Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.mft
File: zPmm0vbNWIp39CNiLmuNHGVLzfI.mft (raw, json)
Hash identifier: z0jYhSOfXUZwMYSR6BOGe/GIXPe+mBy305SiJBf/G2g=
Subject key identifier: 5A:89:2E:21:75:D1:67:A4:B1:C6:D7:D7:94:02:BA:E0:9A:CD:7C:71
Authority key identifier: CC:F9:A6:D2:F6:CD:58:8A:77:F4:23:62:2E:6B:8D:1C:65:4B:CD:F2
Certificate issuer: /CN=ccf9a6d2f6cd588a77f423622e6b8d1c654bcdf2
Certificate serial: 019ED42C27E2C6F52A04EC989080E2143006
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zPmm0vbNWIp39CNiLmuNHGVLzfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.mft
Manifest number: 1965
Signing time: Wed 17 Jun 2026 06:02:04 +0000
Manifest this update: Wed 17 Jun 2026 06:02:04 +0000
Manifest next update: Thu 18 Jun 2026 06:02:04 +0000
Files and hashes: 1: Utsq8tMmY3izY1fN7UB7ffBp7M0.roa (hash: kD7h2+kSGCGsnzgnalUMgkhy9wvQ1pxuWkQeWsMBxuE=)
2: qm3Y1xRAyMug1o4ZkPIWA5TQn1A.roa (hash: ah0q5b8U5QR+bHmaVCJCImjUhbJsUIFGC+OnAqXZW1w=)
3: zPmm0vbNWIp39CNiLmuNHGVLzfI.crl (hash: nQCsaKPSEbOEsm+xy1Z3//z5DPLEr7RvaaTFbB/kY+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zPmm0vbNWIp39CNiLmuNHGVLzfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 06:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d4:2c:27:e2:c6:f5:2a:04:ec:98:90:80:e2:14:30:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccf9a6d2f6cd588a77f423622e6b8d1c654bcdf2
Validity
Not Before: Jun 17 06:02:04 2026 GMT
Not After : Jun 18 06:02:04 2026 GMT
Subject: CN=5a892e2175d167a4b1c6d7d79402bae09acd7c71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:40:fc:e7:9c:b6:d6:6e:b3:6b:d2:6b:22:96:
33:2f:d2:7f:b4:2f:2b:3e:51:e8:31:18:01:2f:7f:
04:ff:0e:cd:36:ab:ef:94:88:33:32:93:3e:89:48:
c9:17:3c:c0:9f:7f:d2:8e:df:15:ab:e2:2a:38:80:
2b:fb:bb:d4:ad:18:38:d5:49:49:5f:3f:d7:65:24:
aa:9a:a9:80:b7:e9:24:61:3c:7c:3a:e1:69:8a:ab:
78:6c:c1:14:d6:b6:51:ef:d3:55:57:43:e0:31:74:
c7:4c:b3:05:4d:41:03:51:35:09:be:14:dc:32:2a:
41:bb:fc:29:65:27:c0:1f:10:52:eb:47:c3:6b:50:
71:51:b2:ad:47:5b:a6:b0:a4:db:0e:a8:89:50:14:
a0:59:64:03:5e:a3:aa:4b:1d:e5:af:6c:58:6c:78:
89:13:cb:75:13:38:a4:36:ee:2a:c5:ed:5d:97:0c:
6b:e5:5e:89:de:6b:ff:d3:c9:b0:46:cd:e9:46:54:
fd:aa:9c:7a:71:3a:32:dd:f2:0a:2e:68:35:2f:f0:
b0:a5:c3:06:f6:eb:3c:da:67:f3:05:f3:a6:ad:9d:
20:e3:95:de:a7:58:0f:c0:4b:1e:0e:ef:d1:43:52:
88:2a:7c:30:86:eb:d0:e7:cf:e6:83:2c:bb:f5:55:
17:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:89:2E:21:75:D1:67:A4:B1:C6:D7:D7:94:02:BA:E0:9A:CD:7C:71
X509v3 Authority Key Identifier:
keyid:CC:F9:A6:D2:F6:CD:58:8A:77:F4:23:62:2E:6B:8D:1C:65:4B:CD:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPmm0vbNWIp39CNiLmuNHGVLzfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:f8:46:b6:bc:b4:7f:71:95:5d:ed:7f:0a:66:f2:fa:f8:81:
6a:02:47:10:85:1b:02:ef:5b:89:a4:08:b8:41:bd:d6:9d:73:
ff:7a:b9:f8:cc:ce:5b:8b:c5:87:31:eb:13:01:6a:89:f5:83:
a2:db:55:ea:b3:a7:ec:bd:47:86:5d:fd:7c:ba:99:1e:02:74:
ae:c7:85:9c:be:04:e3:0c:c0:9d:d3:2e:5d:db:b4:3f:5a:70:
5e:9c:69:e9:a8:18:c2:cc:4f:84:6c:25:ab:bd:fb:20:bf:11:
3a:97:a2:94:06:05:02:4f:76:05:67:ae:15:3c:4b:4a:a1:05:
d0:30:70:e1:5a:e4:08:0c:94:a6:2e:cb:ca:0a:0a:41:75:fa:
c6:8f:12:52:47:d2:81:f7:1c:a8:29:d0:20:e5:15:e6:20:7e:
35:fb:18:98:eb:52:b6:53:2d:00:54:b4:f2:91:b6:9d:92:44:
91:94:6f:6d:15:7b:cc:c7:4c:cd:09:d9:e0:04:e8:78:13:74:
d1:77:76:7a:5d:5f:b5:c0:cf:56:c7:c0:71:4f:fb:97:28:16:
a9:4b:4d:b0:e7:3a:99:21:dc:1b:7a:ab:01:02:fe:d3:87:e6:
c5:91:6e:8a:ea:1a:43:99:41:cb:e3:be:24:b8:f7:d5:87:db:
7f:3a:eb:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:44:12 2026 by rpki-client