Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.mft
File: zr9l4AadvMdre1VujB1wWInfJ-k.mft (raw, json)
Hash identifier: AS+N91DEwkuXkYWHkhzwl7YuwP9qUBS8/1bVvHAi73w=
Subject key identifier: 54:99:91:80:72:A7:6C:3F:FB:73:8B:AD:11:74:9A:35:45:2C:3E:B9
Authority key identifier: CE:BF:65:E0:06:9D:BC:C7:6B:7B:55:6E:8C:1D:70:58:89:DF:27:E9
Certificate issuer: /CN=cebf65e0069dbcc76b7b556e8c1d705889df27e9
Certificate serial: 019E1D902E83FF2CA5A85FE57FAD10D795BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zr9l4AadvMdre1VujB1wWInfJ-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.mft
Manifest number: 1915
Signing time: Tue 12 May 2026 19:00:48 +0000
Manifest this update: Tue 12 May 2026 19:00:48 +0000
Manifest next update: Wed 13 May 2026 19:00:48 +0000
Files and hashes: 1: kLUG7I7zaleUboTqrqB19XXsTkQ.roa (hash: cKKeB+BIlOYQDOr355c8ocGK4xiw2EqpjCd7kzeueqs=)
2: ku0WTxDvPv2BRSWmhVXxJBzi0EM.roa (hash: gVb5IHgLpvS8ffqO/hNhQNz/nK0f5pvRNLYLZEY7RQs=)
3: zr9l4AadvMdre1VujB1wWInfJ-k.crl (hash: fexAbEfEdqconXzOyx5R7tV7+7C+ReK99/n9jWGfP2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/zr9l4AadvMdre1VujB1wWInfJ-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:2e:83:ff:2c:a5:a8:5f:e5:7f:ad:10:d7:95:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cebf65e0069dbcc76b7b556e8c1d705889df27e9
Validity
Not Before: May 12 19:00:48 2026 GMT
Not After : May 13 19:00:48 2026 GMT
Subject: CN=5499918072a76c3ffb738bad11749a35452c3eb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:41:fc:9f:07:f1:f6:2b:56:fc:37:be:18:f5:
59:ea:33:99:81:c1:f0:d9:3d:22:6d:ac:99:04:08:
ac:22:09:f6:63:fd:15:9f:07:a6:66:97:91:fe:06:
4f:40:20:33:ef:8c:4f:7e:dd:88:d8:75:37:1f:d5:
e7:08:64:01:20:f3:7e:43:a3:1b:bb:4a:ca:69:71:
cc:a9:89:4f:b8:5b:e3:ab:b2:65:a3:6a:ca:67:09:
5f:b7:f5:0e:b5:a2:de:af:f0:cd:29:f2:e2:00:e9:
87:de:26:10:7d:35:c4:a8:c9:66:52:1d:54:09:d9:
f1:e4:f2:e4:27:a4:5c:0e:d0:87:4c:1a:33:9e:5a:
c8:71:49:26:6d:2f:95:9f:53:49:95:c3:0c:7c:c4:
19:88:a1:79:ce:43:9a:36:e3:4c:22:b5:21:5f:83:
4f:c9:38:79:e7:76:dc:9a:ca:57:89:f8:bd:12:ea:
22:ca:59:38:a9:2d:ea:00:10:dd:2c:35:dc:4d:c6:
59:10:8d:85:61:e4:b4:98:79:5c:d1:e9:af:4a:77:
bc:af:6b:f2:2e:e3:20:98:0d:8e:72:8e:7d:de:01:
8a:75:8d:16:59:14:f7:47:5b:25:d6:a7:cf:a8:bd:
fb:5b:48:27:64:ca:cc:2d:23:79:85:1d:9b:e7:20:
f2:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:99:91:80:72:A7:6C:3F:FB:73:8B:AD:11:74:9A:35:45:2C:3E:B9
X509v3 Authority Key Identifier:
keyid:CE:BF:65:E0:06:9D:BC:C7:6B:7B:55:6E:8C:1D:70:58:89:DF:27:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zr9l4AadvMdre1VujB1wWInfJ-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:38:bd:13:aa:d5:8b:65:0b:5f:f8:5c:b3:57:8c:46:60:d9:
65:78:23:01:77:b9:7d:49:c5:94:79:36:fd:46:ad:11:69:18:
67:e0:41:1a:9a:44:d4:2e:d7:6a:2d:25:9a:22:ed:e7:e9:95:
eb:d0:9f:36:cb:42:e5:35:e3:27:0c:16:57:ac:7e:58:4d:d6:
a3:28:30:31:1f:38:67:9f:70:54:e7:1d:a8:d1:b2:2e:a5:11:
0b:90:0c:e4:52:32:d3:33:49:31:99:84:ff:29:67:6d:07:05:
b0:ec:bf:b1:c7:09:a7:37:7b:cf:b3:57:46:61:1d:87:d6:01:
ec:18:b6:ce:c9:b6:9f:76:4d:56:70:69:e9:f7:ec:f7:db:b0:
c3:6f:03:4e:6d:02:a5:2d:84:84:b6:65:de:8c:30:36:d1:c1:
95:11:9b:a0:e9:8b:90:f4:93:2c:15:16:b3:d3:ee:8e:88:da:
05:02:ca:d0:b2:82:cf:27:b1:af:24:20:cc:44:10:38:f8:5c:
02:7f:e8:16:6b:04:58:03:8a:63:8f:7b:1a:26:a2:55:7e:8f:
64:c6:50:fa:7b:59:a1:3a:82:75:91:22:06:f2:7c:a1:aa:57:
8a:59:14:54:72:54:47:52:59:b4:9e:90:03:c5:d9:5b:b0:34:
53:46:3b:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:04:38 2026 by rpki-client