
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/043544-80e7-4486-bec4-aaf6e13410f5/1/ZUNvaLjc4Zd_WVt6Eisx7OD9yWs.mft
File: ZUNvaLjc4Zd_WVt6Eisx7OD9yWs.mft (raw, json)
Hash identifier: lA2oQ1r457xFKGNpWPURt/vDGjnnFIYZ/bGI/vnylBw=
Subject key identifier: 25:F2:1B:55:E2:6B:4F:D5:97:56:03:DD:EA:AA:9D:3A:67:D7:A3:F9
Authority key identifier: 65:43:6F:68:B8:DC:E1:97:7F:59:5B:7A:12:2B:31:EC:E0:FD:C9:6B
Certificate issuer: /CN=65436f68b8dce1977f595b7a122b31ece0fdc96b
Certificate serial: 019EC1B668840D3BE46171F0ABDD50D1CEFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZUNvaLjc4Zd_WVt6Eisx7OD9yWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/043544-80e7-4486-bec4-aaf6e13410f5/1/ZUNvaLjc4Zd_WVt6Eisx7OD9yWs.mft
Manifest number: 2A
Signing time: Sat 13 Jun 2026 16:00:17 +0000
Manifest this update: Sat 13 Jun 2026 16:00:17 +0000
Manifest next update: Sun 14 Jun 2026 16:00:17 +0000
Files and hashes: 1: 1UDryGb6uD6P-Aju0_ZIzCDQQPs.roa (hash: J074jx0s15KYq6OtmYxwyQ++hAEyrLR4KI6gJZWM7GE=)
2: ZUNvaLjc4Zd_WVt6Eisx7OD9yWs.crl (hash: 6Jznq8K62HzojjZKIl20FIPNY7a/zYaO3RcTB2MKwa0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/043544-80e7-4486-bec4-aaf6e13410f5/1/ZUNvaLjc4Zd_WVt6Eisx7OD9yWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/043544-80e7-4486-bec4-aaf6e13410f5/1/ZUNvaLjc4Zd_WVt6Eisx7OD9yWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZUNvaLjc4Zd_WVt6Eisx7OD9yWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:b6:68:84:0d:3b:e4:61:71:f0:ab:dd:50:d1:ce:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65436f68b8dce1977f595b7a122b31ece0fdc96b
Validity
Not Before: Jun 13 16:00:17 2026 GMT
Not After : Jun 14 16:00:17 2026 GMT
Subject: CN=25f21b55e26b4fd5975603ddeaaa9d3a67d7a3f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8d:b4:b1:e7:39:c9:12:8b:b4:4f:2f:48:e9:
ff:48:de:62:36:44:66:c1:9e:24:e3:0c:e6:b7:48:
31:00:22:4f:f4:97:27:1d:ae:cb:3d:5b:b6:a7:89:
36:fc:c8:77:d8:68:fc:2a:8f:40:be:49:13:84:22:
38:bc:7b:43:b9:08:30:91:75:60:b8:4e:4e:a0:c1:
42:ed:c8:d9:95:37:d4:fe:57:8d:fb:f4:29:ef:24:
bb:4f:be:16:07:a5:25:71:c9:56:62:8f:1e:63:b6:
aa:e9:99:62:8a:6d:a6:60:85:47:17:3a:a4:19:22:
7d:c6:b0:31:33:9e:14:fc:22:25:0f:10:f9:aa:1c:
24:49:a5:47:2d:ac:ef:fa:de:ea:6e:a4:22:58:a7:
a8:54:ed:e5:48:24:f1:d7:33:36:e5:f3:be:3d:15:
a5:a4:ee:ca:7c:29:af:a1:f2:ff:75:9b:7e:f5:24:
77:0b:70:ae:8a:3b:2e:76:e2:62:8b:bb:3e:ca:e3:
79:a7:ec:47:53:a9:62:c0:04:be:94:5f:0f:70:67:
f4:dd:12:6b:ce:8a:8e:42:78:22:cd:75:94:90:e7:
5f:7e:4f:d0:47:7a:5a:54:d3:67:eb:6c:06:2b:d0:
a0:43:89:16:1a:7d:44:34:a6:11:03:4d:d5:28:9a:
34:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:F2:1B:55:E2:6B:4F:D5:97:56:03:DD:EA:AA:9D:3A:67:D7:A3:F9
X509v3 Authority Key Identifier:
keyid:65:43:6F:68:B8:DC:E1:97:7F:59:5B:7A:12:2B:31:EC:E0:FD:C9:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZUNvaLjc4Zd_WVt6Eisx7OD9yWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/043544-80e7-4486-bec4-aaf6e13410f5/1/ZUNvaLjc4Zd_WVt6Eisx7OD9yWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/043544-80e7-4486-bec4-aaf6e13410f5/1/ZUNvaLjc4Zd_WVt6Eisx7OD9yWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:18:61:c8:9a:1b:9f:9e:32:b2:3a:5a:25:21:43:6b:e7:31:
5b:17:af:2a:51:72:a4:1f:56:4b:86:20:60:49:34:71:cc:c3:
c0:dc:d4:58:7f:a3:25:dd:99:f9:67:43:8f:50:fc:90:3d:90:
a1:33:71:08:4d:89:3f:06:e9:85:f9:7b:6b:b1:78:a7:f3:c9:
1b:c8:a5:52:df:ee:70:f2:4f:85:c2:37:82:7d:de:6c:23:d7:
61:d2:9f:8f:0b:65:c8:ad:6a:09:c6:40:ea:d6:29:31:10:ca:
52:dd:4a:51:4c:65:af:ee:a7:1b:46:6e:09:cb:99:d9:8d:a3:
25:27:d2:8a:46:77:ab:00:d1:0a:41:83:4e:2c:c4:6a:8c:42:
1b:bd:8f:b2:f7:8f:26:b4:19:bf:b5:c2:d7:c0:0e:17:1b:f3:
7a:f8:10:4a:5e:51:9e:cb:26:44:1e:cd:06:1a:6a:89:57:15:
5c:54:b4:fd:29:9f:fb:3e:56:88:82:67:92:f9:9c:a5:60:3a:
75:83:97:af:de:3d:aa:25:02:47:88:92:2c:6e:7d:94:ae:75:
76:b0:40:8d:6f:ea:30:9b:95:4c:9c:3d:54:e2:2d:8e:98:9c:
09:fd:ec:37:f8:8e:48:19:54:ad:52:bd:85:64:1a:c3:00:2a:
1f:fa:dd:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:52:09 2026 by rpki-client