Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.mft
File: Z-MMF5zUKoZBWDI0UBsY7_JRVUk.mft (raw, json)
Hash identifier: CjqQRKBD3BbqhwZq11NiCO/e3VvXo2uY6ybaih3Q7TY=
Subject key identifier: A2:07:9C:58:3B:FF:36:E0:D1:00:4D:B7:29:7B:AA:88:10:CA:6A:66
Authority key identifier: 67:E3:0C:17:9C:D4:2A:86:41:58:32:34:50:1B:18:EF:F2:51:55:49
Certificate issuer: /CN=67e30c179cd42a8641583234501b18eff2515549
Certificate serial: 019EBF5A4A7270BDB1C377E8C69DB4F9CFD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.mft
Manifest number: 08DC
Signing time: Sat 13 Jun 2026 05:00:25 +0000
Manifest this update: Sat 13 Jun 2026 05:00:25 +0000
Manifest next update: Sun 14 Jun 2026 05:00:25 +0000
Files and hashes: 1: Z-MMF5zUKoZBWDI0UBsY7_JRVUk.crl (hash: /8/hxkINXTGNXTpS9h7jXkDMwW9ezXOzYHNWVsddirk=)
2: dI0KgXxJI7glvO_mfsDPmIQ5NkA.roa (hash: F9yFe51qdVbE9AuCXASZZ90BbvMiZC4wn/OYeZyyhEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:5a:4a:72:70:bd:b1:c3:77:e8:c6:9d:b4:f9:cf:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67e30c179cd42a8641583234501b18eff2515549
Validity
Not Before: Jun 13 05:00:25 2026 GMT
Not After : Jun 14 05:00:25 2026 GMT
Subject: CN=a2079c583bff36e0d1004db7297baa8810ca6a66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0d:e1:f7:14:74:44:e6:c7:b8:90:b8:7e:f9:
96:42:75:e4:c8:63:63:b9:0c:75:db:ca:69:c5:e2:
9d:45:88:6e:d8:0a:83:e9:db:71:b4:6d:cd:85:c9:
1d:3e:f8:5c:8e:78:e7:57:6d:6c:e9:be:57:72:90:
c2:2a:3b:4b:22:32:87:ec:81:08:75:88:af:8c:ab:
5f:9f:1a:01:27:d0:f9:d7:45:34:10:6e:9d:a7:35:
a6:15:23:7e:41:c5:1d:25:82:91:d7:a3:63:d5:be:
8a:34:51:54:fb:da:26:fa:79:6e:7e:6c:7b:48:00:
66:aa:cb:9e:08:b6:89:86:b5:a9:a1:45:ac:92:5c:
fa:fb:b9:ef:d4:f3:0c:20:1d:f3:9d:e9:c2:58:04:
54:b3:58:57:ed:e4:08:1c:76:37:24:77:ef:53:03:
13:ce:3d:79:dc:59:a2:2f:76:be:a6:e0:84:91:5a:
24:10:d1:3f:16:10:4a:a4:53:fa:db:7a:eb:1c:68:
60:f5:18:48:b8:ec:f9:d6:05:2d:f7:dc:e2:d0:be:
6f:a0:2f:64:05:c7:20:e7:5c:89:05:ef:c1:f6:81:
e4:c9:5e:4a:1e:5c:ba:a3:b6:bc:07:9f:97:ee:c2:
3e:e4:d1:09:31:38:07:4d:40:5a:53:8a:03:55:66:
8a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:07:9C:58:3B:FF:36:E0:D1:00:4D:B7:29:7B:AA:88:10:CA:6A:66
X509v3 Authority Key Identifier:
keyid:67:E3:0C:17:9C:D4:2A:86:41:58:32:34:50:1B:18:EF:F2:51:55:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:db:fe:c2:ed:1d:27:ec:f1:cb:d1:5c:46:11:09:61:9d:8c:
49:20:95:13:1e:de:c1:51:b7:4f:80:89:b7:40:5f:b2:21:d7:
cc:d8:71:ba:6f:32:31:e4:13:9e:88:ac:44:00:c7:12:2b:fb:
46:3f:ad:c8:ac:3b:c5:57:a9:5c:34:37:7c:81:50:97:14:fe:
a3:aa:05:a1:29:1d:81:e2:19:4c:81:bf:48:0a:44:03:d6:b2:
45:45:4d:00:51:47:ef:85:e7:ab:18:aa:e3:92:53:d6:1d:28:
09:b5:f2:68:db:9b:22:86:b8:24:90:f0:39:f1:9f:87:c8:54:
34:69:75:09:a6:f8:ba:da:7d:d2:7a:7f:75:9b:60:67:54:36:
6d:ba:c5:41:c8:7f:74:b2:5d:73:42:a3:db:d3:d4:7a:89:7b:
2a:92:26:5b:4e:51:59:1c:2d:f5:5a:6c:50:0e:ce:39:27:9f:
b2:ab:44:b2:6c:3a:c1:15:40:61:81:00:dc:8b:9a:74:af:01:
5d:f9:91:0a:57:82:9f:02:f6:6b:b7:c0:f3:ee:62:cf:46:2f:
6c:2e:3d:17:41:8b:0d:dc:9a:70:69:6a:93:22:47:d9:ff:74:
dc:8a:86:c0:2a:e4:6f:53:ca:01:06:a3:5f:51:3d:7b:c9:11:
a1:26:38:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:39:24 2026 by rpki-client