Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft
File: Zw5gd5881NA9XlB4QPX6KjGmq40.mft (raw, json)
Hash identifier: VXiAiBaXVdjQT9vbd7ywSkEftHJRgGigzQpZ+jpxLdo=
Subject key identifier: 60:C5:47:01:58:B6:42:3E:E8:2D:7E:91:DC:B5:EA:94:5B:2D:0A:67
Authority key identifier: 67:0E:60:77:9F:3C:D4:D0:3D:5E:50:78:40:F5:FA:2A:31:A6:AB:8D
Certificate issuer: /CN=670e60779f3cd4d03d5e507840f5fa2a31a6ab8d
Certificate serial: 019E20FF270FFF33E57E94B876039B7C1CB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zw5gd5881NA9XlB4QPX6KjGmq40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft
Manifest number: 0767
Signing time: Wed 13 May 2026 11:00:53 +0000
Manifest this update: Wed 13 May 2026 11:00:53 +0000
Manifest next update: Thu 14 May 2026 11:00:53 +0000
Files and hashes: 1: 99ql3Nj_XXqdJBUKyH1zSjprsmk.roa (hash: 8Q5g46XQnTAlgbAY9G1RdWl4ij89rLN6KeETKWp4UX4=)
2: UKvSxhXp6UeN9PA2d7zmzONW8dI.roa (hash: U2Kl3dxAuyKIqhwNvATcE57d94w+8GaKrGRAFwd2pQQ=)
3: Zw5gd5881NA9XlB4QPX6KjGmq40.crl (hash: gxpE3hCLT7UH2hFMez2putzZGH7YOrThDiI54jZ39K4=)
4: yGnTUZ-K5iZvv_QJlyjyr1Vifo0.roa (hash: 3NvMCRIYGPgbO9Y+3R7bmJF+C6D6NUF59+RrT9ZBe2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zw5gd5881NA9XlB4QPX6KjGmq40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:ff:27:0f:ff:33:e5:7e:94:b8:76:03:9b:7c:1c:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=670e60779f3cd4d03d5e507840f5fa2a31a6ab8d
Validity
Not Before: May 13 11:00:53 2026 GMT
Not After : May 14 11:00:53 2026 GMT
Subject: CN=60c5470158b6423ee82d7e91dcb5ea945b2d0a67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a0:1e:6e:64:97:53:b3:52:33:16:1e:96:43:
64:fd:c0:cc:55:cc:30:a2:d3:9d:8d:89:0c:5a:d9:
ce:18:64:7e:9e:2d:07:8a:b0:51:af:b6:88:c6:fd:
ec:6d:c9:48:ec:5f:5e:37:0a:db:b9:e0:50:be:c7:
a3:de:59:05:27:be:0a:76:c0:ab:f7:52:8b:2f:01:
3b:29:66:ad:a8:af:25:49:c7:b7:67:f8:85:4f:00:
cb:53:95:36:44:0e:c2:29:15:0c:9a:14:f1:e6:82:
84:41:24:d7:dd:dc:83:5f:de:5a:c8:53:b6:2f:6c:
47:7c:32:d0:49:17:0f:9b:bc:1f:5e:31:ed:0e:ff:
e4:e9:ed:ff:7d:5f:86:22:f5:03:cd:83:74:39:12:
a9:36:93:fa:b1:df:fa:c9:e8:c2:5f:da:ef:9c:61:
a1:6f:84:22:66:c6:92:fb:5e:32:ac:76:74:37:b3:
83:bb:73:3d:75:83:2c:ba:1f:7d:45:f4:a7:33:08:
50:65:a3:61:d4:ad:41:46:55:fa:cf:1a:21:34:aa:
d2:7d:77:b5:4a:d1:8c:3c:ea:67:de:01:13:ff:bd:
c7:da:a5:38:45:25:1b:c7:89:b8:8d:ec:27:9c:03:
46:7c:ad:a2:48:a0:96:11:a8:db:ff:f4:77:4e:c7:
f4:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:C5:47:01:58:B6:42:3E:E8:2D:7E:91:DC:B5:EA:94:5B:2D:0A:67
X509v3 Authority Key Identifier:
keyid:67:0E:60:77:9F:3C:D4:D0:3D:5E:50:78:40:F5:FA:2A:31:A6:AB:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zw5gd5881NA9XlB4QPX6KjGmq40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:93:61:f8:22:a3:50:2e:0a:5c:bb:98:af:a3:b0:43:96:43:
f5:f5:99:c7:0c:ee:4f:82:fa:2f:b1:6d:7c:ea:fa:9f:cf:ec:
f0:fc:40:72:37:69:9e:61:42:a5:f9:22:29:79:03:9d:bf:21:
09:67:d1:d9:38:e0:e5:7a:f1:e7:92:ba:fb:a0:18:7a:ee:ed:
c6:39:dc:a3:4a:f5:a8:fa:11:7e:59:86:bf:c0:5a:72:20:ae:
6d:2f:7b:8a:ba:1e:fd:b0:73:6f:67:59:b3:ef:d9:9d:c6:d6:
85:67:e2:bc:c2:6e:4d:69:03:7e:d8:c1:62:40:75:30:ce:4a:
0e:53:74:43:78:cf:00:cb:47:8f:08:76:5b:a6:78:bf:68:59:
69:50:b6:72:6c:4b:ca:92:1a:31:95:51:55:3d:83:84:0a:e0:
d7:90:fd:9d:35:5c:f4:1a:b0:d9:46:e0:c7:43:e6:ec:28:79:
2b:76:5d:ee:0f:0c:dd:81:49:9f:8f:f7:15:59:25:a2:f8:c2:
7a:7b:44:74:13:d6:61:d7:62:26:fa:bc:68:d6:be:9b:7d:19:
c3:fe:c3:c6:8f:57:1c:86:ae:fd:ad:51:74:15:4c:d9:ec:7e:
53:8a:60:59:e3:a3:b8:fa:38:85:df:ca:1b:ea:a3:ec:c1:57:
1a:b1:b1:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:25:50 2026 by rpki-client