Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/27cbd0-a7b9-45fb-9954-78d1144ad967/1/zl1FYESPeKTc3LeRoH2tIWOgjN8.mft
File: zl1FYESPeKTc3LeRoH2tIWOgjN8.mft (raw, json)
Hash identifier: n9+ph1FadkyhOTSbAwtbRzgE4RtPzWnFq6oaOrjg3a4=
Subject key identifier: 99:B7:F2:0E:7F:AD:8F:37:2F:04:5A:0C:42:34:E3:A5:91:E9:D0:74
Authority key identifier: CE:5D:45:60:44:8F:78:A4:DC:DC:B7:91:A0:7D:AD:21:63:A0:8C:DF
Certificate issuer: /CN=ce5d4560448f78a4dcdcb791a07dad2163a08cdf
Certificate serial: 019E1F10C58A4B1C5A41F21AADDECFE83D3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zl1FYESPeKTc3LeRoH2tIWOgjN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/27cbd0-a7b9-45fb-9954-78d1144ad967/1/zl1FYESPeKTc3LeRoH2tIWOgjN8.mft
Manifest number: 189A
Signing time: Wed 13 May 2026 02:00:53 +0000
Manifest this update: Wed 13 May 2026 02:00:53 +0000
Manifest next update: Thu 14 May 2026 02:00:53 +0000
Files and hashes: 1: kJTuRCvouXJMaVDF0pdJUxYymkE.roa (hash: u4BkMutspCjtHl2p10ecFJYI7igX5XDffjXXKmzdde8=)
2: zl1FYESPeKTc3LeRoH2tIWOgjN8.crl (hash: 4NLaLRi2tyNx1axjqcyrG1DGfSyCNUzNDTXIHYLCMNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/27cbd0-a7b9-45fb-9954-78d1144ad967/1/zl1FYESPeKTc3LeRoH2tIWOgjN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/27cbd0-a7b9-45fb-9954-78d1144ad967/1/zl1FYESPeKTc3LeRoH2tIWOgjN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zl1FYESPeKTc3LeRoH2tIWOgjN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 02:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:10:c5:8a:4b:1c:5a:41:f2:1a:ad:de:cf:e8:3d:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce5d4560448f78a4dcdcb791a07dad2163a08cdf
Validity
Not Before: May 13 02:00:53 2026 GMT
Not After : May 14 02:00:53 2026 GMT
Subject: CN=99b7f20e7fad8f372f045a0c4234e3a591e9d074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:bc:70:73:15:f5:5c:a2:1f:8d:1b:d6:eb:d4:
c3:d3:7b:ea:6b:8a:6d:9d:92:d4:c6:ed:ad:5b:71:
57:45:76:bb:e3:ae:5e:23:59:7a:29:91:23:eb:69:
cc:ed:bc:aa:bf:94:c9:56:00:e5:cd:63:a5:2d:c3:
ec:cc:cb:6b:2f:e3:aa:7c:95:e7:00:e9:f2:89:85:
98:ca:9b:80:8b:d7:08:84:8e:bc:5a:a0:1b:4b:58:
31:21:c7:74:7c:09:19:a4:28:da:48:eb:8e:59:2d:
c3:28:fd:28:59:0c:c2:bf:88:38:d0:a6:39:f5:54:
a5:fd:cd:46:df:dd:ad:2a:7f:41:cd:36:61:f1:e3:
84:e4:71:a4:11:61:c9:31:2a:00:bf:a4:94:3c:79:
37:a7:dc:c0:8b:74:c5:5d:cc:cd:65:88:f6:d5:fa:
e0:a0:09:3f:06:ab:24:05:6b:8e:e9:5f:e2:d6:06:
d8:99:24:94:e1:29:f9:8b:86:28:03:79:5a:4a:cd:
f3:c4:b6:27:03:18:0d:44:3a:0c:76:b9:42:05:80:
91:49:03:ba:ee:a2:06:b3:ed:0f:0b:f2:9a:39:20:
e3:25:62:14:37:67:0b:e8:88:45:03:f2:5e:1c:cd:
b0:47:9f:3c:dc:0b:3f:41:a6:e1:9e:6c:4c:46:81:
1d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:B7:F2:0E:7F:AD:8F:37:2F:04:5A:0C:42:34:E3:A5:91:E9:D0:74
X509v3 Authority Key Identifier:
keyid:CE:5D:45:60:44:8F:78:A4:DC:DC:B7:91:A0:7D:AD:21:63:A0:8C:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zl1FYESPeKTc3LeRoH2tIWOgjN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/27cbd0-a7b9-45fb-9954-78d1144ad967/1/zl1FYESPeKTc3LeRoH2tIWOgjN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/27cbd0-a7b9-45fb-9954-78d1144ad967/1/zl1FYESPeKTc3LeRoH2tIWOgjN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:35:6d:96:d8:3c:40:0c:e1:8b:6d:d1:c3:11:5e:2b:d6:ef:
93:b1:ca:ad:90:e0:48:2a:4f:1d:57:5c:0c:b8:29:6a:81:f8:
b8:9b:fc:38:90:88:d2:65:ba:2a:e1:98:5b:54:e2:a2:52:bb:
d4:41:6e:69:83:f8:57:31:a2:82:22:09:94:e1:c9:5b:fe:a3:
79:96:30:ae:de:ed:63:26:b2:8f:11:f2:05:cd:cc:84:fb:4d:
06:2a:4e:da:98:32:c9:28:ef:f1:d4:9c:91:a7:bf:32:ad:0e:
0f:8a:48:9b:f7:e4:f4:1c:04:6c:e8:90:8e:59:e2:02:5e:51:
a3:d8:65:c9:5c:cf:84:3d:00:db:54:51:34:2d:f9:a5:41:e5:
05:7b:e5:e7:e2:40:76:19:48:7a:0a:17:65:be:99:18:f9:6f:
a0:ca:72:e7:21:58:6e:ca:f0:f9:56:c2:7f:63:58:75:2b:52:
4f:1a:4b:ea:8f:f7:ab:48:31:02:79:d6:94:e2:8d:89:ae:7b:
a6:35:6a:a4:cd:ae:96:90:c6:fe:fd:5f:ce:20:6f:39:7e:4e:
f3:8e:23:d0:2b:d3:e0:a6:e1:6c:ef:38:a8:97:ab:03:14:ce:
2c:26:10:92:e2:12:61:ce:31:88:90:cf:63:76:a4:d4:9e:96:
81:43:bc:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:44:21 2026 by rpki-client