Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/55c2a0-49df-4d96-988f-4f9d04010710/1/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.mft
File: Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.mft (raw, json)
Hash identifier: j2vLTxVENC+yoqF97TAJf5Bs8keON9Q7mtw//pl9YZs=
Subject key identifier: 0A:AE:72:F6:1B:14:AF:05:1C:3A:9A:27:FD:1A:EF:29:58:5F:17:93
Authority key identifier: 67:5F:BE:4B:1F:00:23:3E:D7:67:99:00:71:F0:45:90:C9:0C:88:7D
Certificate issuer: /CN=675fbe4b1f00233ed767990071f04590c90c887d
Certificate serial: 019EC3009023054912B94EAA535A98555668
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/55c2a0-49df-4d96-988f-4f9d04010710/1/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.mft
Manifest number: 11F4
Signing time: Sat 13 Jun 2026 22:00:54 +0000
Manifest this update: Sat 13 Jun 2026 22:00:54 +0000
Manifest next update: Sun 14 Jun 2026 22:00:54 +0000
Files and hashes: 1: 1IAT8p5zJE7Cjb7zerrnkgwwgBo.roa (hash: JK2Pcklbnx9Qld5WIKxmuBJj4g+yCjwGVY5ntHTVBjs=)
2: Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.crl (hash: bSeTK0t0JgMDpLik7M8i2SGS97LqUCcEka2I17Ttc0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/55c2a0-49df-4d96-988f-4f9d04010710/1/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/55c2a0-49df-4d96-988f-4f9d04010710/1/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 19:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:00:90:23:05:49:12:b9:4e:aa:53:5a:98:55:56:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=675fbe4b1f00233ed767990071f04590c90c887d
Validity
Not Before: Jun 13 22:00:54 2026 GMT
Not After : Jun 14 22:00:54 2026 GMT
Subject: CN=0aae72f61b14af051c3a9a27fd1aef29585f1793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:21:88:00:42:02:62:e2:56:af:20:ce:32:8c:
0e:1a:b5:65:4d:b6:b2:a7:60:f8:3c:90:ba:5f:3e:
3f:5c:7b:6d:6a:d0:59:32:51:12:c4:7b:27:db:9b:
33:e7:ef:2d:cf:63:ca:9f:3b:fc:2b:2b:31:68:05:
c4:9e:45:a8:43:8a:88:1c:9f:c8:6a:db:a2:55:38:
49:64:59:ee:08:79:25:b4:7d:e0:ec:8a:23:9b:2f:
e2:11:e6:bc:e8:a2:e5:e9:ef:72:eb:c3:ec:87:2f:
5f:02:ee:bf:04:42:dd:74:23:05:cb:5d:ab:00:bd:
e5:38:a1:a5:53:b3:94:07:a9:1b:86:5d:af:02:0b:
af:ec:e7:0f:2c:2c:6c:13:98:1d:ca:de:15:24:df:
3c:5f:f1:d7:fc:b9:b3:33:70:5c:af:77:b5:6a:9b:
fe:75:a3:1d:2f:71:4b:93:e5:dd:c6:38:74:84:ab:
be:69:12:c7:0f:a9:2b:15:4c:23:0b:f1:dc:bc:5a:
c9:ac:d8:87:f7:89:8b:f0:78:9a:a1:a8:0c:67:1c:
97:c9:3d:f5:d2:4f:fc:64:ec:59:e4:49:71:be:1f:
cf:83:57:1a:a9:aa:3d:3a:20:94:c2:45:4e:d1:9e:
81:32:31:ea:5a:85:7b:12:61:5a:5e:aa:77:16:a0:
01:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:AE:72:F6:1B:14:AF:05:1C:3A:9A:27:FD:1A:EF:29:58:5F:17:93
X509v3 Authority Key Identifier:
keyid:67:5F:BE:4B:1F:00:23:3E:D7:67:99:00:71:F0:45:90:C9:0C:88:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/55c2a0-49df-4d96-988f-4f9d04010710/1/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/55c2a0-49df-4d96-988f-4f9d04010710/1/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:76:5f:32:47:be:7f:55:64:9c:e4:9a:35:1e:94:67:9d:5b:
32:a1:0c:d7:8b:91:bb:5e:35:76:43:35:cb:b6:5a:5a:a5:46:
b2:8f:29:4d:db:4a:92:d7:33:73:58:2f:92:7a:bb:28:9b:6b:
7f:e5:cd:78:15:31:f9:df:03:fa:47:17:b9:b0:5f:d4:ca:2f:
0d:ef:71:57:ca:84:26:c3:78:6a:77:42:ed:c6:9c:3c:14:17:
81:84:73:cf:0d:d1:0e:0d:d3:3b:f1:53:5a:d2:35:2e:7e:5f:
6b:80:49:99:de:30:f4:19:df:ea:d1:ae:4d:0f:f8:cb:1a:69:
dc:f4:33:df:da:9a:9d:7c:7d:ef:3c:76:d6:fc:90:41:a6:f7:
f8:cd:f8:c6:06:74:ed:50:d0:93:a2:f3:63:28:41:23:9b:21:
9f:1c:98:86:ad:d3:dc:f7:b7:db:42:d5:c4:f6:fb:24:03:17:
e1:52:27:d2:ad:26:ff:e5:a4:23:99:79:6f:24:c0:d7:5d:f7:
07:1f:12:89:6b:ec:15:2b:8d:70:7e:f7:64:03:70:2a:ec:56:
2a:c8:78:16:7a:66:e9:17:ba:da:75:cb:aa:ed:61:77:7d:7c:
e3:f3:48:30:17:6a:e1:9e:b4:75:6f:2a:2c:61:df:c6:33:b0:
e1:31:3e:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:43:55 2026 by rpki-client