Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.mft
File: ZeImvPSoMLL0SP1uqZdrFSCH3UU.mft (raw, json)
Hash identifier: 1LVomu3jvqqJhsjZCxE7O/0tPmuVi1DNDfNUPnYakcs=
Subject key identifier: 2D:BD:4C:62:61:E5:E7:8B:9D:53:23:EB:AE:C3:90:F3:7D:1E:7B:2A
Authority key identifier: 65:E2:26:BC:F4:A8:30:B2:F4:48:FD:6E:A9:97:6B:15:20:87:DD:45
Certificate issuer: /CN=65e226bcf4a830b2f448fd6ea9976b152087dd45
Certificate serial: 019EC0A3E1895D4417444101AFE9B77D9C6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZeImvPSoMLL0SP1uqZdrFSCH3UU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.mft
Manifest number: 0C4F
Signing time: Sat 13 Jun 2026 11:00:26 +0000
Manifest this update: Sat 13 Jun 2026 11:00:26 +0000
Manifest next update: Sun 14 Jun 2026 11:00:26 +0000
Files and hashes: 1: 4MSE4UyGO5LwOd_U2HJUAYFw8yI.roa (hash: 1DrymcOv7aoritq27aJXxxGAaxiSifi94Z89A2CC9Ow=)
2: KaN7RLL5KVyq30qD32Rnb_nls78.roa (hash: bzsFsGck1pscarjTWs0d9Ebn5ZXqcM8xKvGnRO+nPFk=)
3: ZeImvPSoMLL0SP1uqZdrFSCH3UU.crl (hash: AtwMMvYwZSWUQNwJbAD13sNL1CPzB1Fk2nGCJk/DIl8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZeImvPSoMLL0SP1uqZdrFSCH3UU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:a3:e1:89:5d:44:17:44:41:01:af:e9:b7:7d:9c:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65e226bcf4a830b2f448fd6ea9976b152087dd45
Validity
Not Before: Jun 13 11:00:26 2026 GMT
Not After : Jun 14 11:00:26 2026 GMT
Subject: CN=2dbd4c6261e5e78b9d5323ebaec390f37d1e7b2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e0:38:87:cb:dd:24:70:af:36:af:ce:a7:d9:
29:98:87:1a:0b:04:10:71:9f:35:c3:b0:c7:51:14:
7a:ae:24:05:63:da:ce:ef:e7:13:1a:99:f5:17:51:
a6:c6:9f:62:59:86:55:24:a8:2e:92:7d:39:84:17:
7f:50:01:fd:5b:20:2a:0e:1d:63:64:60:79:09:96:
d1:63:4e:d6:67:b1:ff:0d:ed:fb:92:62:c9:47:4c:
39:3f:33:f0:fd:c5:57:67:c6:ef:93:01:ae:d5:ca:
e6:f4:5b:29:a4:2b:6c:eb:59:67:bd:b1:99:9a:78:
0d:58:17:ad:c4:89:35:68:35:b2:ba:fc:43:68:ef:
64:fc:81:eb:07:06:58:e7:d9:31:28:d5:5b:1e:3e:
47:2e:f6:13:14:77:6f:26:69:c6:98:e3:89:31:09:
c7:3e:a3:d7:11:e5:0a:5b:9f:cf:d5:b2:be:1c:67:
67:29:e7:f4:af:19:9d:d3:c5:77:9f:30:fc:78:53:
be:70:ff:19:04:cf:fd:d4:0a:3a:4d:c4:ab:46:e8:
b4:cc:ca:3e:20:21:83:d2:90:e5:f4:08:81:1a:77:
72:0d:a3:7c:07:5e:36:3d:b7:50:04:b5:4f:9a:e1:
8e:5e:92:7e:7f:71:90:67:76:ef:43:c4:46:62:d1:
36:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:BD:4C:62:61:E5:E7:8B:9D:53:23:EB:AE:C3:90:F3:7D:1E:7B:2A
X509v3 Authority Key Identifier:
keyid:65:E2:26:BC:F4:A8:30:B2:F4:48:FD:6E:A9:97:6B:15:20:87:DD:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZeImvPSoMLL0SP1uqZdrFSCH3UU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:26:d5:55:3c:75:72:72:05:d4:f4:5a:fe:36:f0:dc:b9:bf:
fa:71:3c:01:43:c0:fe:c0:71:4e:78:89:41:73:d3:e1:85:6a:
74:01:e5:a3:94:e2:47:c7:f8:20:63:9a:ed:1f:91:ff:36:d1:
ab:95:c0:98:bb:47:3e:cb:56:f2:03:e6:08:96:c7:e5:4a:cf:
51:a3:95:de:10:c1:6e:e7:bc:e9:16:1a:2c:62:51:d0:0f:6d:
a6:ad:64:27:b7:e8:7e:7c:52:4d:6f:d7:20:38:98:02:8c:5d:
72:4c:6b:8b:3d:68:25:bb:88:1a:39:21:81:dd:06:89:48:aa:
b2:3d:19:ab:8e:a9:d0:c7:70:ed:1d:15:d2:ee:88:84:86:a2:
a9:26:0b:cf:26:e9:eb:ea:82:3f:72:94:e8:96:fd:32:72:81:
91:b2:f4:33:57:8b:fd:63:d6:17:a7:f6:2d:28:e5:82:93:ec:
36:81:54:83:a9:87:25:90:91:0d:56:d5:29:c0:58:74:a1:bc:
f1:1d:71:7b:22:04:bf:7e:ab:23:be:41:cf:f7:c6:bb:93:5b:
ee:65:89:a4:f3:09:b6:2b:77:c1:ec:b2:b4:3c:e1:8c:e5:0e:
12:50:04:c6:b8:bf:97:fd:bc:79:bc:14:c1:b5:e4:b4:35:32:
07:3e:ad:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:58:17 2026 by rpki-client