Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.mft
File: znGAxLrTz0JaUGcuHLep0qx44gw.mft (raw, json)
Hash identifier: aRcbwZHiThgnqK8+omquhA8APTXSy4aAzUZvtF/3bcs=
Subject key identifier: 72:AE:8D:12:0D:9C:15:FB:A1:86:0D:5B:C2:42:BA:BF:18:3B:03:B7
Authority key identifier: CE:71:80:C4:BA:D3:CF:42:5A:50:67:2E:1C:B7:A9:D2:AC:78:E2:0C
Certificate issuer: /CN=ce7180c4bad3cf425a50672e1cb7a9d2ac78e20c
Certificate serial: 019EC17FC8D5FCF052D8E5DD5988CFE53CBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/znGAxLrTz0JaUGcuHLep0qx44gw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.mft
Manifest number: 1602
Signing time: Sat 13 Jun 2026 15:00:37 +0000
Manifest this update: Sat 13 Jun 2026 15:00:37 +0000
Manifest next update: Sun 14 Jun 2026 15:00:37 +0000
Files and hashes: 1: CmEbUhenhDmMKvHKSkFpe9LG8X0.roa (hash: Jsb+hfYBWXp4dm2lj3dTAoFqYAK6O+6kl4dBC77ANZE=)
2: GtNJ0lmoQ9ZuqCpl3-J4Re7um1k.roa (hash: OD5qNfz5l9josRO/cRdoZZIkXHpha2NNc9udJTgh6/s=)
3: SQ9ZxRxAMd1xoAu9tA2c2yS9YUQ.roa (hash: MYiap9ADnfYQb/YwxbWyM4PVhhzPTbhg8edINlxn310=)
4: znGAxLrTz0JaUGcuHLep0qx44gw.crl (hash: I+eP4mTkJtnv24rdnl9T8/OFJEZRr8H4gaZuSDEiSn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.mft
rsync://rpki.ripe.net/repository/DEFAULT/znGAxLrTz0JaUGcuHLep0qx44gw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:7f:c8:d5:fc:f0:52:d8:e5:dd:59:88:cf:e5:3c:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce7180c4bad3cf425a50672e1cb7a9d2ac78e20c
Validity
Not Before: Jun 13 15:00:37 2026 GMT
Not After : Jun 14 15:00:37 2026 GMT
Subject: CN=72ae8d120d9c15fba1860d5bc242babf183b03b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c2:5b:38:9e:ec:6d:aa:52:e3:3d:81:88:56:
0e:77:d1:bf:8b:36:1b:bb:eb:a0:9b:b9:3a:8b:dc:
67:1a:57:2b:a2:5b:d4:4c:4c:89:54:92:0d:03:4f:
84:0f:0b:25:39:28:29:67:c9:65:12:ac:98:32:4c:
be:e4:aa:a8:b4:26:e1:56:6d:b1:3e:26:57:44:43:
ee:3e:82:4e:eb:4f:c4:1e:80:3c:4a:fd:d8:28:09:
e2:1b:32:34:b4:6a:f0:c4:10:a4:d3:09:2f:c5:9c:
b2:9f:fb:39:6d:82:b5:27:df:ee:ab:23:be:2a:23:
7c:12:6e:ce:19:5b:45:08:93:a1:d8:44:b6:e3:d4:
86:38:c8:e9:12:74:3d:cb:af:c4:a3:76:1d:2b:74:
da:7b:ab:46:8d:74:e9:e9:67:48:c5:91:12:1b:7c:
15:da:dc:74:de:9f:40:57:03:47:ae:e5:50:29:77:
50:5a:e9:98:b1:5c:0e:41:a8:b3:51:49:1e:a5:64:
3e:35:33:65:91:3c:36:51:2e:51:36:87:10:e8:de:
52:a1:0a:84:18:7a:e9:47:03:aa:6f:5b:17:6c:4d:
0f:ec:54:76:d9:05:01:58:17:16:37:93:44:31:80:
bf:c1:94:0a:12:0b:c8:b8:35:6f:03:f7:1f:1f:cc:
5b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:AE:8D:12:0D:9C:15:FB:A1:86:0D:5B:C2:42:BA:BF:18:3B:03:B7
X509v3 Authority Key Identifier:
keyid:CE:71:80:C4:BA:D3:CF:42:5A:50:67:2E:1C:B7:A9:D2:AC:78:E2:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znGAxLrTz0JaUGcuHLep0qx44gw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:93:28:6e:65:c5:9b:09:92:b7:46:6b:d5:7e:5c:32:3d:e6:
f1:c2:2a:93:95:ad:36:8a:53:3f:53:a1:69:fa:67:ec:57:90:
91:3c:b5:10:94:fc:aa:66:a1:83:57:74:cc:bd:40:be:1b:15:
e3:d0:d0:e6:92:17:da:aa:74:58:ec:70:66:45:7d:2c:ce:7e:
82:17:ba:4c:36:0a:cf:e5:4b:fc:c9:85:7d:30:e7:d1:5a:f7:
7c:4d:e6:09:bf:ed:ca:bc:df:95:45:43:35:d5:8d:11:76:74:
93:b5:43:b8:09:63:7a:52:2d:c4:86:40:8d:ea:51:86:bc:bc:
0e:28:12:74:13:0d:1c:44:b3:20:9c:25:9c:bf:c6:97:c8:11:
38:d5:92:d2:ef:cc:4e:09:db:16:0d:61:bd:b2:3d:6f:e7:97:
b3:66:1d:79:7a:2c:cb:a3:16:ec:f8:d0:cb:7b:27:23:d9:24:
e2:f6:71:17:87:a3:33:63:1a:43:a8:a0:c9:76:3a:bf:5a:51:
7b:35:57:4f:05:97:ad:84:dc:81:a4:94:10:99:16:be:8a:f1:
79:8f:c5:ae:40:42:8f:24:71:f2:29:89:54:42:e9:8c:b4:f8:
8c:83:5e:24:5e:8a:10:7c:e7:cd:2c:81:74:0f:dd:b4:b7:28:
42:52:32:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7Bf8jV/PBS2OXdWYjP5Ty9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlNzE4MGM0YmFkM2NmNDI1YTUwNjcyZTFjYjdhOWQyYWM3
OGUyMGMwHhcNMjYwNjEzMTUwMDM3WhcNMjYwNjE0MTUwMDM3WjAzMTEwLwYDVQQD
Eyg3MmFlOGQxMjBkOWMxNWZiYTE4NjBkNWJjMjQyYmFiZjE4M2IwM2I3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocJbOJ7sbapS4z2BiFYOd9G/izYb
u+ugm7k6i9xnGlcrolvUTEyJVJINA0+EDwslOSgpZ8llEqyYMky+5KqotCbhVm2x
PiZXREPuPoJO60/EHoA8Sv3YKAniGzI0tGrwxBCk0wkvxZyyn/s5bYK1J9/uqyO+
KiN8Em7OGVtFCJOh2ES249SGOMjpEnQ9y6/Eo3YdK3Tae6tGjXTp6WdIxZESG3wV
2tx03p9AVwNHruVQKXdQWumYsVwOQaizUUkepWQ+NTNlkTw2US5RNocQ6N5SoQqE
GHrpRwOqb1sXbE0P7FR22QUBWBcWN5NEMYC/wZQKEgvIuDVvA/cfH8xbxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHKujRINnBX7oYYNW8JCur8YOwO3MB8GA1UdIwQY
MBaAFM5xgMS6089CWlBnLhy3qdKseOIMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvem5HQXhMclR6MEphVUdjdUhMZXAwcXg0NGd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9kN2Q1Y2QtNzlhOS00YzgyLThmYzQt
MDQ2ZDJlMmFkY2Q1LzEvem5HQXhMclR6MEphVUdjdUhMZXAwcXg0NGd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC9kN2Q1Y2QtNzlhOS00YzgyLThmYzQtMDQ2ZDJlMmFkY2Q1
LzEvem5HQXhMclR6MEphVUdjdUhMZXAwcXg0NGd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWpMobmXF
mwmSt0Zr1X5cMj3m8cIqk5WtNopTP1Ohafpn7FeQkTy1EJT8qmahg1d0zL1AvhsV
49DQ5pIX2qp0WOxwZkV9LM5+ghe6TDYKz+VL/MmFfTDn0Vr3fE3mCb/tyrzflUVD
NdWNEXZ0k7VDuAljelItxIZAjepRhry8DigSdBMNHESzIJwlnL/Gl8gRONWS0u/M
TgnbFg1hvbI9b+eXs2YdeXosy6MW7PjQy3snI9kk4vZxF4ejM2MaQ6igyXY6v1pR
ezVXTwWXrYTcgaSUEJkWvorxeY/FrkBCjyRx8imJVELpjLT4jINeJF6KEHznzSyB
dA/dtLcoQlIyAQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 20:45:13 2026 by rpki-client