Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/35a9a6-60cd-4f24-8ef0-7dc69430d352/1/ZxzQcdyWC9yCmwvn40trYc-LCx4.mft
File: ZxzQcdyWC9yCmwvn40trYc-LCx4.mft (raw, json)
Hash identifier: BbY0J1e4v0+T5k4c4hOGXg3AbSCdC5fdeZmUPo7izxo=
Subject key identifier: 85:A1:2E:1D:50:B0:53:27:DC:B1:92:86:13:F1:E8:EE:52:E8:83:2B
Authority key identifier: 67:1C:D0:71:DC:96:0B:DC:82:9B:0B:E7:E3:4B:6B:61:CF:8B:0B:1E
Certificate issuer: /CN=671cd071dc960bdc829b0be7e34b6b61cf8b0b1e
Certificate serial: 019EC25BDF11A4E60070A58B0E5C0F0098B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZxzQcdyWC9yCmwvn40trYc-LCx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/35a9a6-60cd-4f24-8ef0-7dc69430d352/1/ZxzQcdyWC9yCmwvn40trYc-LCx4.mft
Manifest number: 0336
Signing time: Sat 13 Jun 2026 19:01:01 +0000
Manifest this update: Sat 13 Jun 2026 19:01:01 +0000
Manifest next update: Sun 14 Jun 2026 19:01:01 +0000
Files and hashes: 1: B0kj7SdwSZWmEU9GKPX-vqJAVao.roa (hash: UN4l73RmEx8CBEkdPrS/+GtzsuSkIQeGfMIfQBPpbKI=)
2: Mdx0wPKImju2r6Wn-sTkPv2XXCk.roa (hash: KkcVte1gTb6znaz/vnrVSs9UtNLYEStRQ8bGw7/kCho=)
3: ZxzQcdyWC9yCmwvn40trYc-LCx4.crl (hash: IGv75vC3pcCVy450nxswfWDTsdyXWfVCLdujBqeJDY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/35a9a6-60cd-4f24-8ef0-7dc69430d352/1/ZxzQcdyWC9yCmwvn40trYc-LCx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/35a9a6-60cd-4f24-8ef0-7dc69430d352/1/ZxzQcdyWC9yCmwvn40trYc-LCx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZxzQcdyWC9yCmwvn40trYc-LCx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:5b:df:11:a4:e6:00:70:a5:8b:0e:5c:0f:00:98:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=671cd071dc960bdc829b0be7e34b6b61cf8b0b1e
Validity
Not Before: Jun 13 19:01:01 2026 GMT
Not After : Jun 14 19:01:01 2026 GMT
Subject: CN=85a12e1d50b05327dcb1928613f1e8ee52e8832b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e7:73:79:fc:3b:e4:d4:5f:de:e0:aa:cf:46:
d1:ec:5d:ff:16:b5:c1:7f:64:7d:1c:9d:9f:34:4d:
97:cc:d6:91:23:22:f0:b3:7a:fc:70:bc:0a:e6:36:
ee:f5:fb:36:28:13:db:29:96:47:6f:c8:11:9c:79:
7d:62:6f:96:59:7c:a6:b6:a0:f1:69:8d:3a:aa:0c:
1b:93:0a:68:91:e6:75:c7:20:1f:a4:6a:6e:86:23:
a1:28:dd:17:44:68:2c:f0:51:32:e2:c1:be:fe:7b:
47:09:c3:42:35:77:89:49:1b:4d:5c:1b:f4:fa:45:
dc:a8:23:f7:70:ba:69:0d:27:2f:27:2b:14:0e:1b:
59:a6:27:e5:2d:5f:45:bd:bc:10:00:42:eb:0e:8f:
ee:d4:9e:4d:a2:50:28:ab:d4:ad:4d:c4:bd:3d:67:
c8:18:1b:8e:1f:ce:da:7e:39:82:73:a2:1f:63:08:
4a:7f:fe:7a:e1:a7:79:ce:93:4a:e1:fa:09:64:35:
dc:b2:d1:10:4a:ee:fb:1e:e2:ac:69:c2:0a:30:a4:
2c:f7:b1:6a:0e:87:76:d5:d4:1f:de:f8:62:32:5c:
bb:69:12:2a:7e:6c:dd:55:ca:0a:21:8d:f6:e0:e6:
7f:0c:a6:74:84:4c:09:44:ba:ea:3d:91:20:db:6c:
dd:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:A1:2E:1D:50:B0:53:27:DC:B1:92:86:13:F1:E8:EE:52:E8:83:2B
X509v3 Authority Key Identifier:
keyid:67:1C:D0:71:DC:96:0B:DC:82:9B:0B:E7:E3:4B:6B:61:CF:8B:0B:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZxzQcdyWC9yCmwvn40trYc-LCx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/35a9a6-60cd-4f24-8ef0-7dc69430d352/1/ZxzQcdyWC9yCmwvn40trYc-LCx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/35a9a6-60cd-4f24-8ef0-7dc69430d352/1/ZxzQcdyWC9yCmwvn40trYc-LCx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:60:17:7c:32:c9:69:b5:40:b4:35:99:7e:cf:80:99:67:f8:
4d:ca:5b:d7:a3:f5:2e:1d:c2:25:00:39:08:b6:bb:9f:06:be:
67:72:06:10:3e:1e:b3:f5:3b:68:91:14:11:73:27:66:9d:05:
8a:d2:29:c3:41:cc:ef:35:67:4f:79:30:43:72:80:a6:ba:80:
e7:81:ab:f3:a8:9b:1c:bb:16:ac:88:c7:0d:6a:19:b2:93:5a:
cc:06:9a:bd:fd:7f:3e:0b:51:86:23:f8:ed:08:34:66:e8:a9:
47:8c:97:76:89:bf:69:59:01:c2:78:48:2b:ba:83:7d:79:cc:
94:e1:d9:04:0e:43:b5:10:f5:09:f2:90:cf:51:cd:6a:8b:57:
2d:b0:14:89:ce:c1:4d:ad:ce:39:d7:1f:c7:8f:9d:0b:00:a5:
ec:fe:c9:d1:f1:c8:67:09:7a:7f:f5:bc:a7:3e:17:80:62:c6:
04:e6:e6:5d:94:6b:19:c7:0d:3c:44:bb:51:ae:9e:f7:2b:b4:
82:2b:7e:20:cc:24:45:ed:ec:31:ff:2e:7a:d5:63:1a:16:49:
b0:3c:4f:f2:ee:5b:3f:fa:ed:ef:67:53:89:76:af:bf:82:e5:
af:05:8f:d6:d2:e0:5e:30:59:64:a8:c5:fc:c0:82:f4:9e:2f:
f3:dd:ce:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:44:50 2026 by rpki-client