Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/208623-268c-4bf6-b947-f459235d987b/1/zPae-KVIMMWntjeJH8PJCrEsung.mft
File: zPae-KVIMMWntjeJH8PJCrEsung.mft (raw, json)
Hash identifier: RbbFRnHoNtK3miPqPxcwN42sm9Nb/SNz5RAmNbvCVUA=
Subject key identifier: B9:03:8C:AF:F9:A0:46:2E:BA:9E:A6:2B:37:DF:EE:82:F8:57:84:34
Authority key identifier: CC:F6:9E:F8:A5:48:30:C5:A7:B6:37:89:1F:C3:C9:0A:B1:2C:BA:78
Certificate issuer: /CN=ccf69ef8a54830c5a7b637891fc3c90ab12cba78
Certificate serial: 019EC3A55BFDA7131796B98ECF127A361B1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zPae-KVIMMWntjeJH8PJCrEsung.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/208623-268c-4bf6-b947-f459235d987b/1/zPae-KVIMMWntjeJH8PJCrEsung.mft
Manifest number: 038A
Signing time: Sun 14 Jun 2026 01:00:54 +0000
Manifest this update: Sun 14 Jun 2026 01:00:54 +0000
Manifest next update: Mon 15 Jun 2026 01:00:54 +0000
Files and hashes: 1: SMSEOT3Bw8BdVDxGYRzfDIZdEU0.roa (hash: Q+jvQC3Cp7YojEH0cGPSd1xy7T9E3c9+3+jfE13JjeY=)
2: g8Z517-jOmVF6Xu2Nxp8NTAxGx4.roa (hash: OXnUsbk5vh8et8vrHb0/ntkeJcO9A+ORppXS73LPvXg=)
3: zPae-KVIMMWntjeJH8PJCrEsung.crl (hash: 2V0d89j1bZpBsbtHHieZwbNX7Abxk9XGHTFgBql/rYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/208623-268c-4bf6-b947-f459235d987b/1/zPae-KVIMMWntjeJH8PJCrEsung.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/208623-268c-4bf6-b947-f459235d987b/1/zPae-KVIMMWntjeJH8PJCrEsung.mft
rsync://rpki.ripe.net/repository/DEFAULT/zPae-KVIMMWntjeJH8PJCrEsung.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Jun 2026 01:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:a5:5b:fd:a7:13:17:96:b9:8e:cf:12:7a:36:1b:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccf69ef8a54830c5a7b637891fc3c90ab12cba78
Validity
Not Before: Jun 14 01:00:54 2026 GMT
Not After : Jun 15 01:00:54 2026 GMT
Subject: CN=b9038caff9a0462eba9ea62b37dfee82f8578434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:27:bc:98:b5:9d:04:41:a4:95:0f:28:1f:25:
4d:64:ac:56:65:cd:b0:a2:fb:a2:b6:d1:0d:98:78:
5a:9d:5b:3a:7b:4a:8a:92:3a:c5:82:7c:03:b7:e9:
dd:00:62:9b:14:9f:48:1b:60:09:4a:53:2b:86:e0:
78:e7:80:c0:78:2b:b0:8d:02:b1:3e:b0:75:75:f2:
8d:e1:94:ee:8c:a2:a1:16:e1:c9:e1:0b:bb:4a:ac:
66:36:b1:b6:d1:e5:32:06:66:09:5a:a2:65:75:93:
86:3f:4b:42:6e:8d:22:0a:f4:09:2b:c0:91:6c:51:
86:84:2f:9e:e3:17:eb:c9:00:9d:c3:89:33:e1:85:
f3:6f:cc:b0:c4:fa:85:78:5e:6d:e0:4a:02:80:0f:
8c:cc:44:97:42:a4:04:fc:48:eb:66:b1:da:ec:54:
9c:f0:42:28:19:cd:e4:bb:8d:22:13:5b:88:7c:cd:
f9:b9:80:ec:6c:92:2f:f9:6b:60:ec:9d:31:fe:4f:
77:9a:35:2c:df:0d:78:fc:ea:45:97:da:cf:20:9b:
ec:cb:46:95:9d:d6:c9:26:90:a3:0b:92:f4:57:45:
59:9f:01:69:75:9a:7a:a4:66:86:6f:aa:79:0c:47:
98:c7:cd:e1:7b:31:da:f9:f6:ce:4b:b2:f4:6f:38:
6a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:03:8C:AF:F9:A0:46:2E:BA:9E:A6:2B:37:DF:EE:82:F8:57:84:34
X509v3 Authority Key Identifier:
keyid:CC:F6:9E:F8:A5:48:30:C5:A7:B6:37:89:1F:C3:C9:0A:B1:2C:BA:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPae-KVIMMWntjeJH8PJCrEsung.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/208623-268c-4bf6-b947-f459235d987b/1/zPae-KVIMMWntjeJH8PJCrEsung.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/208623-268c-4bf6-b947-f459235d987b/1/zPae-KVIMMWntjeJH8PJCrEsung.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:cc:55:ac:12:8c:52:c2:fd:74:1f:49:a2:eb:73:1e:3c:31:
96:42:a8:d6:2d:32:b8:d8:e9:5e:93:ca:27:7e:2a:a7:42:9f:
75:19:8c:72:f6:0d:d7:c8:e8:36:64:5a:d8:64:7a:35:5d:e2:
13:3a:b8:5a:e7:76:94:c6:cf:d1:52:fb:b9:c7:b1:27:2b:bf:
00:9f:73:8f:da:c3:5d:4b:59:78:44:5d:e9:f0:d5:fd:71:be:
48:3d:86:d0:37:0a:00:54:58:d6:77:76:e5:e8:c1:9e:ee:df:
75:21:be:61:b2:89:02:f3:1d:75:87:53:a7:a7:00:9b:34:0a:
f8:03:45:ed:16:23:b3:20:d4:86:4e:48:46:54:cd:f2:8a:e5:
66:c5:61:20:64:94:05:e6:b6:02:2a:d7:2d:a4:73:bc:35:28:
1a:dc:99:d4:3c:24:1c:7d:16:5d:b0:e4:3d:ad:4c:f3:23:75:
ed:86:22:f3:12:95:22:c2:22:d0:6c:54:81:b4:94:9d:b2:5a:
58:a9:9e:02:38:8c:7e:08:a9:6e:33:86:f6:dd:c8:8a:25:67:
4a:95:f4:fc:e2:83:1d:c5:cc:ba:0a:26:f0:98:23:c7:62:d1:
fd:61:9c:47:77:b6:57:92:59:e4:44:3f:04:c0:a7:56:d4:c4:
3d:98:44:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:12:16 2026 by rpki-client