Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/1042dd-e67b-402a-81dc-c13b1f977d57/1/zNHiiTDXen65iRtvq7spFe44hao.mft
File: zNHiiTDXen65iRtvq7spFe44hao.mft (raw, json)
Hash identifier: F7o2ZHw/OH8smDjI9/shCZWSTZkzq+1CdEceq9pJx5c=
Subject key identifier: B1:ED:EA:24:45:62:52:50:B4:78:08:E4:87:B5:AD:14:A1:06:A0:D0
Authority key identifier: CC:D1:E2:89:30:D7:7A:7E:B9:89:1B:6F:AB:BB:29:15:EE:38:85:AA
Certificate issuer: /CN=ccd1e28930d77a7eb9891b6fabbb2915ee3885aa
Certificate serial: 019E1F10AF65B4FEF29F2AEA9357292E386A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNHiiTDXen65iRtvq7spFe44hao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/1042dd-e67b-402a-81dc-c13b1f977d57/1/zNHiiTDXen65iRtvq7spFe44hao.mft
Manifest number: 1908
Signing time: Wed 13 May 2026 02:00:47 +0000
Manifest this update: Wed 13 May 2026 02:00:47 +0000
Manifest next update: Thu 14 May 2026 02:00:47 +0000
Files and hashes: 1: _NSxXKWLAT32ACYjnb_Q_v0bth4.roa (hash: jFEG3V9iSls0XRVWy4kyBvsz0M23pnXIeMtJ7lA5i08=)
2: zNHiiTDXen65iRtvq7spFe44hao.crl (hash: n2HR2JkMEagZ4BeycNgvHoFWIEUvkwgdYKZATPL6RhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/1042dd-e67b-402a-81dc-c13b1f977d57/1/zNHiiTDXen65iRtvq7spFe44hao.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/1042dd-e67b-402a-81dc-c13b1f977d57/1/zNHiiTDXen65iRtvq7spFe44hao.mft
rsync://rpki.ripe.net/repository/DEFAULT/zNHiiTDXen65iRtvq7spFe44hao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:10:af:65:b4:fe:f2:9f:2a:ea:93:57:29:2e:38:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd1e28930d77a7eb9891b6fabbb2915ee3885aa
Validity
Not Before: May 13 02:00:47 2026 GMT
Not After : May 14 02:00:47 2026 GMT
Subject: CN=b1edea2445625250b47808e487b5ad14a106a0d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1a:44:6e:e3:43:d1:db:25:50:b4:2b:47:e5:
48:15:09:09:90:a4:01:1b:de:45:c3:1f:65:6e:ed:
ff:07:13:b0:82:47:b9:bb:e1:2c:f5:7d:1e:d8:6e:
dc:42:6f:90:0f:49:ef:51:6a:e3:90:6f:84:90:fa:
17:20:d0:91:87:80:52:7e:fc:ea:d8:8e:08:e5:e3:
e2:2a:2a:f3:bf:6b:1e:22:11:8f:a5:03:48:84:bb:
e5:ae:90:d9:74:e6:88:ef:64:c5:b9:2d:ea:fb:08:
ad:da:e7:f0:fd:58:96:2d:de:49:82:70:77:47:e3:
ff:41:ca:e0:62:1b:30:6b:cb:14:0e:07:6e:57:d6:
a1:13:b6:80:59:64:9b:c0:f2:c1:77:b9:c2:18:f4:
7f:f3:86:9e:32:ff:6e:af:c8:2b:d3:c4:2b:7d:a2:
f6:24:8b:93:94:03:df:85:d1:57:c3:bd:41:cb:0b:
41:d3:37:09:71:81:45:26:4a:40:a9:cf:e8:05:e4:
0b:bc:d9:92:49:05:c7:a1:78:3f:a1:e7:c1:d5:c6:
57:ca:0f:40:db:3e:4d:d8:6e:ee:8b:a0:87:41:09:
c8:84:17:4b:9c:d5:67:60:b7:f6:eb:53:25:24:75:
31:f0:2f:f8:45:00:3d:1d:4d:2d:79:47:dd:9c:43:
60:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:ED:EA:24:45:62:52:50:B4:78:08:E4:87:B5:AD:14:A1:06:A0:D0
X509v3 Authority Key Identifier:
keyid:CC:D1:E2:89:30:D7:7A:7E:B9:89:1B:6F:AB:BB:29:15:EE:38:85:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNHiiTDXen65iRtvq7spFe44hao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1042dd-e67b-402a-81dc-c13b1f977d57/1/zNHiiTDXen65iRtvq7spFe44hao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1042dd-e67b-402a-81dc-c13b1f977d57/1/zNHiiTDXen65iRtvq7spFe44hao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:17:b3:1b:a2:eb:37:9c:f2:46:75:17:8c:13:ad:f3:28:24:
4c:c2:71:c7:8d:37:5e:53:a4:a1:5d:c2:86:f5:35:2f:2d:03:
7a:42:3a:f6:19:b7:f9:a2:d0:7e:f1:20:a9:bc:62:dc:c5:e6:
3a:1d:3f:f1:68:5f:10:2f:17:72:a1:1b:d5:e1:5b:52:ab:48:
95:88:c2:3c:8f:66:fd:f1:d7:19:20:8d:0f:84:26:8e:b5:b8:
1c:e5:ca:68:82:ba:8f:91:df:60:05:a4:b0:8b:e5:5b:8f:48:
61:38:4f:b5:45:fa:26:1a:42:91:95:5e:0b:78:ca:47:d4:37:
14:0b:ff:31:5a:42:e2:3c:fe:28:5d:c8:b2:87:9d:94:af:f4:
2a:34:a8:67:f8:b7:71:5c:c3:7a:b8:a5:f8:1d:ce:3b:dd:e1:
60:82:e6:ee:75:54:94:e8:c8:67:e6:75:8f:08:7f:08:86:4f:
50:77:f2:55:83:09:5e:84:63:59:95:50:7a:59:53:8d:00:66:
84:1d:88:1b:15:c7:35:0b:d1:6c:4f:cf:3d:d7:04:8e:00:e7:
3a:48:ef:8f:c8:7d:e6:d7:0f:44:3b:80:5d:29:04:9b:2e:26:
01:f8:eb:b6:2f:c5:37:84:e8:b0:46:a1:32:6d:0c:f1:3b:f1:
54:36:63:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:11:36 2026 by rpki-client