Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.mft
File: ZYFndLfFZl1nqGwgzrZIe1t4s40.mft (raw, json)
Hash identifier: 8dSWLw6QTc6UDj2OV18/WtV+iPz9dnB9Cnc4fM1Qt/I=
Subject key identifier: F5:57:69:E0:71:0E:51:0F:B5:21:A0:57:B3:8F:7E:04:56:C6:8E:4C
Authority key identifier: 65:81:67:74:B7:C5:66:5D:67:A8:6C:20:CE:B6:48:7B:5B:78:B3:8D
Certificate issuer: /CN=65816774b7c5665d67a86c20ceb6487b5b78b38d
Certificate serial: 019EC1B66E22A506EE23A2A3EDE68BD779B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZYFndLfFZl1nqGwgzrZIe1t4s40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.mft
Manifest number: 1964
Signing time: Sat 13 Jun 2026 16:00:18 +0000
Manifest this update: Sat 13 Jun 2026 16:00:18 +0000
Manifest next update: Sun 14 Jun 2026 16:00:18 +0000
Files and hashes: 1: 1-hd-jGZ4MVZi47nPzXJSf7Lg4GU.roa (hash: Zdx22tTGOTuJxXlStTXGJ2H5gGzDrcZyL0B14W8hVh0=)
2: 2aoGpLTGgK9wzCk0NHOhSBbwi24.roa (hash: CXhLfyqzlLn95FrK9zjRoOjfQ+gMogkZUp2jk/vKqTo=)
3: 6DeN01ACaOk4UT4cNyp6go_l9cA.roa (hash: Tnr/zZaEXUElLJBlgdEv3aoEsmGDmbMF/eY6+kGdmsE=)
4: G-aVVHLMC99yYOkBY3QkMmE3DqY.roa (hash: fvB74CE0O3+aj6NhVlobrpzhtdxqjyZg+fgfBzqKZNg=)
5: HWvGRqMe27--NoC2Dyw8FKUNjHk.roa (hash: ycBN27AOuQt6gtV2gw83af0DBTats6sXAt4skvhgHcE=)
6: JAPut0UfxbemMj59AxqmwrRJ0Ls.roa (hash: 0o1Sw2aOg/g6GSUlci0ay0W5MyPhGrJoF8RlAJMyZz4=)
7: ZYFndLfFZl1nqGwgzrZIe1t4s40.crl (hash: /LRfg2R/pFtumNZEDIPuNlSNpvbgRP2F1BbVjoREHWg=)
8: qSsf5vEudpSeKXdovHkXjheUpNQ.roa (hash: lDG010Lrz1cwQmsgQKn3qDK0y/5g/pHYKd0HNTHtbvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZYFndLfFZl1nqGwgzrZIe1t4s40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 16:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:b6:6e:22:a5:06:ee:23:a2:a3:ed:e6:8b:d7:79:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65816774b7c5665d67a86c20ceb6487b5b78b38d
Validity
Not Before: Jun 13 16:00:18 2026 GMT
Not After : Jun 14 16:00:18 2026 GMT
Subject: CN=f55769e0710e510fb521a057b38f7e0456c68e4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:bd:45:a3:ea:ac:df:d0:59:8f:cb:ba:b5:9d:
60:d0:41:18:2c:17:20:f2:55:1b:59:ab:c8:06:ed:
9a:80:70:da:f6:2d:96:8c:24:14:ac:55:f3:05:88:
51:fc:46:18:3c:33:a0:a5:24:ea:64:65:41:bf:fd:
10:ac:f8:89:64:c0:ea:29:78:dc:c6:37:09:f8:38:
70:59:cc:41:0f:bc:1f:0b:a7:90:1e:67:9e:43:c9:
fb:aa:7a:d5:c1:14:d0:ae:ad:5d:58:03:15:82:66:
9d:4c:8d:9a:4b:31:5d:89:3d:0f:12:7b:6a:d3:b6:
4e:53:0c:cd:87:af:4c:c8:c3:d5:87:e7:16:75:2d:
a4:e7:78:8e:a2:25:d2:ac:55:6d:ca:6e:6a:fc:fa:
68:76:8b:53:52:47:07:54:2a:94:22:15:cf:50:a8:
c8:7a:10:b2:43:24:79:f2:c0:96:92:41:72:d5:0c:
9a:3b:1c:e0:84:2f:24:b6:e8:fe:10:01:84:e5:5f:
89:2f:3b:e3:74:3d:91:f9:b4:9b:58:bd:aa:90:f5:
52:19:f4:2f:36:8d:58:7b:db:d6:7a:e4:70:a5:9f:
e1:a7:d4:8d:fd:f8:5d:43:d9:15:78:08:77:68:15:
48:90:0e:60:98:37:09:4f:5d:69:b2:4c:12:37:1f:
bf:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:57:69:E0:71:0E:51:0F:B5:21:A0:57:B3:8F:7E:04:56:C6:8E:4C
X509v3 Authority Key Identifier:
keyid:65:81:67:74:B7:C5:66:5D:67:A8:6C:20:CE:B6:48:7B:5B:78:B3:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZYFndLfFZl1nqGwgzrZIe1t4s40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:41:70:09:df:4c:81:6f:70:1e:2e:00:59:c7:35:68:38:6f:
23:32:ae:65:0d:73:d7:80:66:c6:ff:af:7b:7e:66:35:e0:b2:
8a:16:4f:04:d8:13:11:73:e0:82:d8:9f:82:09:f8:6c:58:f3:
6f:e1:67:1e:fb:0d:f7:26:84:c9:6b:dc:12:bd:e9:0f:2c:df:
54:1c:be:fe:f9:9a:1e:4e:14:c1:87:7d:0a:91:96:88:c8:71:
7a:97:0b:e7:8f:fb:30:57:75:94:67:89:a9:35:83:80:a5:4b:
7e:5e:af:1a:66:3f:19:bf:55:7f:b7:f9:e6:80:6c:03:6e:cf:
68:99:df:79:39:d0:0c:45:1a:cf:6b:95:bc:1d:3d:78:ed:22:
93:99:b1:89:ad:75:d9:9f:25:64:be:aa:2c:c5:8f:bc:8f:d5:
67:7b:0d:e4:7e:88:83:f5:37:56:92:68:e1:77:45:45:1b:7d:
bf:8c:f8:b8:59:04:f7:33:ed:3a:87:4c:1e:f7:76:60:0b:a5:
45:9a:25:41:fd:28:3d:74:8d:3a:e3:6d:1b:3a:61:37:19:fb:
60:db:64:63:8f:bc:54:15:d2:bb:38:c0:54:74:94:ea:cc:7d:
6e:9e:b3:63:f6:05:a8:d7:1a:c2:69:18:75:3d:e1:75:19:11:
eb:19:49:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:11:25 2026 by rpki-client