Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/631521-d4b7-4f10-8c06-87aa285f807c/1/z173qHDUsUjrHU9P5mbtUFSt6uw.mft
File: z173qHDUsUjrHU9P5mbtUFSt6uw.mft (raw, json)
Hash identifier: SqlFLg/92SJ2VepturcNWSDtGV2Xlrc8vCkCp/+3RJo=
Subject key identifier: 58:E2:7C:24:D3:82:14:FC:35:45:F9:5A:6F:0D:57:28:CD:AC:E0:24
Authority key identifier: CF:5E:F7:A8:70:D4:B1:48:EB:1D:4F:4F:E6:66:ED:50:54:AD:EA:EC
Certificate issuer: /CN=cf5ef7a870d4b148eb1d4f4fe666ed5054adeaec
Certificate serial: 019EC2C961D9152879853E0128D13CF60DDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z173qHDUsUjrHU9P5mbtUFSt6uw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/631521-d4b7-4f10-8c06-87aa285f807c/1/z173qHDUsUjrHU9P5mbtUFSt6uw.mft
Manifest number: 10D2
Signing time: Sat 13 Jun 2026 21:00:38 +0000
Manifest this update: Sat 13 Jun 2026 21:00:38 +0000
Manifest next update: Sun 14 Jun 2026 21:00:38 +0000
Files and hashes: 1: WcEXb1FwWuq7CmZIR_j833VQVLg.roa (hash: YwtVclxxnke6RUqR5TUDz5Eu+w+6DwiJjWOIUuWJONU=)
2: bfREzEwR-EXPjAe3wBGoI04LV-k.roa (hash: 769fYTMFcVF5MUU/DGKAsF33sj2AY85ZIEX4Env7vD8=)
3: z173qHDUsUjrHU9P5mbtUFSt6uw.crl (hash: kJHuOv1uFV12kUXRbxXDgxfwvtI9wx0yjBz4W38c4Ec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/631521-d4b7-4f10-8c06-87aa285f807c/1/z173qHDUsUjrHU9P5mbtUFSt6uw.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/631521-d4b7-4f10-8c06-87aa285f807c/1/z173qHDUsUjrHU9P5mbtUFSt6uw.mft
rsync://rpki.ripe.net/repository/DEFAULT/z173qHDUsUjrHU9P5mbtUFSt6uw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 21:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:c9:61:d9:15:28:79:85:3e:01:28:d1:3c:f6:0d:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf5ef7a870d4b148eb1d4f4fe666ed5054adeaec
Validity
Not Before: Jun 13 21:00:38 2026 GMT
Not After : Jun 14 21:00:38 2026 GMT
Subject: CN=58e27c24d38214fc3545f95a6f0d5728cdace024
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c5:93:7e:1d:55:22:a1:b8:19:d4:4e:57:dd:
1a:38:f6:95:b3:fd:62:fe:2b:9e:4e:1c:27:22:05:
53:15:95:bf:b5:02:5a:77:c1:84:04:45:f7:3d:6e:
c2:0a:21:b1:60:a1:95:2c:af:4d:a7:a4:c3:ce:0a:
10:93:da:37:49:f4:ad:c0:fa:cf:eb:ef:87:0a:91:
eb:42:ed:5c:4e:1e:86:64:96:e5:18:6d:f1:9d:62:
ca:14:7c:08:fb:90:38:87:96:a8:7e:a8:38:04:ec:
9b:77:5c:b0:50:f1:b7:d4:79:9f:cd:a9:25:0d:c2:
75:8c:a8:d7:ed:d2:43:63:cb:e6:5b:12:bc:9f:fb:
bc:8d:46:ca:78:c4:64:5f:e3:cd:ba:de:92:71:99:
29:03:64:b5:ce:5d:91:44:6b:ac:f7:9f:4a:32:6c:
d4:8a:5e:7b:1c:cc:2d:58:40:e4:c0:64:4c:52:a4:
29:49:aa:b5:29:33:a3:f1:6c:af:d4:6a:4f:7f:67:
48:90:da:fb:ea:34:11:74:2a:7c:db:f2:6c:7d:1d:
fd:ab:bf:2d:e2:db:67:56:1b:44:b2:3f:f1:0d:27:
07:6f:53:57:ca:85:85:c0:5a:84:0b:98:4a:a7:8d:
8e:21:9f:15:7d:e0:6b:3a:aa:e1:ed:2d:30:44:79:
51:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:E2:7C:24:D3:82:14:FC:35:45:F9:5A:6F:0D:57:28:CD:AC:E0:24
X509v3 Authority Key Identifier:
keyid:CF:5E:F7:A8:70:D4:B1:48:EB:1D:4F:4F:E6:66:ED:50:54:AD:EA:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z173qHDUsUjrHU9P5mbtUFSt6uw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/631521-d4b7-4f10-8c06-87aa285f807c/1/z173qHDUsUjrHU9P5mbtUFSt6uw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/631521-d4b7-4f10-8c06-87aa285f807c/1/z173qHDUsUjrHU9P5mbtUFSt6uw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:5d:f7:3a:00:2e:16:a0:82:cf:4a:e8:2d:11:d5:cd:20:03:
94:d6:61:87:f9:ba:18:f5:ab:3a:56:cf:c8:f9:3d:e8:66:70:
2a:94:c7:62:8c:eb:5a:ec:79:c8:fb:f5:2a:38:73:82:c4:e2:
74:c2:d2:7f:65:1b:b6:12:a7:b2:56:bd:b8:a4:d8:83:80:72:
70:63:59:97:b5:c6:40:16:f3:00:e3:68:4f:0c:f6:4b:63:14:
e2:9c:5c:0c:7f:53:fa:2d:d6:82:ca:bb:e8:c5:60:e7:eb:8a:
b5:53:48:3a:03:88:b1:55:c4:be:dd:13:3b:c0:99:9d:cd:ab:
17:35:37:de:08:23:60:72:44:fb:95:63:46:bd:a1:8c:67:2c:
b5:79:d8:77:5a:f7:cc:f0:f8:44:5d:22:8f:1b:5e:69:05:18:
22:70:b6:9f:f1:cf:f1:e3:1f:d9:c7:72:9c:dc:94:70:eb:f2:
e2:34:09:19:7e:96:00:f1:4d:55:92:0c:73:cc:60:82:55:9f:
10:c9:29:ef:ff:bc:c1:24:bd:e6:6c:40:46:0b:a9:c2:5b:0a:
9b:7b:93:5b:af:18:5c:42:48:88:d0:1e:86:32:35:ee:11:db:
16:39:99:6f:4e:fc:9c:e3:fb:69:c8:97:fa:82:81:5e:f1:ac:
4f:ec:3f:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:25:28 2026 by rpki-client