Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft
File: ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft (raw, json)
Hash identifier: VMYeF2SguyUQOSQkZnZ9EFMGsa75mmuVRVC1EU+YfWI=
Subject key identifier: 89:CE:32:28:00:02:80:75:E2:4D:BF:FA:BB:6E:86:C5:E3:00:B7:A6
Authority key identifier: 65:4D:96:67:2A:59:EC:38:95:FC:15:84:7A:CA:1B:29:DB:79:12:44
Certificate issuer: /CN=654d96672a59ec3895fc15847aca1b29db791244
Certificate serial: 019EBF240915C8C328670F5408C91D3BD2B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZU2WZypZ7DiV_BWEesobKdt5EkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft
Manifest number: 08DC
Signing time: Sat 13 Jun 2026 04:01:10 +0000
Manifest this update: Sat 13 Jun 2026 04:01:10 +0000
Manifest next update: Sun 14 Jun 2026 04:01:10 +0000
Files and hashes: 1: Utc_slWR8yHDk290AryGYchTlYA.roa (hash: NUCfh9s0WjqwyOFskJUWEakWr/HjDtF3kDLbwsne7Ro=)
2: ZU2WZypZ7DiV_BWEesobKdt5EkQ.crl (hash: sHbpYT22y6W5SVYurU+E1Su8UjFnd0IpuNpiBt4mkHw=)
3: zynEh3pPdQY3KJQVgvhOsaYxciw.roa (hash: rOMrg3wVXzNicfVb9K/t1LGxhcGrIWejZTOsjk80vqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZU2WZypZ7DiV_BWEesobKdt5EkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 04:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:24:09:15:c8:c3:28:67:0f:54:08:c9:1d:3b:d2:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=654d96672a59ec3895fc15847aca1b29db791244
Validity
Not Before: Jun 13 04:01:10 2026 GMT
Not After : Jun 14 04:01:10 2026 GMT
Subject: CN=89ce322800028075e24dbffabb6e86c5e300b7a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:ec:aa:58:3d:51:6c:38:ab:d8:11:50:0d:a3:
a8:e4:a8:b8:38:6a:58:e7:8a:3f:47:0b:c4:0c:18:
c5:af:14:70:06:eb:2d:4c:91:7f:ad:1b:81:96:f2:
42:eb:95:8f:6f:99:b8:cf:14:b9:45:a6:70:42:cd:
f2:41:f1:d8:db:f9:0f:23:ef:ee:a7:88:45:5f:68:
81:c6:27:65:13:a8:df:56:df:66:e3:b7:da:fc:78:
f7:66:7e:f2:a9:d7:d1:a2:bf:d5:e2:86:f2:df:e8:
3c:df:8d:c9:da:2a:1b:0d:53:bc:35:b8:a0:cd:7f:
f6:a3:0c:74:d0:cb:a4:c4:25:d5:03:11:bf:b3:2a:
a9:8a:d8:8f:b1:91:84:fc:ef:7e:90:97:22:15:7d:
42:04:85:74:b5:73:bf:8e:fb:46:88:36:a6:77:ab:
a1:fb:b2:d2:b5:57:c8:21:14:93:f1:5d:fe:34:01:
99:67:3e:64:a2:96:43:8e:81:b4:1c:76:68:9f:9e:
a7:78:67:fc:6e:de:47:43:2f:39:2c:21:03:b2:4c:
1a:de:b2:ed:cb:4f:b7:e5:3b:1f:72:60:3a:66:83:
bc:5c:f9:17:ed:c5:1a:14:9b:1d:0d:d2:83:0c:6c:
3e:44:5f:53:4f:be:5c:ee:27:34:30:08:7d:ca:8e:
05:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:CE:32:28:00:02:80:75:E2:4D:BF:FA:BB:6E:86:C5:E3:00:B7:A6
X509v3 Authority Key Identifier:
keyid:65:4D:96:67:2A:59:EC:38:95:FC:15:84:7A:CA:1B:29:DB:79:12:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZU2WZypZ7DiV_BWEesobKdt5EkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:ef:ed:2f:92:81:f6:af:d8:64:1c:a7:98:cf:80:2e:bb:de:
9c:4e:73:3b:0a:11:da:b0:83:36:63:62:f4:e0:cd:18:c5:ce:
e6:bb:b6:a5:e2:b9:9a:16:3f:46:44:d6:f3:3e:f8:15:21:ac:
0e:ba:9b:36:41:07:84:55:69:66:ba:25:1e:e1:0b:d2:9c:7d:
db:08:1c:46:03:5a:be:a4:fe:50:15:04:97:9a:95:0f:8e:ec:
5c:54:7f:49:b3:d7:dc:ac:c8:5f:14:3f:cf:ff:9d:c9:7d:2d:
68:d0:6c:93:9d:46:b7:e2:01:8c:63:a2:ae:ca:57:1f:97:eb:
ae:34:6c:cd:33:8f:ba:98:0b:9b:e1:28:71:b9:5a:08:e4:91:
5e:90:7d:d5:27:76:5a:08:a4:50:78:43:5a:14:a9:dd:9b:b3:
9f:93:81:d5:60:ed:62:31:6c:f6:8f:ee:60:94:96:b7:e1:80:
cf:76:85:17:d4:e0:e8:93:14:c0:29:7d:d2:29:f4:d2:97:ac:
0b:ab:cb:d2:1f:5a:d7:90:16:a5:9f:78:b9:7c:90:d1:f2:8e:
35:a1:5f:25:87:8c:dc:ee:ff:18:f5:24:f9:36:16:26:22:80:
22:57:4b:46:7c:95:85:d5:c2:5a:0b:e4:96:42:a9:7b:0c:3f:
89:02:1b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:15:01 2026 by rpki-client