Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.mft
File: zRJC5sfr2Coj-hoI85br5as0z2s.mft (raw, json)
Hash identifier: aPSBU+8z/pzu+k9gf+BH6k0fpzBweCVwcc8LC3JD9QA=
Subject key identifier: 89:0E:B4:D2:3C:64:77:66:60:BF:46:56:EC:23:C6:86:EA:58:D5:5B
Authority key identifier: CD:12:42:E6:C7:EB:D8:2A:23:FA:1A:08:F3:96:EB:E5:AB:34:CF:6B
Certificate issuer: /CN=cd1242e6c7ebd82a23fa1a08f396ebe5ab34cf6b
Certificate serial: 019EC2C93DF509030D735BF977ED8990F7B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRJC5sfr2Coj-hoI85br5as0z2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.mft
Manifest number: 195B
Signing time: Sat 13 Jun 2026 21:00:28 +0000
Manifest this update: Sat 13 Jun 2026 21:00:28 +0000
Manifest next update: Sun 14 Jun 2026 21:00:28 +0000
Files and hashes: 1: nOWsqCuFuUl88d8fe68oh7ATL8Y.roa (hash: 3ZcPCRJToIBazA6ZM2eZ5k1Cl21KURsg9GhtHBDZCsw=)
2: vyrrFLAQmM4kpL-C4kzXL9B0pEk.roa (hash: uDR2ErZozryJ4og8nKltQlCSGLY9GDhP6CrAdfmEEk8=)
3: zRJC5sfr2Coj-hoI85br5as0z2s.crl (hash: ugs4Be1CVRr2MdvENskwMMPLQERJLDQKz81PCRNfabg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/zRJC5sfr2Coj-hoI85br5as0z2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 19:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:c9:3d:f5:09:03:0d:73:5b:f9:77:ed:89:90:f7:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd1242e6c7ebd82a23fa1a08f396ebe5ab34cf6b
Validity
Not Before: Jun 13 21:00:28 2026 GMT
Not After : Jun 14 21:00:28 2026 GMT
Subject: CN=890eb4d23c64776660bf4656ec23c686ea58d55b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a5:5b:7e:ba:b4:16:65:e8:22:ac:63:31:64:
fd:a6:9a:a0:9c:40:76:7c:03:55:13:78:81:26:25:
43:ee:45:b3:37:08:ab:19:b4:29:92:3b:3a:7e:13:
f7:1d:3c:79:de:f2:e2:ff:68:af:94:e8:81:e5:02:
bb:53:18:f2:4d:a0:dd:ba:03:0d:7d:c7:15:32:7f:
06:6e:84:32:34:f7:b6:3f:56:0a:12:ef:ed:fe:c7:
41:e5:ee:97:24:63:c6:76:66:dc:e2:96:1a:6f:4b:
11:78:7c:3e:6b:25:51:9a:3c:1b:2e:ba:48:75:94:
e4:af:ab:0b:56:88:ca:b7:7e:03:1a:98:21:98:cc:
e2:fc:e5:a1:68:f5:49:bb:f8:07:0e:06:35:85:97:
ef:c1:6c:a5:e5:75:61:45:73:87:cb:8c:4f:e2:76:
46:b4:2a:64:e9:f6:ed:cb:d0:e2:40:49:16:38:c7:
c3:cb:f5:ed:25:b0:a9:79:ab:ba:1f:a0:43:06:88:
29:c9:ae:fe:ff:ce:c2:0d:32:e8:92:24:13:ee:b6:
08:90:59:c3:8c:88:5c:8f:bd:58:41:5a:d9:da:76:
c7:9b:35:7f:d7:02:4b:3a:f5:b9:fd:1f:0c:9d:9e:
d3:70:92:ff:fd:7f:44:60:01:bb:1c:e6:40:15:f9:
88:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:0E:B4:D2:3C:64:77:66:60:BF:46:56:EC:23:C6:86:EA:58:D5:5B
X509v3 Authority Key Identifier:
keyid:CD:12:42:E6:C7:EB:D8:2A:23:FA:1A:08:F3:96:EB:E5:AB:34:CF:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRJC5sfr2Coj-hoI85br5as0z2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:32:45:c9:b1:fd:5d:f9:dd:ca:d1:87:f3:e0:32:c9:6d:0a:
1b:a8:0a:92:f8:74:a0:90:8a:d3:c9:72:ab:65:6e:40:9a:d6:
b9:f0:82:0a:30:65:54:90:16:82:c8:75:8c:c1:ab:df:f8:50:
64:fc:ab:b6:97:e7:11:1d:f3:a0:7f:4d:f8:0d:e7:82:2c:3d:
1d:bf:1b:4c:da:36:ba:eb:b4:b3:06:51:0c:7e:d5:d4:09:61:
ca:ad:a2:86:59:44:ee:65:e4:4d:e2:e1:04:f4:52:1d:36:ee:
de:43:64:33:ac:e2:c4:e6:e8:56:11:5b:0c:58:69:03:73:8c:
92:cc:74:2c:81:0d:08:57:9b:cc:39:f0:77:11:73:19:64:fd:
37:22:e9:57:b6:ff:90:3c:f5:c2:16:3a:d5:1f:ea:f3:d8:c4:
60:d9:b9:62:a0:55:f1:3f:ef:f6:02:f4:d4:74:09:a5:64:ac:
00:04:4c:13:23:b6:39:e4:16:e5:5c:97:d5:1b:1e:bd:d9:04:
0c:b6:67:3e:f2:1f:61:71:9b:37:0e:64:78:2a:6f:61:e8:3d:
21:79:70:40:e7:c1:26:d0:e4:ae:4f:be:b2:24:3a:d6:ba:2a:
99:e4:4d:b9:a4:c8:77:23:1e:d3:be:10:fe:eb:c7:f0:6c:21:
e7:b2:45:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7CyT31CQMNc1v5d+2JkPewMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkMTI0MmU2YzdlYmQ4MmEyM2ZhMWEwOGYzOTZlYmU1YWIz
NGNmNmIwHhcNMjYwNjEzMjEwMDI4WhcNMjYwNjE0MjEwMDI4WjAzMTEwLwYDVQQD
Eyg4OTBlYjRkMjNjNjQ3NzY2NjBiZjQ2NTZlYzIzYzY4NmVhNThkNTViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0aVbfrq0FmXoIqxjMWT9ppqgnEB2
fANVE3iBJiVD7kWzNwirGbQpkjs6fhP3HTx53vLi/2ivlOiB5QK7UxjyTaDdugMN
fccVMn8GboQyNPe2P1YKEu/t/sdB5e6XJGPGdmbc4pYab0sReHw+ayVRmjwbLrpI
dZTkr6sLVojKt34DGpghmMzi/OWhaPVJu/gHDgY1hZfvwWyl5XVhRXOHy4xP4nZG
tCpk6fbty9DiQEkWOMfDy/XtJbCpeau6H6BDBogpya7+/87CDTLokiQT7rYIkFnD
jIhcj71YQVrZ2nbHmzV/1wJLOvW5/R8MnZ7TcJL//X9EYAG7HOZAFfmIMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIkOtNI8ZHdmYL9GVuwjxobqWNVbMB8GA1UdIwQY
MBaAFM0SQubH69gqI/oaCPOW6+WrNM9rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelJKQzVzZnIyQ29qLWhvSTg1YnI1YXMwejJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC80YTc1N2MtYWRkZS00ODVjLTkxNzEt
ZjYwMzUzODQxMmM4LzEvelJKQzVzZnIyQ29qLWhvSTg1YnI1YXMwejJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC80YTc1N2MtYWRkZS00ODVjLTkxNzEtZjYwMzUzODQxMmM4
LzEvelJKQzVzZnIyQ29qLWhvSTg1YnI1YXMwejJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIjJFybH9
XfndytGH8+AyyW0KG6gKkvh0oJCK08lyq2VuQJrWufCCCjBlVJAWgsh1jMGr3/hQ
ZPyrtpfnER3zoH9N+A3ngiw9Hb8bTNo2uuu0swZRDH7V1Alhyq2ihllE7mXkTeLh
BPRSHTbu3kNkM6zixOboVhFbDFhpA3OMksx0LIENCFebzDnwdxFzGWT9NyLpV7b/
kDz1whY61R/q89jEYNm5YqBV8T/v9gL01HQJpWSsAARMEyO2OeQW5VyX1RsevdkE
DLZnPvIfYXGbNw5keCpvYeg9IXlwQOfBJtDkrk++siQ61roqmeRNuaTIdyMe074Q
/uvH8Gwh57JFSw==
-----END CERTIFICATE-----
Generated at Sun Jun 14 05:23:40 2026 by rpki-client