Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.mft
File: rzrc42ZL8Of2iP9BIlUXNMTRR1Y.mft (raw, json)
Hash identifier: XS8cIMUi979FV2Iz2AdBffNB3wH9TIwxRlg1cAQVJvg=
Subject key identifier: 34:B5:03:33:D6:93:75:AC:6C:54:1E:1F:55:24:F9:7F:1F:03:C5:7B
Authority key identifier: AF:3A:DC:E3:66:4B:F0:E7:F6:88:FF:41:22:55:17:34:C4:D1:47:56
Certificate issuer: /CN=af3adce3664bf0e7f688ff4122551734c4d14756
Certificate serial: 019EC25C9E3A42A660BF70027D0E3E0EDE3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.mft
Manifest number: 0391
Signing time: Sat 13 Jun 2026 19:01:50 +0000
Manifest this update: Sat 13 Jun 2026 19:01:50 +0000
Manifest next update: Sun 14 Jun 2026 19:01:50 +0000
Files and hashes: 1: WKKdAS92LVILbjnTiiXNrRI_064.asa (hash: WU7xtDYPq+tmZfgD8wJKGXUqlisupARfwtckbBQ0ds0=)
2: rzrc42ZL8Of2iP9BIlUXNMTRR1Y.crl (hash: Zw9mvl2qIc5uOcul9cgVYSzsPewBYBDItpNPmvyZIC0=)
3: ymjEj-AVl-jhoYqun7KK_jww1EY.roa (hash: Lravz6mXezUcFlH14r837C4PlhGpAXXPBKh9Ost0iM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:5c:9e:3a:42:a6:60:bf:70:02:7d:0e:3e:0e:de:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af3adce3664bf0e7f688ff4122551734c4d14756
Validity
Not Before: Jun 13 19:01:50 2026 GMT
Not After : Jun 14 19:01:50 2026 GMT
Subject: CN=34b50333d69375ac6c541e1f5524f97f1f03c57b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:74:7b:8a:66:0a:60:43:e0:91:ef:f5:1e:3e:
57:62:da:35:47:54:1e:47:35:83:36:25:11:ae:45:
42:47:24:62:a9:98:49:d9:6d:c9:77:15:e9:95:bc:
a8:00:ac:5d:18:ae:f3:26:cf:3a:2d:7b:14:95:57:
4e:4e:f1:07:6b:9b:97:31:09:b5:4d:05:f3:73:84:
74:05:fe:8b:3d:7d:51:3c:5b:f2:88:27:ee:80:1c:
ce:d5:bc:0a:74:98:bc:81:f8:7d:d6:63:92:d4:8a:
9d:66:08:83:d6:c9:e6:f6:f9:70:d8:8e:7a:ab:c2:
48:88:f0:e2:2a:0f:cd:71:29:45:e7:3f:da:67:ac:
88:fe:c8:c4:b0:db:6a:6a:d7:81:02:ed:3e:2e:c7:
ad:5c:60:5c:17:b1:21:58:9e:d8:c4:3f:3a:6b:fe:
9a:5e:63:69:18:20:dd:35:ad:dd:66:7b:90:b5:31:
2b:d1:2e:22:53:f8:bd:9e:6c:58:67:41:24:95:8f:
e9:e5:a9:69:0c:6c:8e:8f:c9:28:38:77:4b:77:44:
52:78:96:1e:7d:6c:d2:c0:83:28:11:69:5e:a6:f3:
71:58:7c:ee:a6:b3:c4:9a:ef:16:ec:be:fb:53:84:
b7:94:60:1e:41:e3:28:72:5b:71:db:6a:eb:a2:c7:
b8:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:B5:03:33:D6:93:75:AC:6C:54:1E:1F:55:24:F9:7F:1F:03:C5:7B
X509v3 Authority Key Identifier:
keyid:AF:3A:DC:E3:66:4B:F0:E7:F6:88:FF:41:22:55:17:34:C4:D1:47:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:48:4e:28:d8:c5:35:8b:c8:2a:e3:fe:9a:ea:02:a4:90:ef:
66:08:93:81:41:1d:1f:45:39:b6:d5:7a:a7:0f:90:92:81:d4:
2e:6c:d5:e3:ce:38:fd:1b:00:68:33:4b:6a:5f:09:b3:80:2b:
d7:d3:cf:b6:c8:80:37:ba:42:10:77:05:ad:3f:b7:42:67:40:
21:8b:22:58:6b:88:b0:d0:0c:13:82:98:17:2d:0c:44:15:b1:
66:35:a0:59:55:e1:20:6f:d3:c6:ad:56:23:40:11:98:7f:1b:
32:e8:40:15:9a:b4:9a:ef:ee:86:3b:e7:c1:7d:cd:1b:9a:5d:
c7:24:cc:5c:ce:40:92:9e:44:bb:6a:d4:7f:ad:f0:9d:fb:ca:
3d:15:4e:e6:77:da:7b:1b:c6:4b:31:d6:22:af:c7:b2:28:25:
04:bc:2c:cc:49:a4:58:40:1c:dc:af:ef:92:7e:48:db:f5:af:
8d:98:f6:5a:90:32:63:71:1c:c4:27:2c:07:4b:b5:d3:41:a7:
dd:71:d2:eb:d9:2c:87:43:17:54:b6:54:4d:19:3f:79:97:c8:
b9:e9:e2:09:0a:8f:d6:7f:ce:0a:85:f1:76:75:72:3e:cb:64:
7c:80:d8:1e:b7:e7:83:b2:72:94:30:73:32:c8:1d:36:b1:33:
c2:db:72:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:10:54 2026 by rpki-client