Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.mft
File: zPJHTehBFnUrkICnoNsyJTXFYCY.mft (raw, json)
Hash identifier: FaRdQhyo8PqrqasEwyWumj19xkZ2Rjy+H4lGc5OXLzw=
Subject key identifier: 83:68:28:AB:69:D4:97:15:1D:12:63:83:26:03:D8:83:77:C5:B9:97
Authority key identifier: CC:F2:47:4D:E8:41:16:75:2B:90:80:A7:A0:DB:32:25:35:C5:60:26
Certificate issuer: /CN=ccf2474de84116752b9080a7a0db322535c56026
Certificate serial: 019EC2CA14D0DB7FA59F773EF2D4CFFABC08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zPJHTehBFnUrkICnoNsyJTXFYCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.mft
Manifest number: 137A
Signing time: Sat 13 Jun 2026 21:01:23 +0000
Manifest this update: Sat 13 Jun 2026 21:01:23 +0000
Manifest next update: Sun 14 Jun 2026 21:01:23 +0000
Files and hashes: 1: DmCEvnPa2cR0m4Wq8MgYYGsM2fc.roa (hash: FlCMboWRwBxntExiPGM7Dlg1+J7ywCWO67fbQBOqoGo=)
2: zPJHTehBFnUrkICnoNsyJTXFYCY.crl (hash: Hdqwn0VsIIT5rDzAWqreJ9BogTOQZFX936eVzh2V/wE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zPJHTehBFnUrkICnoNsyJTXFYCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 19:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:ca:14:d0:db:7f:a5:9f:77:3e:f2:d4:cf:fa:bc:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccf2474de84116752b9080a7a0db322535c56026
Validity
Not Before: Jun 13 21:01:23 2026 GMT
Not After : Jun 14 21:01:23 2026 GMT
Subject: CN=836828ab69d497151d1263832603d88377c5b997
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:2e:1e:b6:ed:fc:a3:21:15:82:ca:2f:72:d7:
77:0d:ec:d1:86:58:68:11:5c:23:1a:25:67:3e:6e:
45:29:03:1b:70:68:2f:5e:ef:80:95:9e:d4:40:c1:
ee:dd:49:15:a1:e7:ea:a0:4c:85:cb:bd:e1:6f:04:
a7:b8:b7:44:61:7b:ee:1e:f7:2e:1f:bb:77:83:f5:
a1:ab:ff:86:be:28:62:2a:69:fe:9a:eb:51:31:25:
e2:50:97:40:8b:cd:2a:ef:cc:dc:47:60:64:1e:76:
0f:41:0e:4f:f8:f8:36:94:8b:d5:10:27:b6:cd:95:
2e:f9:4f:cb:b5:13:31:0d:1e:db:d7:36:bc:90:a1:
d3:a1:fe:43:14:55:71:fe:8b:63:15:85:a1:39:32:
52:cf:bb:70:d6:8d:b7:64:68:6b:54:52:c6:2e:61:
e0:b4:3b:d7:d4:b1:1f:39:7d:af:f4:cc:5c:3a:f9:
5f:10:2b:5b:4b:d0:dd:db:9d:24:f7:9e:5e:2d:f9:
2b:e6:89:15:4f:a0:28:c8:36:1b:6f:f1:55:b2:c6:
e1:ca:ce:2b:e8:b9:7d:f0:e6:5c:73:4d:87:af:28:
2f:ff:b0:7a:79:d4:8c:9b:86:9a:c4:1a:ea:e2:69:
9c:73:f5:15:8a:72:15:26:3f:2d:9b:9c:d7:db:5f:
4b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:68:28:AB:69:D4:97:15:1D:12:63:83:26:03:D8:83:77:C5:B9:97
X509v3 Authority Key Identifier:
keyid:CC:F2:47:4D:E8:41:16:75:2B:90:80:A7:A0:DB:32:25:35:C5:60:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPJHTehBFnUrkICnoNsyJTXFYCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:98:ba:fa:ea:61:b4:d5:df:f2:1f:1e:36:77:7b:7d:08:94:
07:f5:a7:17:69:9b:ca:68:04:8c:7e:17:f7:5d:56:76:c3:3a:
03:dd:d3:23:61:07:db:2c:80:f6:5e:59:85:7d:57:ef:2c:10:
33:f7:c1:95:ed:c5:db:f7:0b:af:76:50:99:a6:52:f4:2e:96:
19:34:f6:bf:5d:fb:30:b2:c8:5b:a9:24:72:9b:a8:52:2c:63:
7f:4e:20:66:30:f1:c9:a3:e7:a5:79:cd:78:fc:3a:53:38:a4:
bc:86:17:a5:07:5d:31:72:2e:eb:08:92:8d:32:c7:bf:06:c2:
96:2f:0a:17:5c:11:31:72:b8:13:22:8c:27:ab:d7:14:50:58:
a2:4e:ef:a6:79:64:6d:f2:e0:0b:3c:13:3a:4d:fd:55:e4:51:
92:11:f9:b0:41:3b:8c:71:d2:06:7b:07:a6:f4:23:4d:d9:ae:
2b:e6:c9:9d:15:18:9f:17:3b:24:41:9a:89:27:d0:a3:fa:f1:
7f:90:cf:32:01:02:64:94:b0:3d:b5:36:a9:fe:40:73:8a:0e:
13:45:b0:94:e1:26:f8:ac:4d:25:0f:7c:c8:30:68:86:00:b3:
46:d7:17:67:bd:ca:a2:a3:5b:7f:b4:95:52:90:9d:71:cb:9a:
0f:f2:10:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:45:03 2026 by rpki-client