Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/8d6f1a-d334-418f-b726-6f5d8a74a0e4/1/ZKemzVg4FNOTvuJjW1RVdMx1Ygw.mft
File: ZKemzVg4FNOTvuJjW1RVdMx1Ygw.mft (raw, json)
Hash identifier: ZjFLDWYxVt3ATkcchdm28wKCwZNICatxxXXJvL+F0ms=
Subject key identifier: 68:99:6C:41:AD:77:4F:C5:C6:7D:58:B5:CC:F4:17:16:F7:14:B0:13
Authority key identifier: 64:A7:A6:CD:58:38:14:D3:93:BE:E2:63:5B:54:55:74:CC:75:62:0C
Certificate issuer: /CN=64a7a6cd583814d393bee2635b545574cc75620c
Certificate serial: 019EC0A3AC8B60AD7BA4039B8A8FEF109E70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZKemzVg4FNOTvuJjW1RVdMx1Ygw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/8d6f1a-d334-418f-b726-6f5d8a74a0e4/1/ZKemzVg4FNOTvuJjW1RVdMx1Ygw.mft
Manifest number: 158D
Signing time: Sat 13 Jun 2026 11:00:12 +0000
Manifest this update: Sat 13 Jun 2026 11:00:12 +0000
Manifest next update: Sun 14 Jun 2026 11:00:12 +0000
Files and hashes: 1: EsvahZdQZVhluZsLSr98J_sMDK4.roa (hash: DNS5SQ17LOTRnwWYUw1eb+IWwNLBZu1qV/4r+8SuduY=)
2: ZKemzVg4FNOTvuJjW1RVdMx1Ygw.crl (hash: RK3digkZQQ9Ua1qEvBW5jozzGJWEChgEqL3/Aoc404k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/8d6f1a-d334-418f-b726-6f5d8a74a0e4/1/ZKemzVg4FNOTvuJjW1RVdMx1Ygw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/8d6f1a-d334-418f-b726-6f5d8a74a0e4/1/ZKemzVg4FNOTvuJjW1RVdMx1Ygw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZKemzVg4FNOTvuJjW1RVdMx1Ygw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:a3:ac:8b:60:ad:7b:a4:03:9b:8a:8f:ef:10:9e:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64a7a6cd583814d393bee2635b545574cc75620c
Validity
Not Before: Jun 13 11:00:12 2026 GMT
Not After : Jun 14 11:00:12 2026 GMT
Subject: CN=68996c41ad774fc5c67d58b5ccf41716f714b013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9d:fb:e8:92:a7:75:5f:9e:c7:62:87:80:dd:
12:21:f7:e8:f9:b6:fa:cc:4e:13:8f:2b:01:6e:0e:
69:af:bb:66:8c:08:c8:a8:9d:dc:25:48:09:5b:1b:
0d:19:34:4e:4d:dc:8e:50:7a:5f:84:cd:e1:8a:30:
df:b8:69:21:11:39:12:bd:5c:16:7a:0d:a5:75:9a:
df:14:12:92:c1:3d:75:a3:74:87:a6:88:7b:21:4b:
1f:e1:2c:a4:36:78:5e:92:ee:87:4c:ce:36:2b:cc:
39:e3:9b:05:80:24:ca:d6:06:7f:a0:1a:13:66:31:
4d:25:4f:31:58:1f:d9:49:50:c0:90:1e:18:6c:74:
d5:f8:7b:4c:b7:b2:f1:ff:73:f7:47:41:cc:fc:c8:
da:ca:aa:59:82:bd:64:98:cb:ec:07:cc:ca:08:55:
1d:91:e0:88:b8:f3:e1:23:13:b0:ca:30:44:8e:2a:
bb:66:cc:69:f3:e4:8c:1a:8a:4f:13:56:10:20:55:
43:5a:76:bd:b6:9f:ca:d2:28:c9:b2:6f:53:d5:29:
d9:ab:98:34:9a:b7:a2:6c:55:b8:65:a1:6e:87:3d:
97:b6:99:a3:64:28:34:fb:e5:7f:87:27:bf:63:6a:
16:28:0b:6e:9e:9a:2f:2a:e4:20:dd:12:d1:b0:da:
2f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:99:6C:41:AD:77:4F:C5:C6:7D:58:B5:CC:F4:17:16:F7:14:B0:13
X509v3 Authority Key Identifier:
keyid:64:A7:A6:CD:58:38:14:D3:93:BE:E2:63:5B:54:55:74:CC:75:62:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZKemzVg4FNOTvuJjW1RVdMx1Ygw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/8d6f1a-d334-418f-b726-6f5d8a74a0e4/1/ZKemzVg4FNOTvuJjW1RVdMx1Ygw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/8d6f1a-d334-418f-b726-6f5d8a74a0e4/1/ZKemzVg4FNOTvuJjW1RVdMx1Ygw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:a5:b9:e2:c2:9a:3e:61:d3:c8:bb:ad:33:aa:4c:e8:b9:78:
69:10:43:55:89:e4:a2:c9:ec:ae:b8:63:bd:57:06:e6:c2:52:
7e:9c:94:fa:cf:58:e8:58:c0:15:87:39:6a:ff:e2:db:74:14:
45:69:4c:0c:81:9b:6e:79:60:1e:4a:66:5e:f2:f4:47:4f:e4:
96:ee:9a:4f:0b:73:99:34:8a:f0:2e:36:1e:a5:54:40:8c:b8:
21:4f:5c:51:96:bc:81:4b:50:50:fd:58:98:d2:64:fa:7d:81:
bc:c5:36:79:1e:c8:73:51:51:19:27:9e:ee:00:39:20:3d:fc:
32:bf:33:f3:b8:71:87:a3:b4:a6:21:f7:c2:d7:42:d9:3b:4e:
3e:19:b6:e3:b1:a7:21:44:d6:f9:21:f6:b6:96:f2:3a:3e:d0:
c4:a0:9c:49:70:3a:3a:4c:dc:2f:0c:43:9a:3f:c4:61:cc:a7:
11:89:70:f2:5f:15:79:d7:4d:91:be:87:6f:04:09:f7:74:25:
8a:c1:37:36:b0:60:5d:ac:5d:72:a8:36:5d:09:fb:b9:69:d9:
00:dd:6f:e2:c3:39:e4:fe:79:ca:f4:23:8b:10:2d:17:14:ed:
b7:f6:98:3b:09:aa:ee:04:eb:2d:f8:9d:8e:1b:af:e2:f5:a2:
39:92:7c:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:08:04 2026 by rpki-client