Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.mft
File: Zl5NfqijRwyXA-51UUgcNvd0_rs.mft (raw, json)
Hash identifier: +ArTJ1wMBp5/M25PQ1jA5DI/Sa58tQwev76oUnh/p68=
Subject key identifier: 34:2D:0F:20:56:AD:A6:25:51:EC:04:36:01:3F:3B:5B:72:55:40:D8
Authority key identifier: 66:5E:4D:7E:A8:A3:47:0C:97:03:EE:75:51:48:1C:36:F7:74:FE:BB
Certificate issuer: /CN=665e4d7ea8a3470c9703ee7551481c36f774febb
Certificate serial: 019EC2C964073F2EFD8F38935BBC4FA72ED4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zl5NfqijRwyXA-51UUgcNvd0_rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.mft
Manifest number: 1678
Signing time: Sat 13 Jun 2026 21:00:38 +0000
Manifest this update: Sat 13 Jun 2026 21:00:38 +0000
Manifest next update: Sun 14 Jun 2026 21:00:38 +0000
Files and hashes: 1: 3dDFlJIiwev5JNzj0uspF-q-hAM.roa (hash: 2MPQXp2XuzXpOvR5MvmUSNMeQLpCxYJhhEk2RjVnZhI=)
2: Zl5NfqijRwyXA-51UUgcNvd0_rs.crl (hash: QzG31um1lUTaLOnC774PnndSz0glqMVHx4EHj1xthkY=)
3: tXb-ZOETTYTckpb9Qysc1kmvy6I.roa (hash: ecwsDlNutKSR5EQe4HHz/G8gZ+2PHPrWaHUQyPF5OHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zl5NfqijRwyXA-51UUgcNvd0_rs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:c9:64:07:3f:2e:fd:8f:38:93:5b:bc:4f:a7:2e:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=665e4d7ea8a3470c9703ee7551481c36f774febb
Validity
Not Before: Jun 13 21:00:38 2026 GMT
Not After : Jun 14 21:00:38 2026 GMT
Subject: CN=342d0f2056ada62551ec0436013f3b5b725540d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:84:71:72:4d:0d:95:4b:c7:53:bd:55:15:67:
7c:58:1d:a8:71:81:d9:c9:6a:dd:4a:e3:2f:04:56:
17:10:0b:fd:96:f5:b4:02:45:15:03:db:6d:d0:e7:
c9:3d:71:e7:cf:57:eb:2c:d2:e7:06:fd:3d:97:26:
5b:56:91:85:4f:b7:b9:a6:fe:91:09:05:ee:50:3c:
cb:f5:8c:e7:a2:bd:a1:45:bb:3c:13:e7:73:22:59:
38:86:2f:4d:34:e2:9d:2e:53:dd:1f:b5:73:30:8f:
fd:26:3a:3d:ed:d9:e3:4a:be:fe:12:a5:11:c9:c3:
41:0a:40:8f:f9:10:f0:90:70:2a:3a:83:26:45:36:
ed:6f:71:54:c3:c2:2f:32:0d:99:e3:12:c2:8b:f2:
7a:95:99:2c:5f:ed:a7:98:9a:fc:ee:2f:0c:c0:0a:
55:a4:f0:ab:9d:f3:d9:09:9f:2d:89:37:6b:22:3e:
21:1e:b9:4c:b7:6f:91:85:72:83:c5:98:5a:d3:76:
1a:3e:0a:40:a6:ad:0b:d2:a5:e6:fb:ec:f0:65:43:
01:0b:84:00:ed:ae:bd:be:82:73:df:96:1c:4d:08:
eb:a5:6c:eb:01:15:5c:7b:96:87:fe:cb:d2:f8:8b:
3e:03:92:2a:56:60:65:83:cb:83:67:9f:86:e7:22:
42:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:2D:0F:20:56:AD:A6:25:51:EC:04:36:01:3F:3B:5B:72:55:40:D8
X509v3 Authority Key Identifier:
keyid:66:5E:4D:7E:A8:A3:47:0C:97:03:EE:75:51:48:1C:36:F7:74:FE:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zl5NfqijRwyXA-51UUgcNvd0_rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:d3:a5:5a:26:87:59:f9:b8:b2:c9:e8:f1:16:22:e3:38:c6:
c9:40:3c:b6:2b:7d:3a:92:76:cf:2a:bf:13:bd:12:1f:2e:99:
fd:0c:03:96:fb:3d:0f:a5:02:f7:3d:22:02:d6:df:9e:53:15:
f3:d0:2c:f1:fb:e7:43:54:b1:90:a5:10:f2:69:a3:e7:5a:ab:
93:51:47:71:8f:1c:0c:fe:9f:43:12:84:14:d9:f5:37:6f:8c:
dd:25:40:9b:3a:33:8e:95:72:79:9a:72:07:8e:12:36:c7:65:
86:3d:e8:44:da:08:8b:06:61:18:51:8b:94:8a:9d:e2:63:7f:
80:e9:29:a3:45:ff:f4:d8:93:8e:65:c2:e8:51:d1:8a:32:5b:
35:75:d4:75:a0:26:2a:7c:02:36:e3:a2:3f:3e:6c:4b:98:ff:
23:36:eb:6b:9a:2f:bc:41:11:98:24:ab:32:18:4a:08:82:7a:
9e:ec:9a:f4:ae:8c:e3:05:1d:83:a3:4d:5d:f0:fa:9c:b7:b1:
98:c5:b0:66:b2:13:cc:40:3d:3d:0a:d9:61:8c:d9:7e:22:46:
6c:57:79:42:b2:ac:47:77:6a:9f:a4:9c:7a:3f:c6:cc:74:c9:
26:3c:54:4a:59:8b:44:00:19:15:e3:88:7f:a2:9e:3a:86:f6:
5f:25:62:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7CyWQHPy79jziTW7xPpy7UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2NWU0ZDdlYThhMzQ3MGM5NzAzZWU3NTUxNDgxYzM2Zjc3
NGZlYmIwHhcNMjYwNjEzMjEwMDM4WhcNMjYwNjE0MjEwMDM4WjAzMTEwLwYDVQQD
EygzNDJkMGYyMDU2YWRhNjI1NTFlYzA0MzYwMTNmM2I1YjcyNTU0MGQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0oRxck0NlUvHU71VFWd8WB2ocYHZ
yWrdSuMvBFYXEAv9lvW0AkUVA9tt0OfJPXHnz1frLNLnBv09lyZbVpGFT7e5pv6R
CQXuUDzL9Yznor2hRbs8E+dzIlk4hi9NNOKdLlPdH7VzMI/9Jjo97dnjSr7+EqUR
ycNBCkCP+RDwkHAqOoMmRTbtb3FUw8IvMg2Z4xLCi/J6lZksX+2nmJr87i8MwApV
pPCrnfPZCZ8tiTdrIj4hHrlMt2+RhXKDxZha03YaPgpApq0L0qXm++zwZUMBC4QA
7a69voJz35YcTQjrpWzrARVce5aH/svS+Is+A5IqVmBlg8uDZ5+G5yJCkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDQtDyBWraYlUewENgE/O1tyVUDYMB8GA1UdIwQY
MBaAFGZeTX6oo0cMlwPudVFIHDb3dP67MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmw1TmZxaWpSd3lYQS01MVVVZ2NOdmQwX3JzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8xNGRkZDEtZGVhYy00MWZmLWJhNmIt
MTYyZWQ2MjRlMjgyLzEvWmw1TmZxaWpSd3lYQS01MVVVZ2NOdmQwX3JzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC8xNGRkZDEtZGVhYy00MWZmLWJhNmItMTYyZWQ2MjRlMjgy
LzEvWmw1TmZxaWpSd3lYQS01MVVVZ2NOdmQwX3JzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbdOlWiaH
Wfm4ssno8RYi4zjGyUA8tit9OpJ2zyq/E70SHy6Z/QwDlvs9D6UC9z0iAtbfnlMV
89As8fvnQ1SxkKUQ8mmj51qrk1FHcY8cDP6fQxKEFNn1N2+M3SVAmzozjpVyeZpy
B44SNsdlhj3oRNoIiwZhGFGLlIqd4mN/gOkpo0X/9NiTjmXC6FHRijJbNXXUdaAm
KnwCNuOiPz5sS5j/Izbra5ovvEERmCSrMhhKCIJ6nuya9K6M4wUdg6NNXfD6nLex
mMWwZrITzEA9PQrZYYzZfiJGbFd5QrKsR3dqn6Scej/GzHTJJjxUSlmLRAAZFeOI
f6KeOob2XyViDQ==
-----END CERTIFICATE-----
Generated at Sun Jun 14 00:16:23 2026 by rpki-client