Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.mft
File: zT29X8b5G4B7e8TPbmRuNFhirz4.mft (raw, json)
Hash identifier: EVtQf28nmm1R2XqPBhB/8iSYEJrYhtKw3E6Kdqzdc7Q=
Subject key identifier: 13:34:49:C5:69:4E:E0:FB:4B:22:27:64:45:E8:E3:64:57:26:80:8A
Authority key identifier: CD:3D:BD:5F:C6:F9:1B:80:7B:7B:C4:CF:6E:64:6E:34:58:62:AF:3E
Certificate issuer: /CN=cd3dbd5fc6f91b807b7bc4cf6e646e345862af3e
Certificate serial: 019E1F47D40F6D22ED8B940D7731AB6B663C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zT29X8b5G4B7e8TPbmRuNFhirz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.mft
Manifest number: 08AD
Signing time: Wed 13 May 2026 03:01:01 +0000
Manifest this update: Wed 13 May 2026 03:01:01 +0000
Manifest next update: Thu 14 May 2026 03:01:01 +0000
Files and hashes: 1: W37sGJ1Z1wl4UUbIKXQMtHltG0E.roa (hash: hXtR6w7vecs+GA3es0V1qVgIw93rkqQSf8/pd9Bww6I=)
2: zT29X8b5G4B7e8TPbmRuNFhirz4.crl (hash: 2VPuf5yO1P7sF4DaiGWX47CxSDnis4bB29sjvSOPg4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zT29X8b5G4B7e8TPbmRuNFhirz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:47:d4:0f:6d:22:ed:8b:94:0d:77:31:ab:6b:66:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd3dbd5fc6f91b807b7bc4cf6e646e345862af3e
Validity
Not Before: May 13 03:01:01 2026 GMT
Not After : May 14 03:01:01 2026 GMT
Subject: CN=133449c5694ee0fb4b22276445e8e3645726808a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:19:7e:fc:68:53:96:37:5a:f8:1e:fa:90:31:
70:cd:4f:ce:b6:b0:81:9e:08:b2:40:72:88:0d:ac:
94:d8:a0:17:30:9f:b5:03:a4:85:34:89:62:0c:09:
fe:76:c6:12:70:d0:af:b3:e9:6f:a2:9d:47:a1:da:
d5:71:d7:ec:0f:f4:7c:d0:43:9f:1e:61:36:70:7d:
0d:4c:d2:40:40:8b:1a:d3:07:41:be:db:2f:3e:1b:
fd:8d:f0:59:d6:f9:7c:3f:f0:9c:5e:e1:9d:66:2d:
2c:c9:c3:2c:e2:9f:87:cd:90:e7:36:32:77:6a:ec:
2e:a1:76:a0:f7:70:f8:d4:59:ff:1f:d1:f0:fd:0b:
7a:a5:74:3f:cf:eb:b6:57:49:9e:e2:93:60:10:37:
2a:1a:0d:49:df:a1:27:75:32:71:77:f3:89:e8:cc:
b7:84:11:b2:02:38:0b:da:98:8f:91:53:9e:11:17:
4e:e2:ec:c3:19:d1:ac:df:0c:64:35:f7:0d:44:7d:
28:12:e1:95:75:9d:fb:d6:50:c6:3a:04:e4:49:1d:
ee:a6:29:bc:18:e6:a5:42:63:ad:42:af:fe:9c:90:
66:ba:82:bc:d9:c8:9c:17:1e:3e:a2:e4:27:47:b9:
96:5b:df:7a:c4:03:81:b1:c0:17:0c:55:47:9a:f5:
b0:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:34:49:C5:69:4E:E0:FB:4B:22:27:64:45:E8:E3:64:57:26:80:8A
X509v3 Authority Key Identifier:
keyid:CD:3D:BD:5F:C6:F9:1B:80:7B:7B:C4:CF:6E:64:6E:34:58:62:AF:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zT29X8b5G4B7e8TPbmRuNFhirz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:e3:4b:94:42:c1:4f:50:be:1b:d6:2d:af:51:72:ef:e9:69:
01:10:dc:22:60:54:8f:8c:29:65:9d:c3:cc:55:69:fd:79:3f:
21:a7:84:d2:2e:e9:94:18:c1:6b:d6:72:31:41:c7:9a:d5:d6:
b5:c0:74:2f:29:da:99:57:74:c9:74:c8:8e:91:ae:53:07:f0:
6c:7d:83:13:d2:0e:9f:00:04:6d:9e:6f:59:17:ff:33:f6:1a:
60:2d:d7:6a:07:e0:8c:fa:f3:85:61:b0:28:30:aa:b5:bc:39:
58:f8:fc:e8:f5:c9:50:9f:bb:07:12:95:a0:d9:26:7a:65:47:
83:2d:99:23:d5:f9:5f:85:22:97:49:8c:a1:3b:c4:65:a2:64:
bf:ce:8a:f6:e8:e2:e5:9e:83:61:d1:b7:a6:04:81:56:e9:7d:
de:82:03:7b:ab:16:99:20:4b:a1:9f:31:ca:41:98:55:01:a4:
a5:9f:39:c0:5d:f9:0a:23:67:73:ee:fa:1c:e6:48:6f:a6:a6:
62:e4:a7:94:8e:7c:e6:70:ae:a8:25:4c:f8:42:1f:2e:63:3e:
78:02:0a:d7:0d:6a:b9:55:47:9f:e8:1a:0a:2e:ff:47:b6:b3:
c4:ca:a8:b5:39:08:b5:70:7f:f9:40:5a:3f:00:c0:66:8f:af:
0d:0c:00:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:09:51 2026 by rpki-client