Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.mft
File: ZiWd6j6crm6BlYjFyRPwLUQQOYs.mft (raw, json)
Hash identifier: vJtJ04bDutfVbnYhY6xEpCfiCXrlmnNiL/2ZNjmNMtU=
Subject key identifier: 95:2E:4C:1D:5A:BE:1A:3B:91:28:31:3C:22:73:E7:14:BD:18:EA:76
Authority key identifier: 66:25:9D:EA:3E:9C:AE:6E:81:95:88:C5:C9:13:F0:2D:44:10:39:8B
Certificate issuer: /CN=66259dea3e9cae6e819588c5c913f02d4410398b
Certificate serial: 019E1EA311334F538D63834F0624761FA09A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZiWd6j6crm6BlYjFyRPwLUQQOYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.mft
Manifest number: 1757
Signing time: Wed 13 May 2026 00:01:03 +0000
Manifest this update: Wed 13 May 2026 00:01:03 +0000
Manifest next update: Thu 14 May 2026 00:01:03 +0000
Files and hashes: 1: ElW47ObyfnNKPgKpwIJenZynEps.roa (hash: MYYtJ2cX574IGimZRbIB/INbKI/GwnvZia+SyQYKKgY=)
2: ZiWd6j6crm6BlYjFyRPwLUQQOYs.crl (hash: MEUDRjpkCYzjCLdhh1cbLwQSWP4XZTgwoUcvoQ88KJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZiWd6j6crm6BlYjFyRPwLUQQOYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:11:33:4f:53:8d:63:83:4f:06:24:76:1f:a0:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66259dea3e9cae6e819588c5c913f02d4410398b
Validity
Not Before: May 13 00:01:03 2026 GMT
Not After : May 14 00:01:03 2026 GMT
Subject: CN=952e4c1d5abe1a3b9128313c2273e714bd18ea76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:33:6a:7d:3c:d9:10:10:b4:43:52:62:91:90:
9a:04:77:63:ba:a9:50:db:36:c1:65:f7:f9:b2:fa:
04:f8:9b:01:b7:75:3f:69:72:57:ca:59:ce:ac:47:
4b:d6:52:3e:71:f7:15:76:53:e3:13:39:24:8a:02:
34:81:b6:c9:b6:e6:c5:04:d7:77:82:1b:6a:fb:6a:
e9:30:02:de:a2:54:94:b7:08:cc:f1:7b:90:d4:62:
dc:b8:13:10:7d:54:bc:74:7c:74:ba:67:fc:30:c5:
90:97:1c:f0:57:e7:47:60:1d:0b:2c:9b:ba:72:df:
1b:a1:f9:a9:0e:77:e2:cd:26:f1:75:98:c7:fe:85:
95:25:41:e9:29:28:cd:e4:39:9f:ba:db:6b:fb:d7:
99:3b:75:4a:ed:1b:f0:1f:5b:3a:b2:fa:d0:2c:a7:
84:7c:38:8b:0f:72:31:df:e2:fc:37:d4:f0:22:29:
49:ff:03:e3:db:d0:27:2f:97:c6:97:9c:a8:80:d0:
e9:8f:9d:8f:68:0c:61:85:4e:a8:47:d5:cd:49:72:
db:33:f0:a9:7b:48:da:5f:de:b0:7f:4a:0e:b7:79:
a2:66:db:63:3e:6d:14:4e:ab:87:f9:5f:24:4a:6c:
25:7e:27:f7:71:f8:3b:c0:f0:b9:1f:b1:71:c5:b3:
37:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:2E:4C:1D:5A:BE:1A:3B:91:28:31:3C:22:73:E7:14:BD:18:EA:76
X509v3 Authority Key Identifier:
keyid:66:25:9D:EA:3E:9C:AE:6E:81:95:88:C5:C9:13:F0:2D:44:10:39:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZiWd6j6crm6BlYjFyRPwLUQQOYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:62:cb:3a:88:fd:a9:dd:bf:fc:10:ad:53:e3:97:13:19:8c:
21:58:aa:4a:b9:3c:e3:1d:cf:4c:a9:e5:cc:fd:ca:fb:10:e2:
d7:cd:e1:0b:35:17:39:f0:52:87:dc:34:0e:e1:3d:f3:9c:cb:
ce:75:20:9e:fd:5f:ed:06:90:15:33:94:f5:f4:04:36:3b:72:
79:d8:55:59:a3:62:a6:73:48:d2:f4:bb:ff:5b:9f:8e:54:2c:
6c:4b:a6:f0:6d:9a:cf:dd:e5:ce:f2:7f:6c:13:a3:39:7d:64:
6c:7f:82:14:37:6b:c9:a4:d1:ef:40:93:36:2b:a1:b5:b4:87:
d8:6f:2b:44:21:b6:61:4c:cf:cf:49:fd:2d:98:16:88:23:30:
5e:66:aa:5c:2b:6e:36:f9:59:79:b8:7d:4d:f6:a6:7d:4d:ac:
68:57:41:3c:e3:4e:84:97:4a:82:ea:46:63:65:71:f4:1f:ce:
f4:28:a0:e0:fc:26:b7:81:b0:ce:02:14:32:59:83:3f:f5:04:
ca:e0:b1:3c:e1:31:23:d3:df:b4:74:0f:f8:64:b7:e5:9d:34:
a4:ad:8b:31:47:d0:9d:52:4e:bb:07:30:95:9b:79:eb:97:62:
aa:d9:17:d3:73:0b:3b:35:26:19:d5:56:8e:c4:87:ac:41:4a:
6c:02:99:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:35:45 2026 by rpki-client