Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.mft
File: ZaZluQBpvXGFBgLnQAxSl5Mmnjk.mft (raw, json)
Hash identifier: nJBMsnyd7O2tT0YydY4L2nMYWsuxmb74MgzlDysrgOI=
Subject key identifier: 10:9A:F6:D3:74:A5:1D:B4:D8:2E:B9:AB:E6:DF:E5:55:D6:8D:96:2D
Authority key identifier: 65:A6:65:B9:00:69:BD:71:85:06:02:E7:40:0C:52:97:93:26:9E:39
Certificate issuer: /CN=65a665b90069bd71850602e7400c529793269e39
Certificate serial: 019EBF5A814E09D83CF591569C3A3A966D0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.mft
Manifest number: 08A8
Signing time: Sat 13 Jun 2026 05:00:40 +0000
Manifest this update: Sat 13 Jun 2026 05:00:40 +0000
Manifest next update: Sun 14 Jun 2026 05:00:40 +0000
Files and hashes: 1: 5Vvt0AbvSxWyjAd-ALv69QCsNsk.roa (hash: 5/TeIgyVfAlprXjl0P+4FxuBA+lZL0C59tR8RwJwnQM=)
2: Cr-_Jks4-Nf_6cTAfqEm2bEkrqY.roa (hash: Lfoyt36d2xlYMQKhlmP8HR47UA8DZd6j01qEp/DuwGg=)
3: GElj9icCt-w2mx3YliBHFVCYPPg.roa (hash: PirS1DKcgnSFMhly0KbVf5RAZaqtFd0hZcWS32fEx7s=)
4: RGRGMmzLxpqCQOW-phn3KT39D9s.roa (hash: ZUPL8DNkteQ3PG2vzMcT8okE7rH1FO2YVjvr69odfCY=)
5: ZaZluQBpvXGFBgLnQAxSl5Mmnjk.crl (hash: ZpG0JXevprkV16tqNrpE504Kq9w6ps/ouNcXidwxDHU=)
6: _LFVw1RdLCWt-By3DgXS7TEwY-g.asa (hash: 7sp68pc4lJoudoB6GmnBQDPxVv/dJsT1KjSRKMkEvH8=)
7: gTAiJcqXUVhZkR4ZXv2cVDvzjVw.roa (hash: H8wggrXDtCuk8Xa7cBwaDqzCfoO3HXFepBg70R4642M=)
8: m1QjC3UV2Ny4UxXqYlT4s7dYaFg.roa (hash: 6V+rFBPB+VWm7if/CwhSgG0t42lVGrHbuCda8HK7Mzg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:5a:81:4e:09:d8:3c:f5:91:56:9c:3a:3a:96:6d:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65a665b90069bd71850602e7400c529793269e39
Validity
Not Before: Jun 13 05:00:40 2026 GMT
Not After : Jun 14 05:00:40 2026 GMT
Subject: CN=109af6d374a51db4d82eb9abe6dfe555d68d962d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b6:d8:2e:67:65:fc:69:9d:f6:1c:0d:40:55:
96:f6:6b:76:1f:bc:12:7f:a4:87:7b:c8:69:c2:02:
c4:50:27:2a:11:66:5d:a7:e6:42:74:dc:4f:e9:c5:
a7:e2:50:ed:07:e5:c4:1b:e5:14:00:48:72:15:e9:
7f:ca:40:ff:ee:b4:95:ef:2b:3a:58:04:87:24:4a:
cc:d6:bb:89:bd:83:50:73:ab:98:81:6c:30:f5:1c:
ca:0d:04:08:7f:6d:81:27:6e:ef:93:f7:d3:88:7f:
f4:12:40:a1:54:5b:44:1c:5c:72:c2:a2:93:a1:98:
cf:5e:f1:27:5f:c2:52:70:7b:f1:eb:9c:7e:82:0f:
e6:ce:54:59:ab:4b:ab:89:b4:bb:86:e9:13:75:fa:
3f:7c:e4:07:65:ea:82:81:83:2f:7c:ab:9f:54:67:
66:16:15:6d:af:77:c7:e1:b5:0b:d8:74:09:2e:27:
3c:c0:fc:58:33:ee:1a:b3:26:dd:d9:d0:ed:17:69:
65:0f:55:db:72:74:c7:a0:9b:66:55:ec:98:5b:43:
19:53:74:7c:cc:07:af:b2:a4:00:d1:37:c6:9f:b2:
9a:43:e5:05:f6:fc:96:b6:0c:cb:06:6f:99:a2:ca:
57:57:5f:66:0c:14:34:ef:21:b4:74:d0:85:9b:15:
35:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:9A:F6:D3:74:A5:1D:B4:D8:2E:B9:AB:E6:DF:E5:55:D6:8D:96:2D
X509v3 Authority Key Identifier:
keyid:65:A6:65:B9:00:69:BD:71:85:06:02:E7:40:0C:52:97:93:26:9E:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:04:d8:f7:03:86:51:91:6e:a4:eb:a2:06:00:56:35:5b:2d:
18:e9:4f:b1:00:54:c1:fa:0a:25:17:b9:a1:56:a6:e4:72:1e:
26:ce:b3:8e:71:ec:a7:cd:3e:84:0e:4a:b0:73:17:81:82:bc:
72:e4:8b:53:e8:95:80:d6:93:03:9e:85:51:9c:5c:50:fc:da:
df:5e:ee:34:d7:cd:24:b8:0f:66:42:c5:3f:62:04:46:99:bf:
a2:62:37:84:ce:59:f2:b5:1b:15:cc:b2:37:a7:63:56:2a:7c:
92:d5:66:45:2b:8e:dd:0b:ea:90:c4:28:60:c4:e9:12:a8:ba:
f2:83:e1:73:13:be:85:a8:ae:a3:57:29:2f:e1:c0:d0:29:4d:
a2:be:42:a1:bc:e2:a5:c2:e9:10:84:97:d9:00:51:0f:71:51:
38:44:00:60:41:18:e8:85:dd:2c:a5:da:4b:22:68:da:2e:2e:
8d:4f:86:17:fe:7a:b4:39:84:5e:c1:fd:d1:5b:d1:a7:6f:e9:
dc:b0:14:de:f3:33:61:13:33:c9:6b:fe:3b:27:ba:15:48:05:
bb:07:fb:f1:4c:59:3a:42:c4:23:ab:27:f5:53:f8:e0:77:ef:
7c:e8:2a:eb:f3:95:b6:dc:a4:31:da:6e:72:ba:62:90:a1:5f:
99:c6:35:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:40:49 2026 by rpki-client