Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/999647-1e7f-499b-9d48-f950327f88d3/1/zvUB0tBSGF1PZWkhjCi_NYWQAPw.mft
File: zvUB0tBSGF1PZWkhjCi_NYWQAPw.mft (raw, json)
Hash identifier: +XSDw8vn/4hnEC2aHrVSUi13uK/1pkbQhlGmeEXiJ2I=
Subject key identifier: F0:AE:25:EC:46:F6:F8:7D:D4:47:1B:A0:DB:58:E7:4E:4E:BE:57:48
Authority key identifier: CE:F5:01:D2:D0:52:18:5D:4F:65:69:21:8C:28:BF:35:85:90:00:FC
Certificate issuer: /CN=cef501d2d052185d4f6569218c28bf35859000fc
Certificate serial: 019EC2C98EEA18AC96629DAD4CDDAD8E3C95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvUB0tBSGF1PZWkhjCi_NYWQAPw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/999647-1e7f-499b-9d48-f950327f88d3/1/zvUB0tBSGF1PZWkhjCi_NYWQAPw.mft
Manifest number: 020D
Signing time: Sat 13 Jun 2026 21:00:49 +0000
Manifest this update: Sat 13 Jun 2026 21:00:49 +0000
Manifest next update: Sun 14 Jun 2026 21:00:49 +0000
Files and hashes: 1: VtiYaN97FHtpr9nyOV9FFG85g5o.roa (hash: YRi8yVEk1+9sLs2A+db3vBfa8pzorD5js8IjbX492Nk=)
2: gIvmrtP4qhP-p_HNvQknynsugUc.roa (hash: T7F6BSJaNt+yN8P1agGWT43ZlvcgWoTw7wuq3mofmEI=)
3: zvUB0tBSGF1PZWkhjCi_NYWQAPw.crl (hash: E86M1MBA4gBfKi6UXiLAOsiUMqRN211cEGJrM/z9P+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/999647-1e7f-499b-9d48-f950327f88d3/1/zvUB0tBSGF1PZWkhjCi_NYWQAPw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/999647-1e7f-499b-9d48-f950327f88d3/1/zvUB0tBSGF1PZWkhjCi_NYWQAPw.mft
rsync://rpki.ripe.net/repository/DEFAULT/zvUB0tBSGF1PZWkhjCi_NYWQAPw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:c9:8e:ea:18:ac:96:62:9d:ad:4c:dd:ad:8e:3c:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cef501d2d052185d4f6569218c28bf35859000fc
Validity
Not Before: Jun 13 21:00:49 2026 GMT
Not After : Jun 14 21:00:49 2026 GMT
Subject: CN=f0ae25ec46f6f87dd4471ba0db58e74e4ebe5748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:3e:93:d9:33:c5:93:93:51:10:eb:5f:5c:fd:
b7:dc:96:c1:56:c1:38:eb:ae:b9:22:ea:df:09:5c:
d1:92:37:83:db:e5:6c:51:ac:d5:c9:99:a2:81:b8:
79:78:a1:ab:d8:87:03:95:5e:19:4b:d5:c7:19:67:
23:ec:b9:56:4c:1d:5e:61:9a:2f:0b:ab:94:ce:76:
e0:6d:fb:17:99:05:a8:46:54:d3:91:ee:9f:60:fd:
5e:5b:4c:8b:0e:5a:e3:c8:da:5b:a0:ef:d1:97:9e:
71:5c:14:17:d1:4f:bd:de:79:a9:f6:1a:14:27:64:
1f:a5:66:79:9b:48:98:40:8b:a3:de:2e:3e:9f:bf:
ef:9e:6e:9c:28:af:4d:b8:32:ff:20:77:09:4d:36:
c3:ce:f2:75:3a:45:08:0f:35:cb:67:c8:dc:97:12:
ba:e8:0f:ed:85:6a:82:50:0e:4a:d2:a4:bd:23:db:
9a:41:1f:3d:d6:61:1f:b5:13:71:00:45:29:37:28:
b9:77:df:1e:f3:65:b5:9c:18:0e:59:ed:4c:31:b6:
54:11:c8:09:d2:9b:49:c3:0b:19:e4:22:ad:b0:70:
db:67:bb:5f:97:0a:1c:25:08:5c:48:f1:9b:58:68:
27:40:72:2b:6d:99:59:fd:1d:d7:1f:02:5c:89:cc:
4e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:AE:25:EC:46:F6:F8:7D:D4:47:1B:A0:DB:58:E7:4E:4E:BE:57:48
X509v3 Authority Key Identifier:
keyid:CE:F5:01:D2:D0:52:18:5D:4F:65:69:21:8C:28:BF:35:85:90:00:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvUB0tBSGF1PZWkhjCi_NYWQAPw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/999647-1e7f-499b-9d48-f950327f88d3/1/zvUB0tBSGF1PZWkhjCi_NYWQAPw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/999647-1e7f-499b-9d48-f950327f88d3/1/zvUB0tBSGF1PZWkhjCi_NYWQAPw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:7c:43:f6:0d:cc:a9:3d:30:63:0a:d5:16:1a:d7:36:33:2d:
6a:11:25:d8:7d:aa:96:c5:2e:72:5b:77:87:48:47:2e:02:b2:
5b:a2:4c:fa:d8:91:f8:4b:ca:0b:12:02:0b:a8:83:a9:78:50:
ec:70:78:c7:c0:99:1b:d7:11:af:f5:30:23:85:ca:6f:f4:0b:
7c:75:87:72:de:2e:6e:34:6e:79:df:aa:23:38:6b:ed:a1:70:
7c:26:6b:25:c8:52:13:66:3c:0a:a5:20:04:18:19:83:42:fd:
fd:17:8e:c3:a6:40:14:be:39:3a:7d:5b:f3:e6:d0:0b:f1:1d:
9b:87:aa:4c:39:21:bc:ef:c5:e0:29:2a:97:d0:16:74:27:55:
c9:9d:29:ee:ed:17:8e:26:1b:9c:86:22:47:a0:a2:36:92:c1:
9f:6d:f0:45:20:8e:ae:43:3e:e5:2e:d5:c7:f4:28:60:a6:4c:
7f:fb:bb:e8:f7:d4:68:9a:9d:64:16:6a:df:43:d5:ee:0a:57:
26:3e:0c:9d:4a:9e:10:64:a2:99:a4:38:68:77:e1:3d:3c:62:
97:29:b6:6a:21:4a:3c:86:87:6d:42:3a:4e:4a:fb:c1:bf:f5:
cf:fb:c9:c4:b4:59:47:31:02:ac:17:96:58:d5:e0:f4:d8:69:
c3:ae:e8:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:30:50 2026 by rpki-client