Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.mft
File: ZJn3HhXA84zrolfTAwTtRL6ofFA.mft (raw, json)
Hash identifier: qk1E3WDyEGPmQH59NssXuKb3s2lxaV7PjlvUPH7fH4k=
Subject key identifier: 64:B8:D9:EE:63:38:1A:45:1A:47:A3:66:E9:A2:25:A2:97:93:F1:90
Authority key identifier: 64:99:F7:1E:15:C0:F3:8C:EB:A2:57:D3:03:04:ED:44:BE:A8:7C:50
Certificate issuer: /CN=6499f71e15c0f38ceba257d30304ed44bea87c50
Certificate serial: 019E1F483E7B13AD50AB56D566CC7B12E9FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZJn3HhXA84zrolfTAwTtRL6ofFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.mft
Manifest number: 1905
Signing time: Wed 13 May 2026 03:01:28 +0000
Manifest this update: Wed 13 May 2026 03:01:28 +0000
Manifest next update: Thu 14 May 2026 03:01:28 +0000
Files and hashes: 1: ZJn3HhXA84zrolfTAwTtRL6ofFA.crl (hash: b1sLDbcAYd4S5ZCSHa27sU3D2OhMWMDl0JjjmXV7hzg=)
2: jq3mq-50R-JOu-sxSGPaEm55e08.roa (hash: taGtXrf0l3O9eeA97Wyzm9CoWyPxNXpqgCP99+lV8Hk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZJn3HhXA84zrolfTAwTtRL6ofFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 03:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:48:3e:7b:13:ad:50:ab:56:d5:66:cc:7b:12:e9:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6499f71e15c0f38ceba257d30304ed44bea87c50
Validity
Not Before: May 13 03:01:28 2026 GMT
Not After : May 14 03:01:28 2026 GMT
Subject: CN=64b8d9ee63381a451a47a366e9a225a29793f190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:8f:29:5e:d4:71:d4:57:45:b4:7e:4e:ab:51:
15:5b:62:eb:5d:33:f6:8d:ab:b0:1d:8a:65:8d:f2:
9e:8c:f6:dc:73:2b:9a:3e:3f:2a:30:a5:74:57:a2:
2b:4f:17:7d:0f:da:f2:31:c0:a8:ff:11:12:ba:07:
0f:5b:15:ce:e4:d4:fe:83:00:91:3a:f2:72:b8:36:
40:ab:ab:8f:e9:9f:a8:0f:5d:5a:fa:9e:31:74:37:
a6:78:3a:32:d0:71:ce:af:17:8b:38:5f:01:0c:a1:
73:f1:51:f1:b6:45:03:70:b6:78:0b:58:03:eb:6d:
02:21:ca:94:f9:38:05:8f:88:d8:d3:f2:02:da:bb:
08:b9:4a:4d:b0:1b:9c:cb:01:74:b6:26:1a:03:57:
98:84:3a:06:81:7c:87:02:3f:cf:de:66:60:ee:e2:
5e:07:4a:19:10:fa:a0:52:69:85:0f:86:df:1d:19:
ea:f2:f5:46:eb:a8:39:fd:bf:1e:98:47:ce:3e:d4:
7d:11:da:12:ec:bb:7f:b5:9a:e6:ed:86:1d:d4:2d:
2c:0f:18:70:43:4b:4f:e3:8e:3e:87:71:9e:61:f7:
5b:52:88:fc:a2:c1:a8:c0:30:fd:aa:0c:8d:1d:df:
78:00:ea:ad:e7:38:d0:74:40:60:d8:6e:f1:fe:4b:
14:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:B8:D9:EE:63:38:1A:45:1A:47:A3:66:E9:A2:25:A2:97:93:F1:90
X509v3 Authority Key Identifier:
keyid:64:99:F7:1E:15:C0:F3:8C:EB:A2:57:D3:03:04:ED:44:BE:A8:7C:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZJn3HhXA84zrolfTAwTtRL6ofFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:7b:85:bd:d4:01:82:43:03:96:b9:32:b2:a8:d1:4e:87:15:
e2:d7:64:b6:69:92:01:7e:19:6c:a4:4c:a7:e6:af:9c:89:59:
93:a3:99:23:fc:23:d5:a6:52:40:82:2f:80:6a:47:50:17:60:
cb:03:e2:96:23:d7:97:58:01:2f:19:2c:68:c3:dd:57:35:f9:
9a:68:7d:0a:93:e7:08:6c:8c:f1:3a:16:dc:47:de:34:a4:f8:
f6:48:32:9a:d7:91:8e:1f:33:49:ae:46:6c:fb:c6:4f:e4:ad:
8e:5c:95:08:29:33:53:ba:96:38:f0:0a:b8:f7:9d:d0:0e:4e:
a9:fa:2e:31:d8:3a:22:24:5f:a1:75:40:9b:05:d5:a6:6e:9f:
71:94:0d:a9:d9:3e:eb:b7:c6:b8:a4:b0:3f:b5:9a:48:55:3a:
f2:39:4b:99:96:18:3c:9b:12:82:c7:f7:f1:91:00:af:f8:77:
00:74:eb:8a:83:7d:ad:68:66:15:d1:b9:0f:69:3c:6e:ca:26:
89:95:b4:cd:47:2b:8d:7e:48:f8:e1:b3:66:b0:ac:8f:44:59:
ab:45:26:77:78:dd:2a:9c:b3:84:a1:02:93:00:83:c8:3d:59:
35:e0:e4:e8:e8:08:0d:2f:eb:be:47:48:c4:35:e7:37:34:f4:
00:38:dc:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:47:55 2026 by rpki-client