Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.mft
File: ZRaETSRdQSSiKlNrBG2oYzLQuRE.mft (raw, json)
Hash identifier: sF+2bcV67AYLvUWZZBa2vRq/X6zksHWWAcjPNMmoXbU=
Subject key identifier: 00:6E:50:8A:91:75:4F:AE:DD:BC:A5:6D:12:20:D7:FC:0B:6C:04:DA
Authority key identifier: 65:16:84:4D:24:5D:41:24:A2:2A:53:6B:04:6D:A8:63:32:D0:B9:11
Certificate issuer: /CN=6516844d245d4124a22a536b046da86332d0b911
Certificate serial: 019E205ACD492083508576A8FB7205605027
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZRaETSRdQSSiKlNrBG2oYzLQuRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.mft
Manifest number: 0985
Signing time: Wed 13 May 2026 08:01:22 +0000
Manifest this update: Wed 13 May 2026 08:01:22 +0000
Manifest next update: Thu 14 May 2026 08:01:22 +0000
Files and hashes: 1: 7BgGMhfrcQqzufLm6BOZyNmcrP4.roa (hash: Ez1hXHY/SyH5UhM0EJmIkgA9tRyMxJtbCALr5l1nz1Y=)
2: ZRaETSRdQSSiKlNrBG2oYzLQuRE.crl (hash: qXywQWPTbYjWgGzTjcVG5x+I1KDlokIGzDzY9Fqw5rc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZRaETSRdQSSiKlNrBG2oYzLQuRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:5a:cd:49:20:83:50:85:76:a8:fb:72:05:60:50:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6516844d245d4124a22a536b046da86332d0b911
Validity
Not Before: May 13 08:01:22 2026 GMT
Not After : May 14 08:01:22 2026 GMT
Subject: CN=006e508a91754faeddbca56d1220d7fc0b6c04da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:22:e9:db:27:05:8a:6e:01:ac:5c:d9:67:50:
69:68:ef:51:da:39:03:27:7c:ec:f9:4d:9e:cd:fd:
98:1f:b3:3a:d7:2d:76:26:22:64:f4:d8:34:d3:a9:
03:6b:0f:78:1b:cc:ee:73:7e:e3:51:3e:4c:7d:8e:
53:e3:15:d3:23:18:28:66:a9:6d:a7:59:bc:0b:ae:
a1:5c:08:57:e3:83:37:3e:1d:c8:50:cc:e9:3c:a9:
66:93:2f:bc:3f:f1:74:4e:9c:51:0a:a5:08:81:77:
db:e6:30:27:41:2b:1a:fb:e0:5d:d4:39:ed:1b:0c:
00:46:ba:d1:06:71:01:77:5a:1c:a0:9b:d6:b8:96:
bb:53:b5:3c:53:4b:0f:c4:2f:ef:3b:51:62:c3:b5:
dc:68:4f:02:c0:e5:61:74:d7:9f:79:9a:9f:e7:c0:
70:b0:3c:ad:17:3d:dc:f1:67:5f:08:10:90:7c:80:
cc:e3:91:19:80:e9:da:e4:f8:ed:03:78:28:58:f1:
9d:54:cb:e3:67:2b:da:f3:51:2a:30:fb:89:a0:ee:
d2:77:fe:8f:ac:37:d1:39:57:f4:63:e5:d3:a4:76:
00:e4:d0:12:fe:4b:88:1f:38:ef:7a:25:33:98:3f:
e9:ef:3b:79:fa:de:43:22:d7:2e:29:c8:ec:48:42:
d8:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:6E:50:8A:91:75:4F:AE:DD:BC:A5:6D:12:20:D7:FC:0B:6C:04:DA
X509v3 Authority Key Identifier:
keyid:65:16:84:4D:24:5D:41:24:A2:2A:53:6B:04:6D:A8:63:32:D0:B9:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRaETSRdQSSiKlNrBG2oYzLQuRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:19:61:3f:d7:bd:41:59:b4:8a:d0:6b:75:8a:94:8c:bf:aa:
4b:34:dc:6a:c7:f1:46:bf:b5:20:d0:23:12:3f:25:cc:1f:9b:
24:8f:7f:7d:07:33:ec:7f:19:bc:4e:43:9d:31:18:f9:22:5f:
2f:de:d1:f8:8e:1c:43:f9:43:d8:e8:01:4c:14:f3:57:75:ed:
43:81:f6:d1:4f:89:0b:ac:9d:8b:d9:29:84:7f:e1:fe:c6:4d:
20:58:fb:2b:1a:94:f7:27:04:53:45:bb:c3:37:d7:30:e1:5a:
bc:76:64:cd:fa:8c:c4:84:b9:22:28:35:2b:2e:41:c6:f7:f9:
32:fa:b2:f3:48:4f:3e:bd:df:8b:3a:a1:1e:89:c0:15:98:a9:
f7:df:e1:45:91:b5:8b:a4:21:49:bf:f5:c9:07:1c:55:89:75:
b7:93:67:9c:bd:66:0f:e5:2f:4a:5f:de:bc:a9:0b:a2:de:8c:
d0:e1:52:26:2d:f6:62:58:98:de:4e:1a:12:77:39:62:bd:11:
01:0e:dd:82:6e:02:17:e8:fb:93:6c:79:7a:7f:e4:c4:18:71:
a5:2d:62:f4:e8:61:b8:78:b1:2c:bc:e2:e7:58:8a:7f:81:f1:
c9:78:f3:f5:68:7d:09:85:d5:09:3f:8f:60:58:8e:ce:23:e1:
81:60:17:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:12:47 2026 by rpki-client