4:90:
a2:74:86:45:57:37:58:8f:0d:28:2a:1e:df:42:84:e9:8f:e2:
f1:61:65:9a:87:c5:ed:89:9b:bf:5e:62:37:df:a8:cd:6e:63:
f2:82:02:c7:59:5e:a8:ce:a1:fd:52:12:4d:e8:dd:56:f6:56:
df:94:dc:56:32:52:74:29:22:9d:81:19:81:77:4b:de:10:45:
07:4e:48:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:29:11 2026 by rpki-client