Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/zahD6BKxbexgu3CYykEzEX24R00.mft
File: zahD6BKxbexgu3CYykEzEX24R00.mft (raw, json)
Hash identifier: v6JeGpy3UKT1M5RO49GkIVlhtf6nhYlRslEHRSBu2w4=
Subject key identifier: 6A:7C:4A:FB:34:8C:7B:CD:1F:5F:73:C4:8D:1A:B5:29:4F:E8:6E:49
Authority key identifier: CD:A8:43:E8:12:B1:6D:EC:60:BB:70:98:CA:41:33:11:7D:B8:47:4D
Certificate issuer: /CN=cda843e812b16dec60bb7098ca4133117db8474d
Certificate serial: 019EBE4838ABC02508A92CA0B1030DF88547
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zahD6BKxbexgu3CYykEzEX24R00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/zahD6BKxbexgu3CYykEzEX24R00.mft
Manifest number: 195A
Signing time: Sat 13 Jun 2026 00:01:04 +0000
Manifest this update: Sat 13 Jun 2026 00:01:04 +0000
Manifest next update: Sun 14 Jun 2026 00:01:04 +0000
Files and hashes: 1: xAJAqKl5Srwo2ARzZhLG6xPoMEY.roa (hash: zXin4xfG6I9ng2fyOSNQGYSR3toHXgB+MkkZOtI6MnY=)
2: zahD6BKxbexgu3CYykEzEX24R00.crl (hash: ddnyYi203087onsci12gv+RS5gTiKWVKmgovQcOSl34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/zahD6BKxbexgu3CYykEzEX24R00.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/zahD6BKxbexgu3CYykEzEX24R00.mft
rsync://rpki.ripe.net/repository/DEFAULT/zahD6BKxbexgu3CYykEzEX24R00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 00:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:48:38:ab:c0:25:08:a9:2c:a0:b1:03:0d:f8:85:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cda843e812b16dec60bb7098ca4133117db8474d
Validity
Not Before: Jun 13 00:01:04 2026 GMT
Not After : Jun 14 00:01:04 2026 GMT
Subject: CN=6a7c4afb348c7bcd1f5f73c48d1ab5294fe86e49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e1:91:3d:26:04:e1:8a:73:dc:89:5a:dc:1a:
5d:51:52:a4:e8:dc:f5:5c:bd:bd:39:9c:b2:fb:7a:
30:82:74:d1:b9:2f:ee:59:22:24:0b:a0:d0:da:d9:
f9:b3:c8:16:8b:c6:03:3f:c9:c7:c5:32:2f:16:ae:
c2:5b:fd:b9:12:2a:37:8f:d0:0d:29:ab:fb:7a:3d:
ae:c9:e8:06:f0:3c:b5:ea:a5:19:68:de:af:fa:b3:
84:1f:ae:0d:51:36:7b:92:14:49:df:f1:c8:26:0b:
82:e3:e7:bf:9b:ab:c7:4d:61:97:b1:85:98:87:9d:
0c:44:79:52:b5:60:3c:b4:02:28:18:c6:9d:c6:33:
62:57:fa:98:42:04:77:97:f4:b1:4f:cc:f2:6a:f3:
fe:80:6a:24:db:bc:0b:78:20:33:b6:d8:95:bf:25:
15:7c:bc:8d:ac:62:53:b9:c3:a3:ee:91:34:8f:c2:
09:77:df:c1:67:e6:1c:df:00:dd:ee:39:db:06:04:
6c:54:73:34:3a:90:c1:fa:e5:a8:ea:5b:a2:ea:de:
28:b8:4b:8e:76:80:8e:c8:2a:fb:b8:82:aa:a5:53:
57:3b:7a:f2:6f:05:05:99:ed:00:cd:1f:d7:1f:ce:
a7:e5:ed:d7:e8:17:27:2a:1b:62:9f:b0:9a:00:fb:
ac:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:7C:4A:FB:34:8C:7B:CD:1F:5F:73:C4:8D:1A:B5:29:4F:E8:6E:49
X509v3 Authority Key Identifier:
keyid:CD:A8:43:E8:12:B1:6D:EC:60:BB:70:98:CA:41:33:11:7D:B8:47:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zahD6BKxbexgu3CYykEzEX24R00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/zahD6BKxbexgu3CYykEzEX24R00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/zahD6BKxbexgu3CYykEzEX24R00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:75:ae:f9:34:5f:0e:fd:53:e8:d0:82:6b:c4:53:4f:07:08:
7e:61:06:67:a7:1a:c1:25:75:cd:9f:10:a6:99:94:5e:35:aa:
49:9c:bf:a0:37:73:8d:38:35:cf:da:70:ef:28:57:59:59:81:
d3:f7:c4:e7:63:66:1a:42:1f:4c:cc:9f:2b:92:cd:a0:17:3c:
ca:1b:4e:7c:82:76:bf:ef:ea:f7:cc:2b:68:4b:b1:2a:70:45:
06:aa:a3:92:b0:3f:c7:ab:51:73:0b:65:e6:3d:88:cf:93:e2:
73:1c:19:d6:c3:0b:a0:56:a1:47:79:90:d6:d9:12:aa:af:7e:
8e:ae:ac:36:b0:2e:34:18:19:36:c4:72:33:54:f1:34:98:cb:
9b:f8:83:4f:79:b1:7a:cc:19:bb:5c:4e:ce:60:2c:5e:10:ae:
dd:d0:cb:bd:36:c9:3c:9c:3e:8f:c1:6a:92:dd:72:60:ba:41:
f8:36:b1:49:57:56:78:bb:4d:a6:73:36:62:da:b7:a7:56:f0:
13:fc:51:0f:b1:86:ad:86:12:17:36:8e:91:e2:48:e4:b0:bd:
ae:15:82:f4:5a:90:b4:9c:1b:2b:22:e8:7d:6f:0e:46:c5:ea:
7d:39:fc:61:ed:a2:cb:41:f2:69:31:45:07:d5:fe:74:fb:aa:
a8:3b:8f:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:34:57 2026 by rpki-client