Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/196b71-587e-4099-bdb2-b954c50fdbb0/1/z2YiS8-4uC3qq6yMTKJQNxuXRhE.mft
File: z2YiS8-4uC3qq6yMTKJQNxuXRhE.mft (raw, json)
Hash identifier: 5Kd9GvO7CR/2cZ4LnZvYhmFETOHy8C4etNBd4WDtFRc=
Subject key identifier: 54:50:91:72:93:C1:C1:9F:23:01:85:BB:87:D0:20:B9:95:B4:B3:F9
Authority key identifier: CF:66:22:4B:CF:B8:B8:2D:EA:AB:AC:8C:4C:A2:50:37:1B:97:46:11
Certificate issuer: /CN=cf66224bcfb8b82deaabac8c4ca250371b974611
Certificate serial: 019EBFC7F7076307BE092D717E217BC16E15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z2YiS8-4uC3qq6yMTKJQNxuXRhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/196b71-587e-4099-bdb2-b954c50fdbb0/1/z2YiS8-4uC3qq6yMTKJQNxuXRhE.mft
Manifest number: 195B
Signing time: Sat 13 Jun 2026 07:00:13 +0000
Manifest this update: Sat 13 Jun 2026 07:00:13 +0000
Manifest next update: Sun 14 Jun 2026 07:00:13 +0000
Files and hashes: 1: BVCNuyEI8Escb23UOBkojnAQ3uU.roa (hash: TpAVxATDxHC3mnDA/ZCfMM4mNI1Q7807T0lCqaxfnlA=)
2: z2YiS8-4uC3qq6yMTKJQNxuXRhE.crl (hash: UJudZYOB+zSBrUhG19znHJU899JZutwQXVpHRtcWu4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/196b71-587e-4099-bdb2-b954c50fdbb0/1/z2YiS8-4uC3qq6yMTKJQNxuXRhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/196b71-587e-4099-bdb2-b954c50fdbb0/1/z2YiS8-4uC3qq6yMTKJQNxuXRhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/z2YiS8-4uC3qq6yMTKJQNxuXRhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 07:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:c7:f7:07:63:07:be:09:2d:71:7e:21:7b:c1:6e:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf66224bcfb8b82deaabac8c4ca250371b974611
Validity
Not Before: Jun 13 07:00:13 2026 GMT
Not After : Jun 14 07:00:13 2026 GMT
Subject: CN=5450917293c1c19f230185bb87d020b995b4b3f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:39:29:81:8d:7c:94:cf:bf:ce:b4:97:90:74:
67:1e:25:50:8a:44:35:78:d6:b1:a1:61:d9:22:b7:
46:54:bb:26:4c:c0:00:15:e7:c2:17:23:56:22:1a:
0e:04:c8:04:ab:1f:de:b9:2c:4d:c3:2e:19:47:1b:
0c:18:68:82:f4:4e:3c:76:27:4f:d6:d9:a2:09:ea:
38:8d:52:f4:d8:ed:8f:10:26:ea:59:11:ce:d0:5f:
c4:2a:8e:4d:20:43:91:b9:b9:fd:fc:e1:96:8b:9a:
c7:b8:75:dd:88:dc:73:af:96:c7:75:ce:3b:8b:b6:
69:de:b7:3a:7b:ed:00:36:7c:d4:ff:00:ae:12:d0:
3f:11:87:89:5f:30:ed:ad:c6:68:d6:56:e6:91:73:
4e:5f:eb:72:bd:ac:a6:42:1b:1f:93:3a:5c:a9:a4:
80:99:e5:33:d7:a6:5d:59:9e:c2:5f:91:70:07:87:
55:3a:ac:24:bf:da:1b:f4:4d:2f:5b:a7:61:15:c8:
e9:ff:93:38:1f:9d:71:8a:1f:df:83:2a:3e:f0:8e:
65:f8:9f:5f:20:1d:b0:af:e8:10:92:bc:55:69:3a:
bf:7b:70:2e:2b:85:7f:fc:18:c2:21:d1:15:f9:fd:
50:b0:50:a2:b7:7f:88:18:ab:2c:6b:ca:39:9b:c8:
4c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:50:91:72:93:C1:C1:9F:23:01:85:BB:87:D0:20:B9:95:B4:B3:F9
X509v3 Authority Key Identifier:
keyid:CF:66:22:4B:CF:B8:B8:2D:EA:AB:AC:8C:4C:A2:50:37:1B:97:46:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z2YiS8-4uC3qq6yMTKJQNxuXRhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/196b71-587e-4099-bdb2-b954c50fdbb0/1/z2YiS8-4uC3qq6yMTKJQNxuXRhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/196b71-587e-4099-bdb2-b954c50fdbb0/1/z2YiS8-4uC3qq6yMTKJQNxuXRhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:81:cd:91:3c:59:b5:80:df:dd:36:21:73:f6:89:2f:82:51:
8b:63:8d:71:97:ab:c6:a7:24:78:46:8f:8a:4b:64:e8:59:25:
9d:f8:a1:a3:91:a4:a1:57:04:d9:ea:68:9d:6e:e3:17:6e:d9:
ff:0b:49:4a:ca:dd:cf:45:3e:c0:55:11:28:2b:91:a0:3b:92:
06:53:e5:5a:3b:c3:65:cb:e0:20:41:66:e9:15:8a:bc:74:b2:
81:8f:d4:b7:29:88:00:36:ca:27:9c:c6:75:b2:4e:48:c4:53:
4a:e9:c4:61:08:c8:cc:10:35:2a:35:7e:d4:ed:cb:4a:a1:73:
69:2e:2e:c1:a3:5c:f7:42:0b:f5:8a:75:24:4d:0a:fa:c2:71:
9f:20:e6:40:e7:6a:87:26:42:9d:f0:cd:28:1f:42:36:0b:98:
19:fb:1e:d0:20:86:ad:d6:d4:1c:ed:ed:e0:25:0b:37:01:d4:
7d:75:53:56:30:a2:72:57:6c:bc:38:76:db:9d:c6:a9:f7:bb:
29:05:ff:6e:c6:59:53:80:83:5b:65:d5:2d:2b:77:d9:a1:1c:
c6:f4:31:11:d3:62:e5:17:09:6c:82:f8:e0:75:5b:33:21:c4:
56:11:18:84:16:36:2c:c2:0b:89:ab:44:ae:4c:db:52:14:68:
58:20:b7:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:27:07 2026 by rpki-client