Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.mft
File: mZ333A7VGPHsaZdM-YzsqtoahoA.mft (raw, json)
Hash identifier: Xm5RLNm84UvtkeJ8h42c4063ssMiWK47Ne92xc6SbHU=
Subject key identifier: 25:52:D8:BE:76:6B:0B:60:08:91:F8:13:19:82:27:1B:4A:7D:41:0E
Authority key identifier: 99:9D:F7:DC:0E:D5:18:F1:EC:69:97:4C:F9:8C:EC:AA:DA:1A:86:80
Certificate issuer: /CN=999df7dc0ed518f1ec69974cf98cecaada1a8680
Certificate serial: 019EC25C094D00A02FA249BAF5F3BB39495C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mZ333A7VGPHsaZdM-YzsqtoahoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.mft
Manifest number: 1972
Signing time: Sat 13 Jun 2026 19:01:12 +0000
Manifest this update: Sat 13 Jun 2026 19:01:12 +0000
Manifest next update: Sun 14 Jun 2026 19:01:12 +0000
Files and hashes: 1: I4TuqjOm1C2zDBl84QYwRusdbW4.roa (hash: 6Cy0hcq0lmTjssRip5hhqeI88aZGCGL9orwx2vFNpm0=)
2: mZ333A7VGPHsaZdM-YzsqtoahoA.crl (hash: 0QKiVYGF+XgYXR9tR5xR0aeevwcMJv+RcCikIIh5BXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mZ333A7VGPHsaZdM-YzsqtoahoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:5c:09:4d:00:a0:2f:a2:49:ba:f5:f3:bb:39:49:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=999df7dc0ed518f1ec69974cf98cecaada1a8680
Validity
Not Before: Jun 13 19:01:12 2026 GMT
Not After : Jun 14 19:01:12 2026 GMT
Subject: CN=2552d8be766b0b600891f8131982271b4a7d410e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:3d:23:41:ea:ae:b1:47:52:94:2d:0f:22:bf:
0c:a7:38:85:7c:a4:90:da:94:87:7c:b4:a8:0f:32:
8e:25:4b:53:30:b9:f0:a2:01:4c:d8:e6:46:da:79:
bf:99:f8:d1:13:46:b0:a3:19:89:2d:4c:97:2c:e2:
3a:11:fd:5f:4b:b2:4f:99:db:fb:7a:81:9b:e5:65:
db:4c:71:b9:2d:63:b4:59:6f:12:8e:ca:a2:f6:93:
5f:a1:02:79:81:f2:9f:89:01:36:a7:44:4d:55:de:
60:e6:68:5c:fb:58:ca:ef:75:a3:7e:43:69:19:38:
74:a6:99:53:b2:7a:29:8b:04:54:86:d0:4f:30:22:
26:17:dd:03:ac:12:f9:9d:41:24:f7:9d:61:21:74:
f5:8a:2f:02:54:e5:f2:8f:93:51:e0:ff:34:85:8c:
6b:d5:47:a9:2e:ee:d0:ce:cb:ce:52:de:b4:1d:e0:
6e:e4:d4:3c:f7:7c:cb:ff:b1:75:82:bc:43:75:f9:
ed:93:31:99:22:a0:1b:47:b5:bc:f4:72:46:a3:cb:
fb:5f:51:a3:6b:4b:76:03:e0:28:30:57:d2:8b:e3:
f5:bc:24:87:6d:4b:01:d7:34:78:87:c1:09:fd:a2:
4b:a2:1a:d2:1c:3c:aa:78:87:79:3b:79:e0:43:99:
ef:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:52:D8:BE:76:6B:0B:60:08:91:F8:13:19:82:27:1B:4A:7D:41:0E
X509v3 Authority Key Identifier:
keyid:99:9D:F7:DC:0E:D5:18:F1:EC:69:97:4C:F9:8C:EC:AA:DA:1A:86:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZ333A7VGPHsaZdM-YzsqtoahoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:2e:16:d2:63:7a:8f:5c:9b:96:1f:fe:2d:f4:6c:37:ff:36:
58:f1:2a:8e:2e:e5:12:e9:16:72:c3:dc:01:8e:c7:b2:36:b9:
e3:35:78:be:9f:60:5b:0d:cd:bd:d1:d9:77:2c:f4:29:4a:84:
f2:fe:a9:a8:55:ef:e6:7c:a9:ff:a6:95:5e:17:ae:14:98:27:
aa:e1:34:ef:d1:c1:39:b0:14:7c:2c:eb:52:ea:bc:10:09:8d:
63:c7:ca:3f:07:a0:e8:e5:5e:c0:74:b4:87:85:90:6f:32:90:
af:77:ca:82:56:19:88:22:e8:c9:d4:44:80:9f:27:f4:d1:20:
b0:50:de:52:60:d5:ea:f3:57:21:c1:b0:00:65:da:2f:d1:7c:
08:fe:e2:96:0d:e9:66:80:0f:ab:b2:cc:c5:d6:06:a1:e4:e2:
37:a2:5f:64:5d:77:aa:42:68:44:31:a9:5e:b0:38:5a:43:57:
85:37:cb:95:12:34:d7:a5:2c:73:ba:00:28:6b:e0:0f:49:be:
bd:5a:69:fc:86:53:37:62:12:b1:17:31:64:27:94:b8:f6:c7:
2d:7e:e4:47:a1:41:87:8a:14:38:c6:54:3d:f2:4e:0a:51:f7:
b9:ac:64:de:0e:9b:9a:23:18:7a:21:bb:19:96:11:fe:38:64:
ca:54:8d:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:13:51 2026 by rpki-client