Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/3d96f0-4981-4894-882c-6a99c46879ce/1/z2sdziLtzI0bE3M48rfikFxKixI.mft
File: z2sdziLtzI0bE3M48rfikFxKixI.mft (raw, json)
Hash identifier: cBT2nMcdlr7+G13Suw+nwZEc1+vuis20GSg39UFBjM0=
Subject key identifier: A5:94:38:D0:D5:D2:44:5E:7B:00:AB:09:DA:3C:49:97:B4:81:7B:44
Authority key identifier: CF:6B:1D:CE:22:ED:CC:8D:1B:13:73:38:F2:B7:E2:90:5C:4A:8B:12
Certificate issuer: /CN=cf6b1dce22edcc8d1b137338f2b7e2905c4a8b12
Certificate serial: 019ED3F488984045B59D5601F31F9E98E43B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z2sdziLtzI0bE3M48rfikFxKixI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/3d96f0-4981-4894-882c-6a99c46879ce/1/z2sdziLtzI0bE3M48rfikFxKixI.mft
Manifest number: 1961
Signing time: Wed 17 Jun 2026 05:01:18 +0000
Manifest this update: Wed 17 Jun 2026 05:01:18 +0000
Manifest next update: Thu 18 Jun 2026 05:01:18 +0000
Files and hashes: 1: CT3dS6C-LLdGxg4ufjXioY_GRbY.roa (hash: 2OWY/qBFg0EKWwzsD1nTcACFUzcmAJDh5fmSfds1Lpc=)
2: z2sdziLtzI0bE3M48rfikFxKixI.crl (hash: nO0XH6bSZcRuW2ykTQOH3VztBMMnlXtjBRcYyI2B85g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/3d96f0-4981-4894-882c-6a99c46879ce/1/z2sdziLtzI0bE3M48rfikFxKixI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/3d96f0-4981-4894-882c-6a99c46879ce/1/z2sdziLtzI0bE3M48rfikFxKixI.mft
rsync://rpki.ripe.net/repository/DEFAULT/z2sdziLtzI0bE3M48rfikFxKixI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 05:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d3:f4:88:98:40:45:b5:9d:56:01:f3:1f:9e:98:e4:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf6b1dce22edcc8d1b137338f2b7e2905c4a8b12
Validity
Not Before: Jun 17 05:01:18 2026 GMT
Not After : Jun 18 05:01:18 2026 GMT
Subject: CN=a59438d0d5d2445e7b00ab09da3c4997b4817b44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fe:e9:3f:e8:76:c5:13:ce:c3:4a:90:90:c3:
a4:bd:84:2e:89:8c:44:21:9d:6c:52:2d:40:28:a2:
11:42:de:a8:9b:d0:ad:fe:39:4b:02:36:37:a0:a9:
b9:36:fd:33:a1:45:6a:eb:11:a7:0a:f2:61:d1:41:
4f:4b:f6:83:3b:37:f9:b7:cc:9d:b4:36:e8:55:1a:
8e:69:32:8e:c2:37:30:1c:6b:15:9f:e8:c8:b8:18:
48:a4:65:54:95:3a:41:97:46:db:c0:57:a9:5c:1c:
a0:1f:a2:64:e5:f5:65:00:b1:00:49:34:c4:16:5f:
6f:f3:ec:ae:a8:28:42:91:86:b0:0b:79:1e:a4:65:
98:67:2b:3c:87:22:3b:b6:ef:df:6b:2a:a0:e1:ad:
25:14:d3:7f:d2:eb:6f:26:85:d8:9b:0e:62:13:29:
1b:96:c1:21:aa:14:d0:2d:b6:2e:d1:54:36:0f:44:
c1:28:99:7d:16:9c:20:64:e3:e2:15:2e:70:e7:d1:
67:6f:69:73:6e:42:1e:80:87:94:db:c7:2c:05:b8:
8a:1c:be:16:25:4b:11:61:24:09:20:b4:ff:f0:26:
da:22:b5:39:23:de:de:1c:8e:1e:7b:46:92:80:75:
ff:e8:0c:12:b0:d8:f9:5b:fe:7e:3f:0b:30:74:25:
20:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:94:38:D0:D5:D2:44:5E:7B:00:AB:09:DA:3C:49:97:B4:81:7B:44
X509v3 Authority Key Identifier:
keyid:CF:6B:1D:CE:22:ED:CC:8D:1B:13:73:38:F2:B7:E2:90:5C:4A:8B:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z2sdziLtzI0bE3M48rfikFxKixI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3d96f0-4981-4894-882c-6a99c46879ce/1/z2sdziLtzI0bE3M48rfikFxKixI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3d96f0-4981-4894-882c-6a99c46879ce/1/z2sdziLtzI0bE3M48rfikFxKixI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:fe:71:ba:36:89:77:4a:4a:5c:54:85:ed:91:f1:06:b5:f1:
70:11:6e:72:c1:7b:39:bd:e5:12:cc:0d:51:ca:a7:ac:a8:4e:
96:e6:42:b0:53:cc:a4:a0:9e:0e:81:d7:fb:b4:6c:04:94:08:
39:45:f1:95:c8:cb:90:14:e4:0d:02:f6:db:45:c4:a5:4f:1e:
c4:3f:ee:7d:70:4c:24:33:2d:81:a5:92:9c:86:b2:a0:25:68:
ae:ff:3a:53:9e:24:07:01:4d:27:83:c0:07:90:61:28:4d:fc:
b4:f6:5d:92:f8:1c:d8:eb:9a:d1:a6:ab:72:0c:fd:e1:b0:29:
e7:3a:ee:c1:35:01:61:5e:b5:85:ee:2f:e4:ff:1f:8c:37:6e:
c6:84:ac:b4:32:57:85:a6:2e:e2:2a:1f:81:61:f4:6f:32:4c:
6c:33:0c:a1:ab:0a:9d:08:08:01:c8:72:14:df:44:4a:09:da:
50:de:c9:f1:7d:98:7e:5f:4e:2c:16:18:00:7c:e7:31:36:bd:
c0:11:78:15:0b:bf:81:93:f1:40:9a:80:c7:8c:9f:ea:77:1c:
f2:aa:bb:98:29:77:80:d3:0d:48:72:1c:43:7e:32:fb:28:30:
66:5c:f1:d1:78:f7:90:b6:15:01:09:9b:c7:db:43:5f:e3:b4:
ef:57:24:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 12:05:17 2026 by rpki-client