Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.mft
File: z0D92CoP3ztwvhgiHuumDYAe178.mft (raw, json)
Hash identifier: 9MF6NVWWVxC7bpE91+m0sjOWpTg4Xey0JeVLBmoAAao=
Subject key identifier: B6:79:F8:D9:3C:EB:F2:AD:82:AF:86:1A:EF:F1:E4:5F:CC:01:13:24
Authority key identifier: CF:40:FD:D8:2A:0F:DF:3B:70:BE:18:22:1E:EB:A6:0D:80:1E:D7:BF
Certificate issuer: /CN=cf40fdd82a0fdf3b70be18221eeba60d801ed7bf
Certificate serial: 019E1E35187BA0D55FAC220DE7278C1DCA77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z0D92CoP3ztwvhgiHuumDYAe178.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.mft
Manifest number: 191A
Signing time: Tue 12 May 2026 22:00:56 +0000
Manifest this update: Tue 12 May 2026 22:00:56 +0000
Manifest next update: Wed 13 May 2026 22:00:56 +0000
Files and hashes: 1: F_Dk1EXyZalcSUrQVrmmhufc-3c.roa (hash: Bud8p3xLXlXOrM2nbGi5ghblIRWjV7KfIKq7F8d9FoQ=)
2: P8VBM2Vt78MH0hTsTsDYoN1DCwo.roa (hash: BNrt6BqKbc/fkjdmpvHEP4BZdwanUa88eWbx1Ysrn8g=)
3: z0D92CoP3ztwvhgiHuumDYAe178.crl (hash: B1i+BcM1/sYfDARe5CcdctAbfHWHCkrrWIS62ttALEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.mft
rsync://rpki.ripe.net/repository/DEFAULT/z0D92CoP3ztwvhgiHuumDYAe178.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:18:7b:a0:d5:5f:ac:22:0d:e7:27:8c:1d:ca:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf40fdd82a0fdf3b70be18221eeba60d801ed7bf
Validity
Not Before: May 12 22:00:56 2026 GMT
Not After : May 13 22:00:56 2026 GMT
Subject: CN=b679f8d93cebf2ad82af861aeff1e45fcc011324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c8:a1:a0:1d:d6:e0:46:c6:d3:19:65:7e:f6:
8c:89:8f:c3:af:41:67:99:9e:2f:47:1d:2a:0b:13:
9a:76:70:6b:cc:d9:c0:34:26:20:ab:30:34:f0:b5:
cd:9a:8b:38:00:4b:6b:82:06:94:e4:38:7c:cc:db:
c4:b0:1d:2d:0d:29:6b:27:b5:92:eb:f4:29:07:44:
3e:ec:76:11:aa:96:ed:47:9c:ff:9c:4f:9a:ed:b4:
48:e6:e0:eb:94:4f:9e:24:15:03:4d:f1:17:a4:c4:
4d:c1:a1:64:09:c1:c8:41:4a:d0:40:b8:fc:11:0f:
dc:6f:07:c4:8e:7f:87:22:d7:cc:93:89:d6:88:a0:
c9:70:70:6c:63:b0:ed:25:21:12:a7:74:50:54:b6:
98:26:89:39:b8:53:75:82:11:e5:c2:5c:fd:7f:77:
98:5f:1a:3b:01:79:3f:96:be:17:88:93:d8:74:ed:
eb:dc:1c:37:10:af:dd:ca:de:1e:bb:96:29:47:23:
71:b2:e1:f7:a6:53:fe:0b:02:65:89:07:a5:95:e2:
ed:92:6a:09:d0:db:37:f9:99:91:0c:f7:e5:23:c4:
95:84:ae:86:d0:8f:24:ad:03:e5:fb:a1:0c:c2:ee:
d2:30:e3:91:ba:dd:c8:f2:c9:ef:ff:6c:51:e9:c8:
47:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:79:F8:D9:3C:EB:F2:AD:82:AF:86:1A:EF:F1:E4:5F:CC:01:13:24
X509v3 Authority Key Identifier:
keyid:CF:40:FD:D8:2A:0F:DF:3B:70:BE:18:22:1E:EB:A6:0D:80:1E:D7:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z0D92CoP3ztwvhgiHuumDYAe178.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:05:23:76:62:0d:04:dd:48:5c:f8:72:14:d9:76:6b:7b:19:
5c:1a:a5:7f:e1:59:bc:db:63:75:bb:9c:59:9c:9f:03:c3:d6:
d4:70:0d:3e:5d:ff:aa:45:c1:d2:d4:ec:41:aa:98:f8:73:46:
b7:0c:a7:62:ae:ea:9b:0f:36:02:20:c7:06:14:db:3d:04:cb:
0c:ec:70:34:0c:c0:50:a4:47:4f:e5:bc:0c:e5:d8:37:f8:11:
e0:d0:33:ca:ee:e9:02:d3:05:b5:2f:e1:23:f5:a3:6b:5e:11:
96:1d:04:3e:33:fd:2e:0b:0a:7e:09:2d:1a:eb:c4:f7:f5:d1:
86:a4:c2:e7:36:7a:93:fa:b8:50:24:a4:00:6b:c0:f8:38:8a:
dc:ee:3f:cb:66:5a:fd:1d:b4:6d:07:ba:70:0c:02:79:72:b5:
d0:1b:31:e0:65:ab:7c:2b:a0:71:e4:02:9a:bd:e8:f3:9e:92:
fe:df:3a:69:e4:d4:50:65:c2:8c:8b:87:55:21:0e:6f:54:dd:
cf:0e:87:8e:01:22:c3:73:a4:5a:d5:35:71:f8:61:cd:b7:07:
30:f4:fb:43:75:11:c4:47:7b:7b:9f:0b:02:46:a0:9b:2b:c3:
5e:e6:9a:24:7e:c5:f3:0f:28:15:e0:a6:41:bd:9f:ec:bf:e0:
7f:94:64:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:03:30 2026 by rpki-client