Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft
File: sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft (raw, json)
Hash identifier: R2l8SbWSZN4Qo9DZSEhs5+UipWQAm5IanNQbzxNcwvo=
Subject key identifier: 74:98:96:34:1A:94:D1:4D:15:00:42:75:B3:A2:E9:8B:5C:AF:B6:C2
Authority key identifier: B1:94:F0:30:4E:ED:D3:63:C6:62:2F:D9:1C:59:B1:08:71:AA:30:44
Certificate issuer: /CN=b194f0304eedd363c6622fd91c59b10871aa3044
Certificate serial: 019E1FB6065CD5740B85B579AA07140C3A16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sZTwME7t02PGYi_ZHFmxCHGqMEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft
Manifest number: 190B
Signing time: Wed 13 May 2026 05:01:23 +0000
Manifest this update: Wed 13 May 2026 05:01:23 +0000
Manifest next update: Thu 14 May 2026 05:01:23 +0000
Files and hashes: 1: B9HNNW3Bz7oID9G3-lfUfNqxyrY.roa (hash: tzCu3LyuSxup7J333i9m+mIRLj60qx1pJbahNRpyJGA=)
2: MUOyRWPN46PNKkdduP0g7nQfNok.roa (hash: fGl9qQgDH816kxRklhwGBTJ3WAbYJUjNKNT/W0cEqrc=)
3: sZTwME7t02PGYi_ZHFmxCHGqMEQ.crl (hash: O1V7p9yeZTEmIuJsZ/mP1RSfx6iASvd260skwBBF4g8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sZTwME7t02PGYi_ZHFmxCHGqMEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:b6:06:5c:d5:74:0b:85:b5:79:aa:07:14:0c:3a:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b194f0304eedd363c6622fd91c59b10871aa3044
Validity
Not Before: May 13 05:01:23 2026 GMT
Not After : May 14 05:01:23 2026 GMT
Subject: CN=749896341a94d14d15004275b3a2e98b5cafb6c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4e:58:38:34:ee:7d:ad:d7:01:e1:ea:a5:d7:
09:f4:8b:1b:d0:de:34:81:66:10:be:11:e9:93:bc:
80:01:24:fb:13:16:30:2f:ce:5c:f2:70:d4:f5:20:
53:c7:0f:70:e2:c6:f4:c0:f6:77:0c:bf:d4:30:c6:
bb:2f:0e:38:5e:f8:fa:98:d0:a7:62:a4:b6:1c:68:
c2:68:66:88:07:c4:eb:7b:f1:b2:65:d2:e3:41:60:
a3:50:89:f6:86:fe:a6:20:1e:56:2d:03:6d:4b:16:
c5:c5:bc:7e:cf:89:01:50:7a:ea:bc:af:30:db:ce:
c6:29:dc:20:85:a6:95:2d:0d:71:f7:d1:de:e8:5a:
21:52:56:34:a8:d7:e4:da:64:0b:59:7f:b5:43:6b:
cd:fd:85:32:28:34:9d:35:5f:72:29:3e:75:b1:ec:
8a:26:3c:f2:6a:36:43:97:fa:14:fe:8a:53:05:7d:
d2:9f:bb:12:d1:8e:5c:02:34:9e:5a:c9:43:f4:f5:
46:e2:a7:4a:32:0d:8d:9c:81:a4:de:c7:17:89:ae:
77:ee:03:13:f1:76:e6:07:70:70:3f:61:6d:30:cf:
c0:fb:65:47:4d:eb:89:ae:1a:65:e8:b8:bf:e9:bf:
4b:3b:4d:aa:8a:e6:0c:43:2f:12:13:78:66:9f:b0:
85:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:98:96:34:1A:94:D1:4D:15:00:42:75:B3:A2:E9:8B:5C:AF:B6:C2
X509v3 Authority Key Identifier:
keyid:B1:94:F0:30:4E:ED:D3:63:C6:62:2F:D9:1C:59:B1:08:71:AA:30:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZTwME7t02PGYi_ZHFmxCHGqMEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:94:e6:84:a6:c0:30:a1:de:89:76:d3:7e:47:12:cd:2e:f2:
5d:12:3e:a5:17:63:34:e5:db:7a:bf:3e:06:1b:24:b4:fc:02:
50:ca:8b:61:61:64:1d:8e:46:d6:d6:45:01:75:42:46:4d:57:
51:c3:22:c9:4c:06:23:c2:f3:12:e4:34:4d:e6:3b:fc:ca:c6:
96:75:ac:81:6d:fa:19:e8:0c:df:ce:d5:c8:cb:ae:c1:52:5a:
4e:b9:22:7c:e8:ac:9d:63:b0:75:6a:01:81:10:3f:03:22:c9:
a8:bc:51:7a:b1:0c:2b:9f:c3:82:6a:22:b6:ea:f7:76:1c:82:
15:ea:58:a2:d7:3f:a3:fe:24:ed:93:fc:00:24:d0:a9:b5:f5:
ac:3b:3a:47:35:f8:02:01:24:e2:f8:c5:00:a5:c6:4b:6b:36:
f5:a5:77:98:8a:52:2e:25:97:9e:7c:2f:b9:69:a0:33:5d:7e:
c5:a2:88:f1:11:f1:d3:08:3c:fe:36:63:2b:49:47:13:11:59:
b1:b5:91:e9:25:48:88:e9:0c:6a:8f:b7:92:66:f7:39:b8:1a:
17:33:45:bd:e6:fc:3f:d1:ad:12:ce:26:30:63:2b:06:1c:f7:
66:e2:de:ea:3d:81:7d:c3:96:23:14:b0:d2:20:36:e8:46:15:
99:52:39:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:25:37 2026 by rpki-client