Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.mft
File: z4l1dGy_H_dd3sbNuArMhSGBhM4.mft (raw, json)
Hash identifier: ihe/Fd5jmiw6yskQYL9mLCpugv92GQzvuwJAGM4gQys=
Subject key identifier: 96:AA:66:57:87:AC:A2:59:06:F3:20:7E:7F:FA:85:10:80:71:19:F9
Authority key identifier: CF:89:75:74:6C:BF:1F:F7:5D:DE:C6:CD:B8:0A:CC:85:21:81:84:CE
Certificate issuer: /CN=cf8975746cbf1ff75ddec6cdb80acc85218184ce
Certificate serial: 019E1D9077C7FFFEA1F85A8FAEFD05CA19B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z4l1dGy_H_dd3sbNuArMhSGBhM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.mft
Manifest number: 1897
Signing time: Tue 12 May 2026 19:01:07 +0000
Manifest this update: Tue 12 May 2026 19:01:07 +0000
Manifest next update: Wed 13 May 2026 19:01:07 +0000
Files and hashes: 1: f8pXdTunsFienw12OWOwkjd9_Sg.roa (hash: D84B6IFhxTwUljKKeuMD7kN/I53xCeCr1djjSkG38Ek=)
2: z4l1dGy_H_dd3sbNuArMhSGBhM4.crl (hash: teSC16HmMZN8BnR8/RPlTlWtcjWjn76azRMLJdKMt0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/z4l1dGy_H_dd3sbNuArMhSGBhM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:77:c7:ff:fe:a1:f8:5a:8f:ae:fd:05:ca:19:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf8975746cbf1ff75ddec6cdb80acc85218184ce
Validity
Not Before: May 12 19:01:07 2026 GMT
Not After : May 13 19:01:07 2026 GMT
Subject: CN=96aa665787aca25906f3207e7ffa8510807119f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:19:02:06:9d:74:0a:9c:7e:56:80:39:b0:7e:
bb:60:16:6d:d6:40:ea:0d:f7:9a:a7:bc:da:51:60:
9a:c5:92:36:9a:08:ee:ac:26:65:e9:39:d1:5a:b9:
29:59:26:44:c1:5d:28:51:41:cd:db:03:5a:bb:fe:
85:9b:22:6d:8b:6b:86:fb:64:a7:af:04:00:ea:08:
67:31:12:76:a1:0b:84:1c:7b:cb:3d:75:9f:39:cf:
74:99:a6:89:64:84:11:ff:39:a8:aa:ce:6a:dd:7b:
3e:0f:92:b8:4b:53:29:9e:71:3b:74:0b:48:c5:42:
ce:93:24:94:31:11:b1:ef:f2:06:5e:5a:e9:b3:6a:
3c:3c:7d:d2:a4:78:fd:40:dd:6e:6f:46:c1:53:e2:
a2:c2:5c:7c:57:c7:44:79:09:98:91:2f:7f:bd:26:
53:7f:18:ea:f0:f5:f1:4c:ec:a8:6b:f2:c4:0d:34:
43:81:5f:32:a6:bb:15:d0:cc:3f:c6:96:b0:e0:9a:
41:91:75:7e:1a:a5:5b:e2:f8:ff:58:5d:99:88:01:
5e:78:2d:1f:85:de:ae:d4:b2:58:a0:c5:29:99:e3:
ce:b9:d1:3b:29:5e:58:b5:76:5a:3c:65:a6:b4:8c:
54:37:0e:9a:88:63:54:33:e9:81:61:9b:d5:9d:77:
41:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:AA:66:57:87:AC:A2:59:06:F3:20:7E:7F:FA:85:10:80:71:19:F9
X509v3 Authority Key Identifier:
keyid:CF:89:75:74:6C:BF:1F:F7:5D:DE:C6:CD:B8:0A:CC:85:21:81:84:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z4l1dGy_H_dd3sbNuArMhSGBhM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:d8:d2:b0:12:89:25:10:c2:74:e3:43:ed:0e:4e:ba:b6:81:
49:b1:19:61:54:eb:a5:aa:b9:18:88:84:9f:51:9c:fa:93:da:
0b:bd:37:71:dc:0b:63:e0:fc:3d:b0:f8:14:53:01:4d:b5:2f:
38:a9:08:84:4c:be:58:55:40:d8:46:07:eb:00:0f:de:1f:20:
c2:a2:fc:95:76:68:06:4c:4b:0d:e8:af:7c:b4:05:b1:b5:7e:
bb:19:02:db:1a:a1:af:24:86:8b:ff:48:f9:71:28:20:82:8a:
4b:63:df:7c:59:76:b6:b7:e3:64:52:4d:f1:90:3f:31:52:a8:
13:ef:4d:4c:90:fc:48:ea:d5:91:8d:27:f4:11:86:1a:b6:7f:
48:e7:58:3d:ef:c0:a8:f9:09:f9:b7:87:82:37:c9:6e:84:b6:
9e:b6:c3:80:c1:57:58:dc:03:bd:16:10:99:2e:c2:d4:1b:3b:
45:d4:e7:f9:74:40:72:99:d2:3a:95:1b:1a:57:ba:bc:94:14:
64:78:3b:6a:e2:5b:bd:d0:7d:cf:42:ab:e8:aa:38:9f:db:34:
74:be:7d:c4:a6:98:09:92:e0:24:23:26:53:37:53:1f:61:51:
cb:53:90:be:52:05:8d:b2:72:61:60:33:c0:22:92:1b:87:d9:
bf:f4:28:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:50:14 2026 by rpki-client