Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft
File: ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft (raw, json)
Hash identifier: RoBIK6CoN6pBM2Ajva18htoXfmmHxr39NRNHKMCWi5o=
Subject key identifier: 89:96:EA:37:E6:B2:E8:DE:35:E4:05:56:4E:62:42:D9:50:38:7D:16
Authority key identifier: 65:A4:24:CE:E2:FD:B0:07:2B:54:14:38:D9:13:D2:66:36:A9:B8:8B
Certificate issuer: /CN=65a424cee2fdb0072b541438d913d26636a9b88b
Certificate serial: 019E1CB476A14D3C11AF189988726CC75450
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZaQkzuL9sAcrVBQ42RPSZjapuIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft
Manifest number: 1915
Signing time: Tue 12 May 2026 15:00:49 +0000
Manifest this update: Tue 12 May 2026 15:00:49 +0000
Manifest next update: Wed 13 May 2026 15:00:49 +0000
Files and hashes: 1: DKRX12LW62Pwhd7lkkBTAIcEFmg.roa (hash: JQDtg/PbgFXKpQJ1cWIs8ZbTBrSDwWrj/eo/b+RXeDU=)
2: ZaQkzuL9sAcrVBQ42RPSZjapuIs.crl (hash: jArHYlEror2hZDMedp9m1PIQQYE6TK/aja4LlzsbqJc=)
3: f56SXyzVaFxPipkSbWjQspBnG6k.asa (hash: kTkK/KuPdlPU1v4Iqn9nm0PLfpF6FLDnJnaGt4nEmLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZaQkzuL9sAcrVBQ42RPSZjapuIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b4:76:a1:4d:3c:11:af:18:99:88:72:6c:c7:54:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65a424cee2fdb0072b541438d913d26636a9b88b
Validity
Not Before: May 12 15:00:49 2026 GMT
Not After : May 13 15:00:49 2026 GMT
Subject: CN=8996ea37e6b2e8de35e405564e6242d950387d16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:77:ba:29:02:31:98:7f:55:7e:00:35:18:c5:
12:70:ba:3d:1f:e8:7b:a9:bc:b4:c0:f7:a7:26:ab:
33:3f:a4:d3:cc:58:54:14:f0:0e:bd:09:87:db:f4:
ef:3e:25:3e:3f:a3:ce:b2:d4:0d:20:d9:48:98:34:
be:ef:f3:36:f9:cb:5f:65:36:0a:e9:c8:50:22:8b:
e9:e0:77:8c:cd:f7:de:50:fb:16:81:37:95:65:a4:
80:ef:c2:df:b8:85:4f:1b:11:47:b2:a4:24:5c:0c:
db:09:45:64:f3:5b:bb:2f:f2:8d:7d:de:cf:a7:89:
c9:29:94:5e:7d:88:75:ec:22:90:14:ac:17:3a:8c:
cf:81:38:29:b6:10:15:58:ce:66:fc:8c:d2:16:6d:
97:ef:49:40:5f:55:7f:be:51:98:ea:48:dd:e3:77:
f6:75:db:7b:69:8b:4b:db:60:55:26:4a:4e:28:2e:
6e:7b:e7:3c:c3:78:5f:57:d1:36:ca:34:cf:d8:07:
92:9d:58:f9:3e:f1:4c:a6:29:90:26:51:04:20:a5:
42:d4:6c:5d:63:c6:e0:e6:b0:0e:aa:81:5a:d8:9b:
54:7a:3a:eb:74:2e:29:1a:a2:18:c8:d8:35:68:56:
49:df:62:e6:7a:b9:06:1b:2c:02:e7:25:4e:db:cd:
01:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:96:EA:37:E6:B2:E8:DE:35:E4:05:56:4E:62:42:D9:50:38:7D:16
X509v3 Authority Key Identifier:
keyid:65:A4:24:CE:E2:FD:B0:07:2B:54:14:38:D9:13:D2:66:36:A9:B8:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZaQkzuL9sAcrVBQ42RPSZjapuIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:d5:46:92:96:76:5a:61:2a:2e:7c:c1:1a:61:d5:3a:b1:d6:
8d:d6:77:18:ac:7f:98:53:a6:41:ec:ee:4e:aa:f5:18:09:a4:
26:44:bb:da:e1:33:07:0f:c0:22:de:d9:ba:09:62:8c:82:9d:
7d:95:14:fd:68:c0:e0:a8:74:7c:d8:59:01:4d:80:62:e2:7b:
3a:52:0a:a3:4e:fe:45:ea:b2:71:6d:83:4b:49:61:b4:a3:93:
0c:6a:74:07:47:76:83:84:75:85:78:4a:17:46:04:b6:42:47:
9c:68:06:fa:fc:35:82:31:5d:95:d2:84:d4:7a:cd:43:94:12:
ce:30:fa:4a:93:6f:39:b3:aa:61:22:b6:c1:47:8c:ed:07:81:
47:71:d8:44:59:67:85:bb:6a:c1:e4:ea:b4:f3:9a:73:17:d3:
b5:87:77:47:94:0a:28:ae:2f:b4:7a:07:20:7f:61:5f:8d:20:
29:bf:91:23:6c:5f:0c:58:b7:9e:87:d5:47:0b:58:da:14:0a:
9f:cc:2d:83:b2:b2:47:39:de:24:9f:3f:c6:ef:3d:32:71:e1:
0d:9c:31:53:98:7e:e1:4d:7e:52:c0:e0:c8:a9:a7:9c:6e:bb:
8a:2a:49:b7:ee:3e:01:3e:30:25:84:8e:d4:2a:3f:0e:10:dc:
91:18:76:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:55:05 2026 by rpki-client