Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/zahD6BKxbexgu3CYykEzEX24R00.mft
File: zahD6BKxbexgu3CYykEzEX24R00.mft (raw, json)
Hash identifier: a/ZBlaiyOCPgUB2MAuQM7z4YurOtqbVI/QJ/IQnAUyM=
Subject key identifier: 79:4A:FB:E0:DF:B2:E3:62:0D:4A:29:16:59:F2:C8:55:4F:9E:2D:9C
Authority key identifier: CD:A8:43:E8:12:B1:6D:EC:60:BB:70:98:CA:41:33:11:7D:B8:47:4D
Certificate issuer: /CN=cda843e812b16dec60bb7098ca4133117db8474d
Certificate serial: 019EC224F34A579E91E9CF3FD5EF90B777B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zahD6BKxbexgu3CYykEzEX24R00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/zahD6BKxbexgu3CYykEzEX24R00.mft
Manifest number: 195C
Signing time: Sat 13 Jun 2026 18:01:01 +0000
Manifest this update: Sat 13 Jun 2026 18:01:01 +0000
Manifest next update: Sun 14 Jun 2026 18:01:01 +0000
Files and hashes: 1: xAJAqKl5Srwo2ARzZhLG6xPoMEY.roa (hash: zXin4xfG6I9ng2fyOSNQGYSR3toHXgB+MkkZOtI6MnY=)
2: zahD6BKxbexgu3CYykEzEX24R00.crl (hash: QXrMJEZi2nIOZHTD50AgAmZEnqm2WQ3cB60ljTzH8rA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/zahD6BKxbexgu3CYykEzEX24R00.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/zahD6BKxbexgu3CYykEzEX24R00.mft
rsync://rpki.ripe.net/repository/DEFAULT/zahD6BKxbexgu3CYykEzEX24R00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:24:f3:4a:57:9e:91:e9:cf:3f:d5:ef:90:b7:77:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cda843e812b16dec60bb7098ca4133117db8474d
Validity
Not Before: Jun 13 18:01:01 2026 GMT
Not After : Jun 14 18:01:01 2026 GMT
Subject: CN=794afbe0dfb2e3620d4a291659f2c8554f9e2d9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:f4:f3:2a:8d:29:3f:c9:bf:a6:82:2b:bb:6c:
39:45:6f:f9:33:81:28:43:21:fb:4f:50:f5:a6:e2:
5b:72:18:e6:5d:46:c7:5c:09:73:6e:4e:cd:f1:37:
6e:5f:fe:8b:d7:ff:ed:40:4b:19:85:0c:28:c6:13:
02:bf:77:31:41:82:97:b6:3d:c3:cb:2a:36:cb:69:
f3:f6:48:f9:8d:b9:f1:96:93:ae:9a:f9:b4:f8:b9:
50:04:6f:74:55:78:c3:5d:f2:6c:da:aa:aa:b3:72:
78:fb:14:06:35:8f:da:03:65:bf:fa:26:01:14:72:
49:9c:be:5e:9a:9f:6e:6f:84:dc:18:ea:c8:53:eb:
84:95:6c:57:ca:25:50:95:07:40:3b:47:65:8f:75:
ea:57:2c:b7:46:9c:a0:fa:57:38:4e:d4:f8:7a:13:
9a:d0:b6:1c:78:f3:e7:f2:1c:1d:44:5c:d8:17:2a:
48:96:3a:2e:92:46:57:ba:b4:34:3b:87:cc:26:21:
fb:ac:c2:1c:ce:5e:99:73:4f:51:9d:d4:a6:11:be:
9c:3a:ed:92:e3:ba:7f:e6:9a:39:0e:4f:e4:d6:8d:
ac:38:8d:5d:31:0c:5f:23:f8:94:d7:57:3b:27:a7:
81:45:e4:62:c4:b4:d1:e6:d0:12:bb:39:73:aa:31:
b4:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:4A:FB:E0:DF:B2:E3:62:0D:4A:29:16:59:F2:C8:55:4F:9E:2D:9C
X509v3 Authority Key Identifier:
keyid:CD:A8:43:E8:12:B1:6D:EC:60:BB:70:98:CA:41:33:11:7D:B8:47:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zahD6BKxbexgu3CYykEzEX24R00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/zahD6BKxbexgu3CYykEzEX24R00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/zahD6BKxbexgu3CYykEzEX24R00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:69:02:2b:ad:1e:a1:3d:05:09:61:b8:28:cf:e9:a6:82:61:
e5:ca:ef:5c:39:cd:81:2c:53:b4:cc:d9:73:ed:c9:58:cc:8d:
a2:02:b1:18:ee:8a:0b:1f:e6:a3:e8:e4:11:44:cf:18:6d:de:
02:11:c5:11:72:68:61:d9:62:0c:bf:93:74:71:ba:02:53:20:
69:db:53:08:91:e3:32:31:02:1b:35:cb:59:8c:78:aa:79:33:
c2:03:79:01:4c:96:9c:9e:c3:5c:e0:7c:94:75:26:f9:5f:ab:
a4:1a:e8:d7:29:9f:5d:c3:6d:23:27:bf:05:7d:38:1e:42:f1:
02:2d:ed:79:61:7f:03:31:99:2e:cf:ea:65:f0:45:f0:07:95:
d5:0c:4a:41:c2:e0:ed:e6:63:ed:ef:04:7d:07:eb:aa:b7:7e:
29:69:0f:82:db:0c:b8:c6:3a:ec:3d:3e:5b:bc:72:6d:60:63:
b8:f5:11:a4:9f:4b:99:14:b2:c2:1b:1b:7d:bb:06:2b:d2:cb:
97:f0:b7:f8:b4:34:21:97:8e:d2:f3:69:37:7e:ee:76:38:8e:
3a:38:6b:56:f6:21:5d:43:82:1d:b3:ca:b9:70:38:fe:f4:60:
68:f4:bd:1f:19:48:0c:c9:92:7c:51:eb:44:94:72:7f:02:bd:
59:2e:ff:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7CJPNKV56R6c8/1e+Qt3e2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkYTg0M2U4MTJiMTZkZWM2MGJiNzA5OGNhNDEzMzExN2Ri
ODQ3NGQwHhcNMjYwNjEzMTgwMTAxWhcNMjYwNjE0MTgwMTAxWjAzMTEwLwYDVQQD
Eyg3OTRhZmJlMGRmYjJlMzYyMGQ0YTI5MTY1OWYyYzg1NTRmOWUyZDljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4PTzKo0pP8m/poIru2w5RW/5M4Eo
QyH7T1D1puJbchjmXUbHXAlzbk7N8TduX/6L1//tQEsZhQwoxhMCv3cxQYKXtj3D
yyo2y2nz9kj5jbnxlpOumvm0+LlQBG90VXjDXfJs2qqqs3J4+xQGNY/aA2W/+iYB
FHJJnL5emp9ub4TcGOrIU+uElWxXyiVQlQdAO0dlj3XqVyy3Rpyg+lc4TtT4ehOa
0LYcePPn8hwdRFzYFypIljoukkZXurQ0O4fMJiH7rMIczl6Zc09RndSmEb6cOu2S
47p/5po5Dk/k1o2sOI1dMQxfI/iU11c7J6eBReRixLTR5tASuzlzqjG0fQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHlK++DfsuNiDUopFlnyyFVPni2cMB8GA1UdIwQY
MBaAFM2oQ+gSsW3sYLtwmMpBMxF9uEdNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemFoRDZCS3hiZXhndTNDWXlrRXpFWDI0UjAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC84ZWIzMmQtZjdlMy00YTljLWFhYTQt
ODQyMWQ3ODFiMDNiLzEvemFoRDZCS3hiZXhndTNDWXlrRXpFWDI0UjAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC84ZWIzMmQtZjdlMy00YTljLWFhYTQtODQyMWQ3ODFiMDNi
LzEvemFoRDZCS3hiZXhndTNDWXlrRXpFWDI0UjAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXmkCK60e
oT0FCWG4KM/ppoJh5crvXDnNgSxTtMzZc+3JWMyNogKxGO6KCx/mo+jkEUTPGG3e
AhHFEXJoYdliDL+TdHG6AlMgadtTCJHjMjECGzXLWYx4qnkzwgN5AUyWnJ7DXOB8
lHUm+V+rpBro1ymfXcNtIye/BX04HkLxAi3teWF/AzGZLs/qZfBF8AeV1QxKQcLg
7eZj7e8EfQfrqrd+KWkPgtsMuMY67D0+W7xybWBjuPURpJ9LmRSywhsbfbsGK9LL
l/C3+LQ0IZeO0vNpN37udjiOOjhrVvYhXUOCHbPKuXA4/vRgaPS9HxlIDMmSfFHr
RJRyfwK9WS7/KQ==
-----END CERTIFICATE-----
Generated at Sun Jun 14 02:15:30 2026 by rpki-client