Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.mft
File: zm4aIgj6PxufPTj_8fjiw02RHzY.mft (raw, json)
Hash identifier: gtLO56Z1e48uZpYBPiJ12siJRyqNEuIVgVUknQYHCGc=
Subject key identifier: C1:BC:4E:F0:A6:0E:0D:C9:83:D5:E9:1B:DC:BB:13:3B:A8:82:C1:83
Authority key identifier: CE:6E:1A:22:08:FA:3F:1B:9F:3D:38:FF:F1:F8:E2:C3:4D:91:1F:36
Certificate issuer: /CN=ce6e1a2208fa3f1b9f3d38fff1f8e2c34d911f36
Certificate serial: 019EC0DB4F1730287C77419E76510B64D20F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zm4aIgj6PxufPTj_8fjiw02RHzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.mft
Manifest number: 1257
Signing time: Sat 13 Jun 2026 12:00:58 +0000
Manifest this update: Sat 13 Jun 2026 12:00:58 +0000
Manifest next update: Sun 14 Jun 2026 12:00:58 +0000
Files and hashes: 1: gvoNw609bD_6W2IwVPcUpI-Guaw.roa (hash: ye+ihzO9nCFXOpOHQxxGEqHh0UKlaKr0ZU9zZSsc480=)
2: zm4aIgj6PxufPTj_8fjiw02RHzY.crl (hash: HMnkl6N6opeYVpRq7rJvfBAVc9Zvet0B26o6hxOzFuM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zm4aIgj6PxufPTj_8fjiw02RHzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:db:4f:17:30:28:7c:77:41:9e:76:51:0b:64:d2:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce6e1a2208fa3f1b9f3d38fff1f8e2c34d911f36
Validity
Not Before: Jun 13 12:00:58 2026 GMT
Not After : Jun 14 12:00:58 2026 GMT
Subject: CN=c1bc4ef0a60e0dc983d5e91bdcbb133ba882c183
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b0:bf:aa:b3:21:b0:ff:16:68:d3:63:01:ef:
26:33:47:e2:46:f4:ea:3f:8e:94:4b:df:f3:fc:18:
03:37:49:e0:67:c5:b4:0b:fa:63:3c:6c:5f:b8:c9:
71:16:b7:d3:49:90:cd:79:3d:16:c4:38:cc:c9:f0:
73:f2:cc:de:b3:c5:d2:42:5b:0e:7c:50:b4:fe:4a:
50:5a:e5:0b:0d:6d:1b:d2:83:29:93:11:75:17:29:
05:95:29:1b:85:71:63:2e:f3:49:2c:ac:fb:6f:22:
61:52:14:30:00:5c:f3:89:42:c9:5d:13:04:12:41:
9f:c3:4c:da:b4:fb:75:09:cc:d1:fb:af:8d:a9:9f:
4f:b6:62:e3:8b:ae:e2:13:07:8a:5d:66:9a:d5:93:
b0:93:4a:fb:07:2a:28:b4:4e:bf:ff:6c:6c:7c:13:
eb:6e:94:84:db:4a:f8:a2:d9:fb:b6:4e:ec:d4:a9:
46:f8:c8:9f:bb:c5:8b:dc:42:ec:c7:3c:7f:e6:d2:
4b:0c:db:e9:9d:ed:10:9a:a0:f7:0c:b5:0d:b6:b4:
c1:19:9d:c9:8b:d2:f0:33:d3:18:c8:57:88:71:83:
ae:d3:9d:c9:59:a1:1a:e9:9f:fd:5d:77:b9:99:a0:
49:43:14:eb:3d:59:22:55:8f:8d:a9:4c:8b:ea:c3:
43:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:BC:4E:F0:A6:0E:0D:C9:83:D5:E9:1B:DC:BB:13:3B:A8:82:C1:83
X509v3 Authority Key Identifier:
keyid:CE:6E:1A:22:08:FA:3F:1B:9F:3D:38:FF:F1:F8:E2:C3:4D:91:1F:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zm4aIgj6PxufPTj_8fjiw02RHzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:3b:74:29:9e:13:83:c9:db:5e:48:02:5c:54:5f:0b:6a:d5:
cd:01:02:20:c4:fe:9e:cc:98:fd:6b:a1:a2:22:2c:1a:9e:11:
eb:76:e3:fb:53:c1:5d:c8:ea:a9:67:ed:25:12:b1:c9:fa:e7:
0e:e4:c2:0f:da:62:d4:83:db:8a:ab:cf:14:c1:69:b1:8c:5f:
55:ad:fb:19:b8:41:94:89:15:91:dd:c5:3d:48:b6:7d:70:7a:
97:ab:f8:5a:5b:7f:96:e7:a4:22:1c:b2:7d:44:c1:5e:af:6a:
c8:82:0f:12:9e:71:5d:1d:68:de:6f:76:59:68:74:35:de:04:
be:85:16:b5:9e:34:63:86:44:02:09:06:c7:9c:17:88:ce:bf:
fa:57:da:20:70:e2:e3:0c:f8:5d:b7:8b:85:64:b0:68:12:6b:
34:7c:1f:af:c8:5e:88:13:80:d2:1d:38:80:dc:98:88:24:1f:
f2:0d:54:cb:91:18:c0:a4:bd:c0:52:17:93:8c:14:80:46:2b:
7f:ef:f3:71:3d:5a:7f:a1:e3:b7:ee:23:f0:28:74:7f:cd:a5:
1f:df:20:43:41:d5:6c:a9:70:01:4d:7b:e4:08:b6:2e:95:92:
18:b8:c6:cb:3b:24:37:17:e4:b6:fc:51:96:30:a2:43:1c:0a:
ce:55:e4:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:36:52 2026 by rpki-client