Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/299caa-8ccd-49c1-9029-8804dad780a1/1/ZM8e6QZTt7gU1rVFlJvZTd4PxqE.mft
File: ZM8e6QZTt7gU1rVFlJvZTd4PxqE.mft (raw, json)
Hash identifier: 8XOs1vAqij4Myt4JymLdegsPphCfr9yMEL5/79w9E90=
Subject key identifier: 8C:78:72:84:49:E5:0E:2A:78:86:39:CD:DB:8B:21:AA:00:24:65:A1
Authority key identifier: 64:CF:1E:E9:06:53:B7:B8:14:D6:B5:45:94:9B:D9:4D:DE:0F:C6:A1
Certificate issuer: /CN=64cf1ee90653b7b814d6b545949bd94dde0fc6a1
Certificate serial: 019EC2926AB83927283A6E0C6EF68A7A80FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZM8e6QZTt7gU1rVFlJvZTd4PxqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/299caa-8ccd-49c1-9029-8804dad780a1/1/ZM8e6QZTt7gU1rVFlJvZTd4PxqE.mft
Manifest number: 04E0
Signing time: Sat 13 Jun 2026 20:00:35 +0000
Manifest this update: Sat 13 Jun 2026 20:00:35 +0000
Manifest next update: Sun 14 Jun 2026 20:00:35 +0000
Files and hashes: 1: 5_mNKvnFKLC3DW1kpn5M97s_rV8.roa (hash: YSn080K1AyDozT4ZZIR3FUMOs0H/Uq7H2U6XVLEbIes=)
2: NS4bJSf8JtisPPo4E4AUvgYiJkI.roa (hash: kNAqy7sfsX/DzrejY1IHLtdhRNkU/dXjQEKN71zDd5M=)
3: ZM8e6QZTt7gU1rVFlJvZTd4PxqE.crl (hash: 032NOmGkCUivkVTCAoYhcbzwzZv9RovTabqgk3IqaFE=)
4: m0S48tEBv9nFzVOV38xvVb-7W24.roa (hash: kgq2gT5y50cbq7aH/NdH+FdCNYhuUI9iaSWsZs757h0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/299caa-8ccd-49c1-9029-8804dad780a1/1/ZM8e6QZTt7gU1rVFlJvZTd4PxqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/299caa-8ccd-49c1-9029-8804dad780a1/1/ZM8e6QZTt7gU1rVFlJvZTd4PxqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZM8e6QZTt7gU1rVFlJvZTd4PxqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:92:6a:b8:39:27:28:3a:6e:0c:6e:f6:8a:7a:80:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64cf1ee90653b7b814d6b545949bd94dde0fc6a1
Validity
Not Before: Jun 13 20:00:35 2026 GMT
Not After : Jun 14 20:00:35 2026 GMT
Subject: CN=8c78728449e50e2a788639cddb8b21aa002465a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:84:7f:2a:ca:80:b3:cd:24:d5:3b:a0:57:af:
4f:d0:40:de:b7:ce:be:37:20:9f:e5:ef:15:d4:3e:
68:5c:a1:4e:76:3b:03:22:e2:da:e0:5f:c1:80:12:
24:4d:ce:87:a6:f1:2b:f6:16:de:53:b8:2d:57:ea:
fb:ca:c5:c1:b6:84:d4:30:50:89:48:82:e5:62:20:
94:66:58:03:34:68:c8:1d:12:bb:0d:a6:55:27:5a:
68:4a:8d:6b:67:5e:20:32:0c:c4:d8:92:16:be:c8:
3e:d0:6a:00:50:f8:16:db:f5:c7:b9:e0:93:b5:26:
e0:65:7b:a7:7d:8d:65:fe:ab:e3:ce:e0:4e:4f:57:
b8:b1:dc:d1:83:99:ed:ce:88:42:a3:fc:37:27:62:
8d:31:67:d8:3c:e6:04:f9:94:65:59:20:6a:25:9d:
d4:48:b2:eb:93:9a:ab:67:17:51:ae:58:8b:cc:01:
3d:e2:27:0a:60:ec:f4:7a:f6:2a:d9:52:16:c5:c4:
66:4b:52:4b:73:ca:64:0f:79:9b:85:68:a8:b9:7d:
67:33:4b:72:37:d8:8f:f7:be:80:7a:1b:fb:41:56:
a8:67:ee:2b:fa:f0:c9:60:32:ed:99:d4:f6:37:48:
32:7e:48:a5:4a:2f:ef:59:4a:89:bc:d7:a1:31:f6:
c3:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:78:72:84:49:E5:0E:2A:78:86:39:CD:DB:8B:21:AA:00:24:65:A1
X509v3 Authority Key Identifier:
keyid:64:CF:1E:E9:06:53:B7:B8:14:D6:B5:45:94:9B:D9:4D:DE:0F:C6:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZM8e6QZTt7gU1rVFlJvZTd4PxqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/299caa-8ccd-49c1-9029-8804dad780a1/1/ZM8e6QZTt7gU1rVFlJvZTd4PxqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/299caa-8ccd-49c1-9029-8804dad780a1/1/ZM8e6QZTt7gU1rVFlJvZTd4PxqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:8a:64:91:aa:a8:23:4b:4b:11:08:cf:d8:d8:a3:9b:fb:e0:
27:05:a8:c0:52:4e:49:e1:e7:44:01:8a:ea:17:c0:fe:ad:eb:
85:c1:e6:08:03:48:59:97:e1:5e:ea:e5:b0:0b:d2:19:35:1f:
c9:3e:17:d1:5a:ce:57:83:6e:7c:2c:e6:5f:fc:ef:f4:d6:87:
a9:65:db:8c:07:5a:1f:c9:7d:80:3a:b9:eb:ca:d0:f3:0a:95:
a9:ae:c7:80:f6:ce:90:32:2e:94:ae:e9:bd:71:91:20:b5:e4:
12:3c:1b:c7:94:3a:37:07:58:38:be:3c:d2:52:e8:a7:8a:fb:
11:64:50:fd:89:42:da:f6:dd:31:bf:33:ff:f3:c1:90:6f:ec:
cc:1a:df:07:ca:6a:8c:8b:01:69:fc:52:e5:78:5a:f1:03:f0:
8e:2a:65:c5:f8:ac:4c:b5:1d:df:66:22:41:30:25:71:c1:94:
cd:c0:e3:00:9e:e1:26:5a:55:f5:46:9c:fb:05:52:3f:e0:77:
2f:8f:76:83:c1:48:dc:69:95:d6:a0:77:b3:83:72:da:a6:31:
28:5e:1c:66:1b:f7:ce:43:3f:6d:05:4e:a2:ec:bd:c5:f5:d8:
14:ac:6c:13:18:43:71:57:c2:d3:c1:eb:b4:da:b7:0e:34:50:
d4:9b:03:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:13:03 2026 by rpki-client