Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft
File: ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft (raw, json)
Hash identifier: pbpsKp7GTrhwljrLhnT7iXp8QcbudvKZfFcTP/8WfF8=
Subject key identifier: CF:B3:F6:AE:B8:07:B9:62:AA:AE:25:64:6D:B3:BD:57:43:A3:8E:7A
Authority key identifier: 64:FF:B3:09:C2:89:AC:FF:C1:BE:34:A6:F0:B6:67:5C:00:17:13:EA
Certificate issuer: /CN=64ffb309c289acffc1be34a6f0b6675c001713ea
Certificate serial: 019EC36E959A3C887982A3579121C2730A95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft
Manifest number: 0E13
Signing time: Sun 14 Jun 2026 00:01:04 +0000
Manifest this update: Sun 14 Jun 2026 00:01:04 +0000
Manifest next update: Mon 15 Jun 2026 00:01:04 +0000
Files and hashes: 1: 3wE9z3o-LZC9L1Wi744_KuJH-nA.roa (hash: vmvu4StBrIILT2zOsTXLqhGSv13Lo4k+H588mDsH8cM=)
2: ZP-zCcKJrP_BvjSm8LZnXAAXE-o.crl (hash: 6MJkC3Uq8DaQR6HwUEVswyTLQv7qrFLOMEGGMILpzqw=)
3: amULFHSQIT1lD63zvSrNJGtGM-I.roa (hash: UX9F+FQcAi88JV/0o8okdIg01PgokJoY/+NJIGfsY+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Jun 2026 00:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:6e:95:9a:3c:88:79:82:a3:57:91:21:c2:73:0a:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64ffb309c289acffc1be34a6f0b6675c001713ea
Validity
Not Before: Jun 14 00:01:04 2026 GMT
Not After : Jun 15 00:01:04 2026 GMT
Subject: CN=cfb3f6aeb807b962aaae25646db3bd5743a38e7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:57:d1:53:df:01:5e:e0:ee:34:d7:fc:4c:0e:
37:13:cc:ee:45:99:38:06:ba:ac:04:18:b8:56:31:
e8:bb:35:57:2b:36:7f:1b:73:25:1b:f4:4d:3c:57:
46:20:ce:8f:61:b3:88:44:aa:5a:73:b3:8a:ae:b8:
79:22:27:f2:b6:17:f5:56:38:08:0d:04:e8:55:9e:
13:d2:53:93:a6:44:b0:ce:f3:52:f1:ca:22:c0:8c:
9e:ee:8e:ec:4b:bf:ef:4a:06:e8:07:f7:d8:e7:bd:
36:88:eb:96:0a:c1:21:f0:25:1b:24:16:2d:bc:60:
f8:57:6b:0a:6c:9e:be:d2:95:0f:24:b0:2d:bd:9e:
0c:90:6b:0f:97:aa:44:06:d8:b3:70:96:4d:99:e6:
9a:88:ae:4e:c1:a4:a3:3b:f6:42:8f:21:9b:81:35:
b7:77:5f:4d:2f:23:7a:02:e2:6f:3f:fc:02:fe:e7:
05:ce:40:ae:b8:3a:b1:9f:b8:5d:1c:8e:8c:ed:b5:
75:a5:00:26:38:43:43:0d:a7:84:0a:f2:92:03:ce:
8e:dd:19:ba:a4:32:92:3a:04:b2:20:d9:79:6f:fc:
45:cb:42:01:3e:98:90:a6:06:e5:fa:7a:d7:36:d6:
81:4a:94:51:3e:cf:d6:b5:ec:25:53:68:ac:4a:b0:
96:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:B3:F6:AE:B8:07:B9:62:AA:AE:25:64:6D:B3:BD:57:43:A3:8E:7A
X509v3 Authority Key Identifier:
keyid:64:FF:B3:09:C2:89:AC:FF:C1:BE:34:A6:F0:B6:67:5C:00:17:13:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:34:dc:ef:4d:24:91:08:7a:f8:cb:4a:68:32:b1:b5:0e:ec:
9f:a3:07:44:a1:45:b9:52:7c:61:ec:22:56:d4:91:59:cd:9d:
d2:60:89:59:80:fc:57:e5:04:0e:ab:cb:16:8b:19:53:30:63:
72:f5:dd:00:aa:64:67:8b:0b:b3:5f:ef:0a:5e:d8:30:34:0d:
ec:89:b3:fa:42:8d:ed:02:3f:5f:3a:04:b1:9c:2c:d4:fe:d7:
ab:df:68:40:c2:e1:95:39:26:9b:6d:c3:a5:4e:94:43:25:78:
dc:ec:b4:e3:bd:07:9f:d1:77:5b:ab:93:9d:6e:80:05:ab:74:
6d:b4:b8:15:e2:3b:0d:de:5d:18:e9:9b:9c:64:67:90:ee:1e:
d7:3b:cc:f9:6d:54:d2:06:14:89:73:55:90:3f:c7:46:d0:ca:
50:f5:0a:f3:21:9e:e3:87:3e:51:db:38:1b:1c:68:c9:8c:16:
78:3a:5e:e0:96:e5:52:17:c5:78:3a:fb:20:fa:4f:55:a1:5b:
46:f9:14:1b:9a:67:89:ce:8d:10:1e:10:b1:c6:33:e8:8d:a9:
37:ec:98:14:b0:10:83:0d:94:02:76:41:23:84:86:f4:09:2c:
4f:f1:1b:52:6f:b2:fe:99:7e:31:06:8d:ae:f6:77:87:91:a5:
58:be:8f:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:56:30 2026 by rpki-client