Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.mft
File: zpTDHhXfS3pg5dQN86rBhS6Np0s.mft (raw, json)
Hash identifier: ImX13jbQ/GbrAvDAE2Ngfq6J5W+4vLWtYEObvAZn2+4=
Subject key identifier: 8C:84:CE:1C:4D:C3:D1:92:E9:B1:E1:DB:C6:1F:FB:B4:02:C4:95:98
Authority key identifier: CE:94:C3:1E:15:DF:4B:7A:60:E5:D4:0D:F3:AA:C1:85:2E:8D:A7:4B
Certificate issuer: /CN=ce94c31e15df4b7a60e5d40df3aac1852e8da74b
Certificate serial: 019E1F7F11F32C4D09BE60AA0125560C09D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zpTDHhXfS3pg5dQN86rBhS6Np0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.mft
Manifest number: 0B04
Signing time: Wed 13 May 2026 04:01:21 +0000
Manifest this update: Wed 13 May 2026 04:01:21 +0000
Manifest next update: Thu 14 May 2026 04:01:21 +0000
Files and hashes: 1: 2asX8qOaxpLjyUU4myYKc0Ej3nA.roa (hash: xKHvXSgALDQpoGTmF3KkZGpVCQ/XwWuRiWZZZUlqzJ0=)
2: zpTDHhXfS3pg5dQN86rBhS6Np0s.crl (hash: MqjNaSdFXjAgLoSKvbmzIooISsGPTYT1+xGAq/yHr3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/zpTDHhXfS3pg5dQN86rBhS6Np0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7f:11:f3:2c:4d:09:be:60:aa:01:25:56:0c:09:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce94c31e15df4b7a60e5d40df3aac1852e8da74b
Validity
Not Before: May 13 04:01:21 2026 GMT
Not After : May 14 04:01:21 2026 GMT
Subject: CN=8c84ce1c4dc3d192e9b1e1dbc61ffbb402c49598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7b:5b:2a:b6:9d:af:f5:c2:d0:d1:1b:9e:1b:
23:b0:99:af:ba:fa:f7:20:6a:85:18:3d:8a:68:06:
08:b8:f3:37:80:ec:1f:51:dd:80:2f:fc:40:65:65:
0d:b6:36:5b:f7:b3:2c:87:3c:92:cb:07:22:6e:da:
98:cc:16:51:db:a4:a9:6e:7b:a9:5d:f7:a4:86:f7:
21:51:60:33:22:f3:26:3e:bd:85:e9:d0:ca:aa:e5:
cc:00:4a:8d:f7:c8:f9:31:b1:da:6e:11:cf:27:87:
8d:4b:a5:e9:ff:1b:e1:73:26:92:08:67:f1:77:78:
5e:a3:15:41:e3:b1:22:c6:76:62:92:7f:ed:3b:8a:
74:e0:8c:b6:3f:c0:3d:41:01:9a:27:dc:cb:94:5c:
d1:a6:36:64:74:aa:29:74:0e:ac:ca:98:2c:ea:33:
1f:03:0b:21:e4:f4:c2:ad:12:15:3a:86:27:bb:43:
cc:31:01:f3:79:3d:bf:1d:cf:ab:92:93:bd:11:2a:
79:91:57:3f:51:31:fd:e0:00:17:4b:54:73:16:ee:
94:9d:9c:19:dd:42:8f:7b:16:8b:b6:a3:64:2f:b9:
c3:03:ad:20:67:7a:dc:fb:64:20:bd:78:f0:78:71:
90:18:65:a9:3e:77:54:7b:64:3a:a5:6c:d8:dd:16:
77:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:84:CE:1C:4D:C3:D1:92:E9:B1:E1:DB:C6:1F:FB:B4:02:C4:95:98
X509v3 Authority Key Identifier:
keyid:CE:94:C3:1E:15:DF:4B:7A:60:E5:D4:0D:F3:AA:C1:85:2E:8D:A7:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zpTDHhXfS3pg5dQN86rBhS6Np0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:f1:16:eb:52:68:21:88:dd:ae:52:d0:df:57:f4:86:b4:6e:
f8:d9:c7:66:31:e5:9c:76:7b:3e:27:21:57:9e:27:a0:68:50:
c3:13:f7:dd:35:f8:bd:b8:15:e0:65:3d:ba:fb:cb:d6:58:6a:
65:03:ed:95:8a:1b:8d:db:98:a7:9c:ee:fd:e4:e0:a0:19:67:
c4:fd:17:0f:b2:0b:32:06:48:9c:fd:62:ef:25:cd:63:3e:5d:
bc:81:60:a2:4f:f8:de:8d:17:76:47:2b:29:2f:8a:d0:f5:8f:
9c:9b:ad:a2:5b:a4:5e:3a:38:26:69:36:18:94:cf:63:d2:43:
17:01:3a:93:ff:df:e1:40:46:c0:da:13:fc:c0:0d:57:28:8b:
6e:82:a4:8d:82:e3:87:24:ee:8a:88:50:b0:e7:ef:28:5f:e9:
43:f2:30:e4:3f:5b:5d:23:57:72:13:6f:b3:ad:6e:a1:15:7a:
f9:85:42:09:80:78:f6:0d:94:77:f7:97:a5:b7:49:ca:14:b9:
15:2f:0e:97:ab:3e:59:16:4c:3b:ae:cd:b1:bf:f9:98:f7:bb:
ba:3f:3a:86:c6:a1:8f:ec:60:4f:a8:75:d5:41:7c:d3:b7:17:
00:4a:44:60:ff:7e:65:aa:7e:4c:7b:c9:61:a9:1b:27:9c:83:
95:9c:d7:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:00:03 2026 by rpki-client