Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.mft
File: cZSbR98xPLq5RS2pj8xjdgipCb0.mft (raw, json)
Hash identifier: RzednL4AMAzXTbejIpAQUmkv01L547hhCEPtgVO3gsk=
Subject key identifier: 5B:60:8E:B0:37:5D:12:F0:30:91:BB:B2:55:28:EE:36:88:A3:28:56
Authority key identifier: 71:94:9B:47:DF:31:3C:BA:B9:45:2D:A9:8F:CC:63:76:08:A9:09:BD
Certificate issuer: /CN=71949b47df313cbab9452da98fcc637608a909bd
Certificate serial: 019EC3A4F6DF77FEB7BE9E9E90D8E2CBAC94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cZSbR98xPLq5RS2pj8xjdgipCb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.mft
Manifest number: 197E
Signing time: Sun 14 Jun 2026 01:00:28 +0000
Manifest this update: Sun 14 Jun 2026 01:00:28 +0000
Manifest next update: Mon 15 Jun 2026 01:00:28 +0000
Files and hashes: 1: 4QGNMsc5EGKo58Zw8Ral2zodI2I.roa (hash: YULKFII3+bo9JTIVj/N+lbxzQak7k1SW83B1ho5/0B8=)
2: 7nQSU3KcKFGzNpk1S9m7Pg_R3QA.roa (hash: hhvez6L7iOSamemiziLCMKx9JI55MAZ7ghp/mQWgqbI=)
3: cZSbR98xPLq5RS2pj8xjdgipCb0.crl (hash: jT4ZHJ2HOeMPap81T06IVO5FtZfwX/e+Dy1H6luUo5k=)
4: iqsTReQX-wslFa4ZJjVVBZ1O16I.roa (hash: HHgLFIJy8JtakXSElLjUicZ/9YwRa/+1lz1+D14ujGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cZSbR98xPLq5RS2pj8xjdgipCb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:a4:f6:df:77:fe:b7:be:9e:9e:90:d8:e2:cb:ac:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71949b47df313cbab9452da98fcc637608a909bd
Validity
Not Before: Jun 14 01:00:28 2026 GMT
Not After : Jun 15 01:00:28 2026 GMT
Subject: CN=5b608eb0375d12f03091bbb25528ee3688a32856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:d0:8e:fc:f3:29:b8:b2:9d:53:52:95:0a:05:
c2:6e:a6:40:81:87:40:35:26:63:2f:ae:3f:72:ac:
24:5d:42:7a:b9:57:39:29:9b:59:b7:56:6d:66:fd:
33:59:f5:6a:db:dc:b1:47:c4:6c:0f:18:59:10:31:
fb:15:fe:e6:39:5d:0a:22:c1:86:64:c5:19:ef:b3:
91:9b:2b:d1:1e:64:54:7e:00:32:bc:ca:d5:40:f0:
c3:a3:c1:26:5a:be:64:fa:0b:ca:d2:97:77:0d:a8:
9b:91:10:4c:94:6d:a3:99:35:aa:36:1d:7b:9c:40:
79:81:f4:c3:c8:38:01:95:9b:39:01:16:73:11:2c:
4c:94:7d:43:40:07:27:e7:95:9c:f8:48:a4:e0:88:
47:2c:d3:f4:6e:6b:d1:f1:ec:80:17:5e:67:99:ff:
5c:05:9f:4d:36:ba:c2:4b:d0:5a:bc:a4:0f:12:e6:
53:d4:05:86:80:ad:c2:f3:5d:3b:78:db:49:7d:64:
de:06:f2:eb:a3:d9:17:ec:a0:40:cc:64:3e:89:1f:
00:9e:81:79:2c:18:31:ef:65:25:d3:c7:91:a5:9a:
b5:f4:dd:15:a9:17:01:a8:5b:a1:b7:8e:10:d3:f9:
95:59:81:cb:a0:74:22:11:c4:0a:fe:66:c0:24:c9:
99:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:60:8E:B0:37:5D:12:F0:30:91:BB:B2:55:28:EE:36:88:A3:28:56
X509v3 Authority Key Identifier:
keyid:71:94:9B:47:DF:31:3C:BA:B9:45:2D:A9:8F:CC:63:76:08:A9:09:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cZSbR98xPLq5RS2pj8xjdgipCb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:ed:c1:79:b8:79:57:c0:10:29:ce:fa:35:a6:49:b0:da:48:
85:50:eb:51:9d:6f:03:7a:1c:30:74:7c:b1:30:9a:53:3e:a8:
2d:0b:ee:f6:40:90:3a:f9:0f:21:fc:16:6d:58:b5:5a:5d:b1:
1c:aa:7c:34:cf:cc:b7:b5:c9:55:0b:f5:54:fd:52:49:1e:75:
69:d0:99:2e:1c:af:e7:98:92:b4:8c:b6:ef:6e:ff:17:d2:2c:
92:53:2d:e0:9d:aa:b3:34:dc:f7:a1:b1:37:f4:9f:68:3d:54:
b8:e0:9f:ef:c5:65:aa:19:f9:3f:24:af:96:7f:d1:49:af:58:
d5:5f:e5:27:56:d8:11:1e:bf:9a:8b:20:88:5d:53:ee:88:43:
20:98:bd:ea:1d:53:1f:bc:90:9b:1d:cd:6b:60:ae:ad:cf:fc:
1d:78:1c:ec:70:0a:8a:b3:2d:8b:4b:3d:fa:bc:ce:82:23:b5:
b7:6b:7e:f5:13:09:9e:41:68:21:28:8c:72:27:b3:5c:5e:0c:
c4:7c:be:13:6b:63:6d:e8:d8:01:c4:7f:83:37:27:23:47:b2:
57:60:c8:f1:ae:39:e4:91:7d:c6:d2:38:8a:f4:2c:aa:85:90:
b1:3c:b6:07:97:30:30:4e:57:06:60:8b:c2:40:ad:46:1c:0c:
3f:c2:7e:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:02:00 2026 by rpki-client