Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.mft
File: z9s9kEs0RAVGtiQdeJTZMwC8vSg.mft (raw, json)
Hash identifier: wq+Zb2MPp8lqU5iW/QopzQ92MwGeQvMQuXSckRezZW0=
Subject key identifier: 06:7C:0D:1C:A1:5D:49:39:65:5D:FA:50:7E:48:0A:42:B5:B1:38:63
Authority key identifier: CF:DB:3D:90:4B:34:44:05:46:B6:24:1D:78:94:D9:33:00:BC:BD:28
Certificate issuer: /CN=cfdb3d904b34440546b6241d7894d93300bcbd28
Certificate serial: 019EC25BD2B00C8EDE94377AE782633C9107
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z9s9kEs0RAVGtiQdeJTZMwC8vSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.mft
Manifest number: 0FF8
Signing time: Sat 13 Jun 2026 19:00:58 +0000
Manifest this update: Sat 13 Jun 2026 19:00:58 +0000
Manifest next update: Sun 14 Jun 2026 19:00:58 +0000
Files and hashes: 1: BcIjFBUMP6CBeWgUBi0kiP8mMD4.roa (hash: AnrLYQrWg/R3TPt/tXnLy7bKSyCDh8qfOknLsoHKVr0=)
2: tt8_4epx4fUU-t0TnlM9j9Sy8Gc.roa (hash: LFx80Ot89ti4/nAcgN280XkSiewCdAO+iihbkS/s85Y=)
3: z9s9kEs0RAVGtiQdeJTZMwC8vSg.crl (hash: NV2ZGJLspbRlmb4c5JDWSd2ry6o5SQxqy2fF0C6MSOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/z9s9kEs0RAVGtiQdeJTZMwC8vSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 19:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:5b:d2:b0:0c:8e:de:94:37:7a:e7:82:63:3c:91:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfdb3d904b34440546b6241d7894d93300bcbd28
Validity
Not Before: Jun 13 19:00:58 2026 GMT
Not After : Jun 14 19:00:58 2026 GMT
Subject: CN=067c0d1ca15d4939655dfa507e480a42b5b13863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4c:9e:99:7d:8c:6b:26:09:05:7c:ae:ff:52:
07:b6:78:f5:53:b0:c2:6b:67:ee:c3:3f:75:36:2c:
76:8e:af:84:3b:46:09:10:a3:82:83:0b:e4:e9:d7:
85:33:29:4f:02:41:14:ba:27:e6:17:89:3f:a3:02:
54:bb:da:09:b0:3f:b1:ee:f2:ea:93:d3:62:cc:52:
34:14:fe:17:bb:6a:d4:d8:59:c1:a6:73:3f:75:05:
43:a9:54:c3:75:52:bd:14:70:5d:35:af:91:88:15:
3f:8d:42:36:cc:b1:85:d8:d9:af:0a:c6:a6:d2:ed:
2e:da:05:d8:0a:61:e6:3d:00:9f:73:44:26:d2:d2:
ea:2d:d6:fd:09:bd:1b:65:bf:ad:47:7c:93:74:b5:
32:25:dd:85:86:49:f7:29:27:f8:d0:8e:24:b6:7b:
6e:3c:41:0c:3d:bb:b5:ba:a4:f8:33:44:6e:85:8f:
f6:23:90:69:1a:26:3b:42:01:41:cc:54:9b:75:19:
c3:af:93:b0:10:0a:8b:5f:c4:38:4b:43:f4:b1:4e:
f5:00:f0:48:83:53:4b:eb:79:b8:1c:90:ee:e5:a0:
94:0f:da:14:f2:2c:03:e9:91:f4:68:e4:ad:e1:99:
7f:30:09:0c:47:64:e0:72:27:15:de:40:b5:b4:d8:
e7:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:7C:0D:1C:A1:5D:49:39:65:5D:FA:50:7E:48:0A:42:B5:B1:38:63
X509v3 Authority Key Identifier:
keyid:CF:DB:3D:90:4B:34:44:05:46:B6:24:1D:78:94:D9:33:00:BC:BD:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9s9kEs0RAVGtiQdeJTZMwC8vSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:b2:4a:06:90:85:87:07:b7:85:61:7a:65:b1:bb:53:d0:3d:
90:41:46:1c:02:01:b3:47:1a:98:db:31:13:50:2e:58:c2:70:
b1:d2:bb:ff:0e:87:55:e6:53:71:70:2f:11:81:f1:21:d5:b4:
70:2c:e1:1c:f1:3a:50:0b:6e:b4:97:73:e8:50:0c:fd:5f:b3:
34:25:4e:f5:9f:d3:a1:67:63:31:89:ff:3d:79:93:15:bb:5f:
df:20:46:a0:18:c0:da:7b:66:68:88:fd:ce:fd:b5:ee:24:21:
37:42:63:57:f5:b5:2a:44:f2:9a:26:eb:86:18:94:e7:c0:f4:
6b:33:1b:66:6d:ed:3d:ce:d7:f0:49:8f:f1:bb:09:fa:ef:7d:
83:42:65:cd:2c:e0:4d:e9:93:2f:9d:bc:33:ed:1d:6c:28:04:
34:b5:e3:d3:56:0b:7c:dc:68:fe:18:e0:27:ed:71:ca:22:b2:
62:89:85:ad:f2:cc:61:ee:82:19:3d:1f:ea:cc:9c:94:6f:01:
35:34:a3:cc:b9:ee:5c:30:46:e4:79:27:8f:b5:99:e5:a3:53:
57:d1:71:a2:e2:ac:3d:dd:55:63:49:4e:6c:98:c4:e6:35:8e:
45:4a:49:e1:8f:3f:6e:2d:f8:d3:53:75:a3:2b:95:13:86:93:
dd:a0:fa:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:25:19 2026 by rpki-client