Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.mft
File: ZVnPNNTPxZZAhi0eS3nUjZ5Njns.mft (raw, json)
Hash identifier: 8UHt3HljkNvA8T4a+mFYoP8qG8XXwi2k8kJ4Ax3uZ+c=
Subject key identifier: FB:C5:0C:D6:AC:89:08:19:EF:42:C5:B4:F5:D5:D1:8B:48:E7:38:EA
Authority key identifier: 65:59:CF:34:D4:CF:C5:96:40:86:2D:1E:4B:79:D4:8D:9E:4D:8E:7B
Certificate issuer: /CN=6559cf34d4cfc59640862d1e4b79d48d9e4d8e7b
Certificate serial: 019E1F7E96712E6E4EF26681C9E9672C23A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.mft
Manifest number: 065E
Signing time: Wed 13 May 2026 04:00:50 +0000
Manifest this update: Wed 13 May 2026 04:00:50 +0000
Manifest next update: Thu 14 May 2026 04:00:50 +0000
Files and hashes: 1: 7Lr6p7DxKnwsqNm2CLB6OM0-G9k.roa (hash: MVl7TrZfOYT29YZfSTEksTVjTVaYtldybqMvFAfAqSw=)
2: ZVnPNNTPxZZAhi0eS3nUjZ5Njns.crl (hash: YIOKkgzbMFDFeZLdcjehOnRKM7FJU10uPPGGjqYTIY0=)
3: nLzx58TFso7KcSU-xZqQFwqs76E.roa (hash: X8XgfJ4xsaevH8Jt00V++9TqwIkHOO/EM9BBJ5XdWxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7e:96:71:2e:6e:4e:f2:66:81:c9:e9:67:2c:23:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6559cf34d4cfc59640862d1e4b79d48d9e4d8e7b
Validity
Not Before: May 13 04:00:50 2026 GMT
Not After : May 14 04:00:50 2026 GMT
Subject: CN=fbc50cd6ac890819ef42c5b4f5d5d18b48e738ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e4:ff:32:20:ab:93:32:1c:2e:e8:59:f2:9f:
74:56:70:90:7b:7f:47:a6:9e:2a:65:0c:f3:85:38:
29:b6:1d:15:93:32:6b:93:71:d3:c2:50:76:7e:53:
5e:57:35:3b:b1:f5:74:27:bd:ea:d9:dd:ec:90:9b:
cf:51:8a:e8:58:94:cc:f7:90:d1:5e:7b:09:71:2e:
46:bc:d6:27:10:fa:98:e7:50:d0:8e:80:c2:5d:60:
cb:3f:79:aa:08:7b:b0:c8:9b:b0:fb:59:ac:43:42:
37:81:f9:6b:78:07:54:d3:bc:ea:e9:32:72:d5:94:
c1:0e:87:6e:dc:6a:91:2f:64:c3:d1:59:94:c9:8c:
c9:c1:6f:4b:aa:61:c8:a4:38:73:8f:45:b5:80:9b:
34:25:14:87:82:d6:25:83:63:8f:bc:0e:c8:7b:98:
c1:8f:4c:a0:cf:11:ef:c0:b9:77:a6:8b:0c:44:13:
62:df:cb:d7:11:41:c6:b8:b0:53:71:b0:32:36:f2:
21:3f:c0:7d:21:a2:54:1c:23:60:ac:8c:62:2e:df:
9b:a7:e0:ae:27:6d:df:f8:db:6d:0d:fd:a0:28:e4:
d2:fe:a9:a0:93:30:2a:e3:33:25:4a:67:2a:ef:13:
0b:dc:03:9b:de:8b:83:85:b6:21:77:6e:3a:92:36:
da:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:C5:0C:D6:AC:89:08:19:EF:42:C5:B4:F5:D5:D1:8B:48:E7:38:EA
X509v3 Authority Key Identifier:
keyid:65:59:CF:34:D4:CF:C5:96:40:86:2D:1E:4B:79:D4:8D:9E:4D:8E:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:94:e2:2c:58:0a:2b:5a:91:0c:21:56:7e:36:ad:c9:b2:ba:
58:1b:db:f3:e6:22:57:ed:33:55:2e:a1:51:2a:4c:b7:3f:74:
4a:e4:d3:6b:69:78:07:79:a5:d9:52:da:3d:b1:24:41:43:eb:
42:4e:e6:68:23:50:08:15:ae:3f:57:b9:fc:7c:35:20:ba:9f:
12:bc:c9:b3:6d:15:e5:4c:7a:f0:fe:03:9c:d3:2f:5b:74:39:
13:25:9c:69:9a:82:e9:14:b0:e1:d1:f6:60:e3:37:4e:f1:2e:
90:d7:e0:b4:71:cb:34:92:42:1f:da:6c:36:e7:d6:ac:34:f8:
73:04:d6:92:81:d4:36:09:e8:36:56:41:ae:a6:39:d0:4a:8e:
c9:cb:49:d8:a8:db:66:28:c0:2d:11:80:fb:97:64:18:e9:0a:
77:f9:cb:23:78:e0:d0:f5:fb:32:c0:e8:68:3a:5e:ff:be:f0:
3f:29:4b:bd:93:65:6b:40:6b:4d:4a:70:05:83:b6:17:bd:4e:
d2:14:6d:0d:6c:12:31:12:d3:1b:0a:f3:08:6c:17:54:4a:a9:
be:20:68:b4:fb:d4:2a:92:20:c1:47:56:d5:25:57:99:4e:38:
e1:d6:fc:d7:b9:c9:c1:90:5a:48:b2:71:51:e3:9f:ea:18:e4:
0f:23:55:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:07:25 2026 by rpki-client