
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.mft
File: zs05HGYMPlfFO4fAtS7A0vL0J3U.mft (raw, json)
Hash identifier: TERVrq9rE/7Z42iZzgr+uZ1P54oZiksCNrvsPE0UDqA=
Subject key identifier: 74:01:06:3E:8B:6B:97:E0:E7:7F:2A:54:09:52:17:E8:57:4D:9E:0D
Authority key identifier: CE:CD:39:1C:66:0C:3E:57:C5:3B:87:C0:B5:2E:C0:D2:F2:F4:27:75
Certificate issuer: /CN=cecd391c660c3e57c53b87c0b52ec0d2f2f42775
Certificate serial: 019E1EA2DFE4338D765581B58166A005A8DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zs05HGYMPlfFO4fAtS7A0vL0J3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.mft
Manifest number: 08BF
Signing time: Wed 13 May 2026 00:00:51 +0000
Manifest this update: Wed 13 May 2026 00:00:51 +0000
Manifest next update: Thu 14 May 2026 00:00:51 +0000
Files and hashes: 1: K1WYHWxT9hUhyCzFRd3qp6J1SRo.roa (hash: ofCgYNoPNZP6vNBlI2XsxCW6wFsFBZey/s584doB1q4=)
2: nNBG6JVVM3hu0P20Vu06-SMt-9I.roa (hash: M+TeIwkxE9H/4NhfymMWaPcB1L3//0ChdU6G+C5A8KM=)
3: zs05HGYMPlfFO4fAtS7A0vL0J3U.crl (hash: Nx/JfE14YeAbgVnRbq0nObYhG0+2gHKDYNORyUdshHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/zs05HGYMPlfFO4fAtS7A0vL0J3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a2:df:e4:33:8d:76:55:81:b5:81:66:a0:05:a8:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cecd391c660c3e57c53b87c0b52ec0d2f2f42775
Validity
Not Before: May 13 00:00:51 2026 GMT
Not After : May 14 00:00:51 2026 GMT
Subject: CN=7401063e8b6b97e0e77f2a54095217e8574d9e0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:fa:fd:b8:ae:e0:0f:41:72:74:07:74:51:e7:
39:49:cf:a8:31:35:fa:62:d6:17:29:73:d8:fd:43:
60:10:6b:8a:de:5f:05:95:d3:4e:d6:82:d6:3a:14:
e1:65:49:85:9c:30:7d:30:b1:12:b0:59:86:17:c1:
18:1e:8c:b9:cb:8e:8c:74:b3:94:d0:1d:16:d8:aa:
a1:14:04:b8:8e:74:16:28:8d:3f:2d:e1:69:08:16:
3c:da:1f:8c:3c:11:86:bc:f4:2c:74:ee:30:5c:39:
db:b6:3d:e4:23:c6:fd:88:d4:02:7c:23:43:39:1d:
85:90:19:39:1c:c9:88:03:3c:6c:5d:b2:c6:37:04:
24:b1:97:36:23:80:df:59:d8:2a:15:37:fd:ae:ea:
e7:19:c0:b6:95:72:f6:7a:c3:a6:94:56:c7:58:cf:
52:92:01:41:54:57:b9:f9:9b:f1:d1:2b:74:0f:d6:
5a:22:4a:87:4a:b4:8c:39:cf:60:07:93:63:9d:ed:
7b:ba:ae:88:e3:46:bb:df:4b:d5:17:4a:8d:0b:c7:
69:f4:26:e9:e1:5b:7e:ce:16:a3:59:98:e0:5c:56:
20:27:d6:7b:f5:60:f4:82:8c:c0:63:d0:a4:25:09:
68:6c:92:9c:82:40:ee:71:ff:8e:eb:05:eb:ed:51:
b5:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:01:06:3E:8B:6B:97:E0:E7:7F:2A:54:09:52:17:E8:57:4D:9E:0D
X509v3 Authority Key Identifier:
keyid:CE:CD:39:1C:66:0C:3E:57:C5:3B:87:C0:B5:2E:C0:D2:F2:F4:27:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zs05HGYMPlfFO4fAtS7A0vL0J3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
eb:0f:5f:37:ec:33:c7:f8:7f:64:6c:64:88:54:1b:73:ce:5b:
f8:e2:ec:8c:5a:a1:3f:61:d0:c8:ac:66:c2:5f:c4:45:65:c6:
74:d6:f8:2b:99:16:58:48:e8:25:62:4e:8d:65:ce:7a:72:a7:
90:84:90:e5:87:a4:cb:12:f6:61:ed:53:fe:08:bf:9f:fa:b2:
75:e6:35:de:3c:82:be:7b:b3:5c:be:16:4f:1c:f7:9f:02:80:
3f:36:0d:44:65:e4:e4:a5:e7:cc:f0:46:9e:a8:1d:2a:0f:96:
eb:24:a1:10:04:e1:0b:6a:4f:bc:7d:86:59:df:81:40:1b:9a:
22:32:5b:3f:32:fb:a7:24:b8:85:30:4a:5b:57:d9:02:bd:58:
88:5c:a7:d6:ff:3f:23:97:28:0c:cf:9f:d7:f6:36:33:6f:11:
75:41:03:b6:b8:7d:37:7b:49:12:39:27:7c:92:8e:44:10:4f:
41:8b:6e:59:33:15:d4:41:a9:43:58:0a:c8:82:37:9d:09:4c:
32:9b:e9:64:22:51:bc:2b:f8:26:ea:ae:bd:75:84:71:44:e4:
22:26:99:fe:0f:0f:d2:bb:08:88:5e:44:22:9e:f2:65:4b:08:
58:e1:5e:eb:54:11:8c:3b:0c:51:58:45:89:52:8c:bb:fb:c1:
d5:fd:18:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:36:51 2026 by rpki-client