Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/a8237d-1307-4dfb-aad6-f90b3e5493d4/1/z9LUeU5busDjTJ0BibJu8UcViiM.mft
File: z9LUeU5busDjTJ0BibJu8UcViiM.mft (raw, json)
Hash identifier: nyik6ZML2RCqhbFrBUTVxWu9/2de0h7ahaVBo3xhzDQ=
Subject key identifier: 40:4D:EC:58:08:7D:8B:E9:78:32:63:B2:DC:1A:B4:1C:16:E7:8E:4A
Authority key identifier: CF:D2:D4:79:4E:5B:BA:C0:E3:4C:9D:01:89:B2:6E:F1:47:15:8A:23
Certificate issuer: /CN=cfd2d4794e5bbac0e34c9d0189b26ef147158a23
Certificate serial: 019EBF9174FF9CCE9E1404B4324583646738
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z9LUeU5busDjTJ0BibJu8UcViiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/a8237d-1307-4dfb-aad6-f90b3e5493d4/1/z9LUeU5busDjTJ0BibJu8UcViiM.mft
Manifest number: 012C
Signing time: Sat 13 Jun 2026 06:00:41 +0000
Manifest this update: Sat 13 Jun 2026 06:00:41 +0000
Manifest next update: Sun 14 Jun 2026 06:00:41 +0000
Files and hashes: 1: A08V86u6Z7ZlsNbQDszl96zsAq8.asa (hash: ds8ayRG7Jxv34D7NOYLH1Q7+XouFY9M6hdJ1jR/ON+8=)
2: e9ESBbCpXLampxKyfROKHhSNrlQ.roa (hash: tD7v+u/DQGlM+A9s6n4BBi5LAYT9sFcm9HvPxsWUOOU=)
3: z9LUeU5busDjTJ0BibJu8UcViiM.crl (hash: b18wmKZJ3lsBesxGJtCGezMvsMuetPMOXBwZQrcAecQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/a8237d-1307-4dfb-aad6-f90b3e5493d4/1/z9LUeU5busDjTJ0BibJu8UcViiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/a8237d-1307-4dfb-aad6-f90b3e5493d4/1/z9LUeU5busDjTJ0BibJu8UcViiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/z9LUeU5busDjTJ0BibJu8UcViiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:91:74:ff:9c:ce:9e:14:04:b4:32:45:83:64:67:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfd2d4794e5bbac0e34c9d0189b26ef147158a23
Validity
Not Before: Jun 13 06:00:41 2026 GMT
Not After : Jun 14 06:00:41 2026 GMT
Subject: CN=404dec58087d8be9783263b2dc1ab41c16e78e4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:71:2f:ea:c6:1c:a2:97:d6:05:d3:57:c7:89:
d1:21:25:bf:1f:a6:cd:61:e1:a2:1c:de:09:79:a7:
69:2b:c1:bc:22:45:68:7f:d6:b2:64:2c:5a:29:ae:
37:42:58:d2:28:e5:49:9f:5c:68:c7:4a:cf:ea:cd:
d9:d7:1b:ff:b8:18:42:4c:83:f6:19:74:c7:54:1c:
73:75:50:f0:22:56:57:e2:74:bb:b6:41:aa:86:48:
a0:09:8f:42:f1:01:6d:59:9d:9d:ff:38:b2:ee:ea:
70:b5:40:51:97:f0:f3:5b:66:0f:9f:41:75:5e:1d:
7b:ee:c4:ea:7d:74:8d:38:dd:03:ea:42:5a:e3:e3:
74:13:98:27:6c:25:48:d9:18:00:7b:51:11:f2:d1:
db:04:c1:8c:3a:52:56:d7:56:1e:9c:54:b7:54:43:
f8:77:38:eb:ea:a6:fc:6a:30:c4:9b:ea:c3:80:0d:
b1:01:55:62:75:fd:72:3d:50:28:59:31:84:94:a0:
a2:28:17:29:2a:be:66:17:f9:c4:77:a0:3a:bf:1e:
a3:5d:85:bf:39:f4:e9:a6:f7:5c:5e:26:1b:75:44:
e9:3b:b2:df:e6:82:08:af:5a:ab:83:c1:8d:3d:48:
49:9d:d6:de:52:1d:04:e5:f4:79:9c:39:85:11:fc:
65:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:4D:EC:58:08:7D:8B:E9:78:32:63:B2:DC:1A:B4:1C:16:E7:8E:4A
X509v3 Authority Key Identifier:
keyid:CF:D2:D4:79:4E:5B:BA:C0:E3:4C:9D:01:89:B2:6E:F1:47:15:8A:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9LUeU5busDjTJ0BibJu8UcViiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/a8237d-1307-4dfb-aad6-f90b3e5493d4/1/z9LUeU5busDjTJ0BibJu8UcViiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/a8237d-1307-4dfb-aad6-f90b3e5493d4/1/z9LUeU5busDjTJ0BibJu8UcViiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:7b:8a:d0:db:8f:7b:d3:17:db:c0:51:f2:68:f4:c9:9c:44:
5e:fa:6b:5e:ef:79:70:4a:77:23:6d:74:3f:65:22:27:9e:ee:
2a:d8:38:87:70:5e:70:f7:a1:be:3d:9a:54:6b:fd:a1:87:0c:
60:64:ef:95:95:b3:b9:6d:61:7c:99:43:44:07:1d:9b:0d:ac:
5b:79:22:63:39:c9:2a:4f:e4:3d:a8:39:27:39:14:80:f3:cc:
72:3f:19:30:8a:d5:31:6c:fe:d7:77:7c:7f:0f:8f:a0:ce:f1:
6a:be:22:7d:73:40:cf:cb:25:77:2a:e3:b3:5d:36:55:83:c1:
23:db:72:cf:60:72:e3:49:17:21:53:9f:8c:5c:d8:7e:55:9d:
3e:c4:f1:1a:bf:dc:b1:81:09:f6:c4:01:aa:96:85:a3:26:47:
05:bb:ee:3a:94:e1:2f:c1:f1:63:7c:13:0b:2a:66:12:45:5b:
6c:a6:4c:d8:52:03:2b:df:4e:94:dc:b7:fa:cf:7a:b2:c2:fc:
79:51:77:a4:c1:27:d6:f5:27:46:1d:3f:e1:9f:ad:54:49:bf:
46:99:f9:9d:2e:c7:76:36:1e:e9:f7:6b:0b:b2:67:63:b7:3a:
21:f8:c9:d5:86:61:8d:de:02:fe:ca:89:15:89:d9:1b:61:7d:
5e:52:99:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/kXT/nM6eFAS0MkWDZGc4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmZDJkNDc5NGU1YmJhYzBlMzRjOWQwMTg5YjI2ZWYxNDcx
NThhMjMwHhcNMjYwNjEzMDYwMDQxWhcNMjYwNjE0MDYwMDQxWjAzMTEwLwYDVQQD
Eyg0MDRkZWM1ODA4N2Q4YmU5NzgzMjYzYjJkYzFhYjQxYzE2ZTc4ZTRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHEv6sYcopfWBdNXx4nRISW/H6bN
YeGiHN4JeadpK8G8IkVof9ayZCxaKa43QljSKOVJn1xox0rP6s3Z1xv/uBhCTIP2
GXTHVBxzdVDwIlZX4nS7tkGqhkigCY9C8QFtWZ2d/ziy7upwtUBRl/DzW2YPn0F1
Xh177sTqfXSNON0D6kJa4+N0E5gnbCVI2RgAe1ER8tHbBMGMOlJW11YenFS3VEP4
dzjr6qb8ajDEm+rDgA2xAVVidf1yPVAoWTGElKCiKBcpKr5mF/nEd6A6vx6jXYW/
OfTppvdcXiYbdUTpO7Lf5oIIr1qrg8GNPUhJndbeUh0E5fR5nDmFEfxleQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEBN7FgIfYvpeDJjstwatBwW545KMB8GA1UdIwQY
MBaAFM/S1HlOW7rA40ydAYmybvFHFYojMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejlMVWVVNWJ1c0RqVEowQmliSnU4VWNWaWlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9hODIzN2QtMTMwNy00ZGZiLWFhZDYt
ZjkwYjNlNTQ5M2Q0LzEvejlMVWVVNWJ1c0RqVEowQmliSnU4VWNWaWlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My9hODIzN2QtMTMwNy00ZGZiLWFhZDYtZjkwYjNlNTQ5M2Q0
LzEvejlMVWVVNWJ1c0RqVEowQmliSnU4VWNWaWlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZHuK0NuP
e9MX28BR8mj0yZxEXvprXu95cEp3I210P2UiJ57uKtg4h3BecPehvj2aVGv9oYcM
YGTvlZWzuW1hfJlDRAcdmw2sW3kiYznJKk/kPag5JzkUgPPMcj8ZMIrVMWz+13d8
fw+PoM7xar4ifXNAz8sldyrjs102VYPBI9tyz2By40kXIVOfjFzYflWdPsTxGr/c
sYEJ9sQBqpaFoyZHBbvuOpThL8HxY3wTCypmEkVbbKZM2FIDK99OlNy3+s96ssL8
eVF3pMEn1vUnRh0/4Z+tVEm/Rpn5nS7HdjYe6fdrC7JnY7c6IfjJ1YZhjd4C/sqJ
FYnZG2F9XlKZbg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:54:13 2026 by rpki-client