
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft
File: ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft (raw, json)
Hash identifier: CF4TrGBS5uOxqZ7iSze2/43pwaqikCigGWQpa6Ys3MQ=
Subject key identifier: 08:31:A3:D6:B4:7C:8F:51:CD:34:59:22:C5:F5:3A:FB:70:D1:4A:79
Authority key identifier: 65:3F:55:62:91:21:B6:0F:B1:9C:97:F9:9C:75:DD:6F:01:5D:D6:E8
Certificate issuer: /CN=653f55629121b60fb19c97f99c75dd6f015dd6e8
Certificate serial: 019EBDA3181EFCD3F74ED9FA3243298BC09F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft
Manifest number: 1964
Signing time: Fri 12 Jun 2026 21:00:42 +0000
Manifest this update: Fri 12 Jun 2026 21:00:42 +0000
Manifest next update: Sat 13 Jun 2026 21:00:42 +0000
Files and hashes: 1: 0GL7DdIdoFqMUjvFhCRfHpKPMbA.roa (hash: pZia0ALckAxbVwXjSvk9ZitHob5JnbAYRMcyTh/GAHw=)
2: 4CJ3InuHwPxMIYug15LfFjf4TFE.roa (hash: AqjwYTvPMHv8KhwXl422zB5jGiNZqfOiCwgbFsHZ07g=)
3: H6jlQnwQ3aiH-RYU25LA_SCJ8YQ.roa (hash: z0WYajZ68GEteUnmX5OmcBfJ0ynCGdGVIvLSKmVhonU=)
4: VxmBydPNDVkjAwNW0HlCl0mcW2A.roa (hash: 2uX2f6w9d7FkhAQJ79lByeDaz04Av+toag4OFSNYkF8=)
5: X4rKfB3PDI3kjmwak5Qpg6vv3Qo.roa (hash: rE1Gy+5Y3N/6nRhiVvsTgzmZ/j4C83X5X1jx7h+hjs0=)
6: ZT9VYpEhtg-xnJf5nHXdbwFd1ug.crl (hash: SBYSJ3UkLWr4qDflknyRB9ccIZzveYzZSztdYjMK7+A=)
7: srwZqD3NLb6Mgfkh0xVjrlQc7p8.roa (hash: WOqlcZKIxr5sVUqyyKJNHMiLfFbk3vNnFX+UsNkt18I=)
8: zPyNAFdQmlJqV2qKRKA-eSuuTJY.roa (hash: WQ7fB4l+y3xXDPGETnFXWLdLLeTLH4yREUZKhvFa6Ho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 21:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bd:a3:18:1e:fc:d3:f7:4e:d9:fa:32:43:29:8b:c0:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=653f55629121b60fb19c97f99c75dd6f015dd6e8
Validity
Not Before: Jun 12 21:00:42 2026 GMT
Not After : Jun 13 21:00:42 2026 GMT
Subject: CN=0831a3d6b47c8f51cd345922c5f53afb70d14a79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ea:80:22:63:23:2f:60:e0:46:11:57:c2:b3:
31:4e:19:90:14:c1:6b:af:b9:49:91:50:46:eb:f5:
92:1e:c0:6c:60:4d:54:47:97:f8:6b:cc:c5:2c:48:
59:64:80:cb:67:ba:26:ae:60:17:e4:4d:18:e1:80:
bd:a2:c2:3b:14:d8:2d:50:12:ff:89:7e:09:01:e5:
87:45:1f:9a:4b:58:df:57:97:7c:cb:e2:45:1c:26:
5d:1c:8c:de:74:b9:32:33:b9:35:67:f6:f8:57:95:
e1:15:f6:e6:71:75:4c:13:4f:37:8f:6f:92:73:40:
fa:94:b6:d4:de:10:cd:92:46:fe:91:23:88:4e:65:
b3:fd:39:13:30:43:88:89:df:78:89:dd:bc:d5:77:
54:9b:98:18:aa:62:68:c5:ab:20:89:a5:1e:67:f0:
7f:76:05:e9:53:f2:fe:af:a2:fa:cf:08:b1:6c:c8:
9d:28:b8:d7:75:25:31:ee:8c:51:1a:7f:7d:83:74:
c2:dd:83:87:25:ad:2c:2e:92:80:cc:39:f3:c2:71:
bc:77:a1:db:e3:05:12:fb:9e:c4:fd:27:b7:c6:b9:
16:64:68:a8:da:66:dd:21:95:f5:60:da:be:60:9b:
4a:34:6f:c9:7b:a7:62:cc:5e:0e:dd:15:15:b6:b1:
b1:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:31:A3:D6:B4:7C:8F:51:CD:34:59:22:C5:F5:3A:FB:70:D1:4A:79
X509v3 Authority Key Identifier:
keyid:65:3F:55:62:91:21:B6:0F:B1:9C:97:F9:9C:75:DD:6F:01:5D:D6:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:45:42:77:e7:68:c0:16:2b:a3:95:89:e0:f7:67:12:59:34:
01:4a:39:ab:bd:7c:9d:30:cc:e3:ae:74:71:a4:89:a7:67:a8:
7f:3f:28:38:56:7a:5e:40:90:3b:a3:6a:d6:62:8d:68:7f:10:
20:69:65:fb:a3:f7:06:0a:4f:45:72:46:43:43:11:46:32:58:
ec:4e:21:21:03:f3:78:93:86:cc:a5:40:dc:a8:89:16:6a:da:
68:34:cb:4d:03:dd:03:9f:74:8b:2d:c8:2a:97:7d:6d:8e:11:
df:86:62:a2:9a:25:7d:31:b7:c2:51:37:c7:07:6a:78:07:30:
7f:ac:75:05:95:eb:f5:64:7b:08:24:c5:90:51:67:ad:b1:df:
72:36:cc:30:e4:af:07:bf:f0:09:88:a6:62:2d:8b:b0:7c:01:
ad:56:a0:05:6f:96:aa:1a:3b:b3:7d:77:3f:d2:06:f1:dc:e8:
ca:da:71:d8:5e:14:0a:05:89:f4:1e:cd:68:76:60:6d:50:77:
bd:30:33:08:ef:03:e0:43:8f:34:79:ff:a5:b1:7c:aa:48:d8:
b5:50:69:e8:db:f7:c1:ca:9d:6b:c7:a1:01:3a:2d:f8:9b:2c:
17:80:5c:07:ea:93:2d:f7:7c:b0:ef:f8:09:78:00:25:a1:0d:
af:e5:42:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:29:30 2026 by rpki-client