Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft
File: z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft (raw, json)
Hash identifier: u3fo6w738K08tzkKbbH/LNTE+yLVo7rsX9Sq8JrDkYs=
Subject key identifier: 34:33:92:EA:92:FB:D5:8D:B9:9B:59:27:CD:A2:BA:96:CC:F4:E6:7E
Authority key identifier: CF:5B:F0:F1:9A:99:4C:7F:68:6D:55:AB:FC:16:87:5D:39:E5:D4:E2
Certificate issuer: /CN=cf5bf0f19a994c7f686d55abfc16875d39e5d4e2
Certificate serial: 019E1F1193DA10E20BEAD03ECDFEE4CF4569
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z1vw8ZqZTH9obVWr_BaHXTnl1OI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft
Manifest number: 0628
Signing time: Wed 13 May 2026 02:01:46 +0000
Manifest this update: Wed 13 May 2026 02:01:46 +0000
Manifest next update: Thu 14 May 2026 02:01:46 +0000
Files and hashes: 1: VBl0vhkZ0p5h13VJMHzt2wrsQ7A.roa (hash: VVaZ8MZsUSIufXGhoXhGO0V1DGyl/LodpDCAxeW4mZ0=)
2: voKmqzxnpt1_Etyi16YW_6f_LiA.roa (hash: FSyRyjfIYpd8tAuhdZ0kMGNXftsQsnkKkGGZLUK2+XE=)
3: z1vw8ZqZTH9obVWr_BaHXTnl1OI.crl (hash: 4QvrOe5+cDK/5Fk05vCzBnV9GBfMVO/M0Qb5oZBVLu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft
rsync://rpki.ripe.net/repository/DEFAULT/z1vw8ZqZTH9obVWr_BaHXTnl1OI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:11:93:da:10:e2:0b:ea:d0:3e:cd:fe:e4:cf:45:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf5bf0f19a994c7f686d55abfc16875d39e5d4e2
Validity
Not Before: May 13 02:01:46 2026 GMT
Not After : May 14 02:01:46 2026 GMT
Subject: CN=343392ea92fbd58db99b5927cda2ba96ccf4e67e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:33:69:32:2b:e5:ab:9e:3e:de:05:a8:03:a2:
c8:2a:fe:4a:f9:f5:06:e3:1a:05:bf:57:2c:24:3f:
44:87:71:80:56:6c:91:92:8b:44:28:5a:11:8a:4c:
69:33:7b:a0:fb:aa:8c:cb:ed:da:68:90:f5:bb:08:
aa:a6:94:9e:c4:03:cf:ba:fb:9f:81:c1:da:11:5a:
bb:a6:32:55:a7:83:75:f3:c5:bc:02:91:48:2a:1c:
31:03:86:b5:3f:fd:da:12:db:2b:8f:9c:ac:4b:d9:
54:e8:b5:5d:11:ef:2d:0f:4b:e5:37:d1:02:c6:8f:
34:dd:23:e3:e5:40:c7:3e:f1:52:a0:c9:b5:84:6a:
da:76:cd:c0:29:92:34:71:75:10:74:07:7c:10:b7:
23:1c:46:9c:a2:f9:33:e1:15:60:51:28:6e:ee:8a:
b0:d4:84:df:ed:5d:e7:06:d8:06:9c:72:f6:fd:fc:
01:14:8c:ff:74:77:72:82:89:07:2d:25:70:b0:be:
af:e0:0e:39:cd:77:e2:42:51:34:50:43:57:d5:de:
f1:06:cf:94:f3:e4:52:f8:ac:98:ac:ba:83:b7:a7:
68:48:4d:49:4d:2a:fd:b6:d0:00:6d:c7:15:a5:87:
41:63:24:d6:10:6c:92:0d:82:66:a2:6d:79:35:9d:
d8:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:33:92:EA:92:FB:D5:8D:B9:9B:59:27:CD:A2:BA:96:CC:F4:E6:7E
X509v3 Authority Key Identifier:
keyid:CF:5B:F0:F1:9A:99:4C:7F:68:6D:55:AB:FC:16:87:5D:39:E5:D4:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z1vw8ZqZTH9obVWr_BaHXTnl1OI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:b2:88:41:dd:86:ad:72:8e:11:89:5b:7c:1d:77:6a:5a:9a:
c1:09:02:49:1e:59:d5:cf:62:b1:02:d2:14:72:31:7a:e7:4b:
f3:b5:4c:8e:6c:ee:65:64:fc:77:0f:c6:59:63:43:80:25:49:
a7:f9:fc:3c:5c:e9:c6:7d:77:88:73:b4:ee:14:ab:95:b6:43:
83:30:f8:52:f4:72:9b:f1:a2:3b:cc:3b:7c:bc:6c:20:2d:5f:
f5:ab:49:df:b8:e9:b6:79:a1:1e:fc:df:1a:63:be:1d:fd:19:
48:bd:f1:0b:f4:b8:b8:ae:63:a7:79:02:22:61:2b:df:a1:12:
36:b7:18:b9:d0:d7:36:a4:f9:3a:bb:5b:95:e8:df:3f:c1:f4:
7f:da:17:fe:e2:ee:f1:5b:63:41:4d:9e:6c:42:d5:12:a7:0d:
ad:73:28:ce:e4:d5:68:b8:ae:11:30:55:ec:4e:49:90:53:93:
65:a2:92:b8:bd:eb:b6:8c:4c:d1:06:46:42:25:fa:60:92:6e:
4a:f3:4f:2f:68:b2:a9:2a:70:ef:71:3d:9d:f2:66:57:d6:93:
ed:3e:8c:8a:78:0c:15:57:35:fa:0d:a7:3f:59:c0:d3:3e:e1:
a9:5b:2f:e1:d1:2e:b6:0a:7f:17:f0:07:56:13:0b:21:9c:34:
68:64:50:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:43:24 2026 by rpki-client