
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft
File: Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft (raw, json)
Hash identifier: 6d3Kn0JKVxBupmaQyrDT+8ybgvYsGqzF18pBuv2ILB4=
Subject key identifier: BD:45:7F:C4:BB:E9:20:64:7F:C5:D9:97:3C:8E:11:B4:C9:3F:2E:31
Authority key identifier: 66:5E:17:C0:8A:CD:C7:7E:94:4B:28:39:50:8F:1F:D7:11:E8:E9:7B
Certificate issuer: /CN=665e17c08acdc77e944b2839508f1fd711e8e97b
Certificate serial: 019EBEED4A5D783DDAE1C89B8C6F2CBAF199
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zl4XwIrNx36USyg5UI8f1xHo6Xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft
Manifest number: 08F6
Signing time: Sat 13 Jun 2026 03:01:22 +0000
Manifest this update: Sat 13 Jun 2026 03:01:22 +0000
Manifest next update: Sun 14 Jun 2026 03:01:22 +0000
Files and hashes: 1: C_VRFP2HIVQ92IBRqKDUpWFoIEw.roa (hash: vn7JZEI6f0C3P1aOSgIzdjUGS6glebz8hQYfRM3UhMg=)
2: IAnS6bEzch3TIofLALz1ygB0iyo.roa (hash: lyXUvYyQfJt4aH/SJqViQQv03gKvKKB5vsWtq0xG3Ro=)
3: Zl4XwIrNx36USyg5UI8f1xHo6Xs.crl (hash: 2AaO26NIG2jvhbLN2HjpIqU7eccvmRfO8xIqPXUMBiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zl4XwIrNx36USyg5UI8f1xHo6Xs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:ed:4a:5d:78:3d:da:e1:c8:9b:8c:6f:2c:ba:f1:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=665e17c08acdc77e944b2839508f1fd711e8e97b
Validity
Not Before: Jun 13 03:01:22 2026 GMT
Not After : Jun 14 03:01:22 2026 GMT
Subject: CN=bd457fc4bbe920647fc5d9973c8e11b4c93f2e31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:07:7c:fd:ca:4a:81:e7:3b:c4:28:dc:58:c3:
fd:fe:eb:16:94:fd:3b:2d:02:3e:19:ec:ef:93:7b:
d9:f7:a5:1e:1b:04:fc:e7:ba:cd:4d:84:a7:2f:b6:
71:ed:f3:20:bd:21:f6:20:02:44:b6:74:7e:f6:2c:
10:8c:cd:b9:c7:cb:1b:ab:86:c1:be:37:b0:f1:89:
88:46:10:96:6a:cd:f8:a2:44:22:27:1b:3e:ca:e4:
2f:a5:f2:87:ce:75:0c:0f:ee:4a:2e:61:3e:8e:d2:
f8:15:02:ed:b7:16:43:41:6d:3d:ab:c2:c6:3d:7d:
0d:ba:da:f1:9d:0e:ed:29:8e:bd:0e:3e:45:17:0b:
4a:3c:d7:9f:73:7c:29:cc:86:c3:2a:4e:39:7d:55:
2d:81:16:41:9c:1e:86:36:14:71:e3:4a:fa:66:c6:
79:aa:95:53:69:cc:f1:09:d0:bc:ce:ef:6c:fd:70:
ec:b8:1c:08:7b:71:ec:dd:6d:32:96:0b:58:c4:8c:
35:38:e1:2f:71:df:98:6e:c8:e1:af:b7:ee:76:f6:
80:97:66:cb:11:5f:b4:1e:68:14:bc:7e:eb:c1:07:
e0:a1:1d:d0:2a:b9:72:a1:90:52:a3:6c:7f:2a:92:
1b:61:9a:1a:5e:0f:69:98:9a:75:19:4c:3e:c9:d4:
c3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:45:7F:C4:BB:E9:20:64:7F:C5:D9:97:3C:8E:11:B4:C9:3F:2E:31
X509v3 Authority Key Identifier:
keyid:66:5E:17:C0:8A:CD:C7:7E:94:4B:28:39:50:8F:1F:D7:11:E8:E9:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zl4XwIrNx36USyg5UI8f1xHo6Xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:a2:12:be:dc:6c:83:57:e9:48:3b:f0:14:fa:8f:a8:56:4b:
00:0d:37:f8:30:25:2c:bc:d2:99:61:a9:51:23:a4:77:91:3c:
71:a2:a8:8e:41:7b:0d:1b:d1:10:a4:a7:ab:b5:b0:3c:65:4b:
39:57:7c:9e:ef:b6:37:bb:c6:b7:40:61:30:17:9c:4e:67:2e:
d6:d5:19:27:a7:60:7b:62:97:12:cd:12:d0:10:a7:09:85:fa:
10:ab:2b:3d:4c:c1:a8:e6:00:45:0d:aa:cd:68:e8:85:fb:e1:
9b:04:9a:59:7b:8e:39:0b:24:99:52:21:c4:3c:7e:13:d5:ac:
ec:10:97:b2:0d:e1:36:7d:39:3d:57:13:da:6a:67:81:ae:83:
6a:65:2d:9c:55:4d:b6:b4:95:1d:71:5c:e6:1a:24:1c:ba:c6:
fb:6d:66:c3:7b:c7:f2:69:b1:a2:7b:61:e3:3a:16:bb:d6:8c:
dd:53:73:1b:ea:cc:bc:73:46:fc:f9:28:d7:00:46:f6:cd:79:
0f:ad:a4:4d:19:38:93:f5:2d:95:61:6c:ab:15:29:42:e9:31:
cb:18:c9:a0:f8:24:86:18:9d:db:fa:c2:f3:66:53:57:b9:2d:
fd:11:41:11:fa:41:c2:e7:32:a3:de:3c:d7:23:5d:34:a0:90:
75:bb:ff:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:21:55 2026 by rpki-client