Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/zsOzR6IWvEN7C9TPC8jNpl6MLTs.mft
File: zsOzR6IWvEN7C9TPC8jNpl6MLTs.mft (raw, json)
Hash identifier: 3yVhmDpDvaYoCFvsfIY1oOWlOc1I4sgV0jNFOBjQipk=
Subject key identifier: 68:3C:FF:12:53:A2:86:3C:80:AB:0D:6C:67:27:1E:6E:CC:B1:5A:43
Authority key identifier: CE:C3:B3:47:A2:16:BC:43:7B:0B:D4:CF:0B:C8:CD:A6:5E:8C:2D:3B
Certificate issuer: /CN=cec3b347a216bc437b0bd4cf0bc8cda65e8c2d3b
Certificate serial: 019E1DC76C1EEDB17A9174E1F14547808377
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsOzR6IWvEN7C9TPC8jNpl6MLTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/zsOzR6IWvEN7C9TPC8jNpl6MLTs.mft
Manifest number: 1909
Signing time: Tue 12 May 2026 20:01:09 +0000
Manifest this update: Tue 12 May 2026 20:01:09 +0000
Manifest next update: Wed 13 May 2026 20:01:09 +0000
Files and hashes: 1: 1-MPmKwveaNevahCbJELRJOmxcEw.roa (hash: SJAbLycNC0JaVjQXy09rkhGA2yxjxemr+0WDUIZ9wv4=)
2: gOiN6DluQXSd3jleMbJxQUVj3SI.roa (hash: GYaC97wnCi+3xBKerwHYFT87pRuyzEPoseArfTTU9ys=)
3: rmssw7RMnHd1ZqcXua4Brefm154.roa (hash: fNpjAb4SqWl1UnQLJ2UF8i8M94XY4XErflTP+LbF0cQ=)
4: t6Cqn8bbFUBARYys1rSXQI-Qv_k.roa (hash: Qp3ObnIfU6K60CvbQfGVhKkJzOZmcYgVUzn5j0R02Vw=)
5: zsOzR6IWvEN7C9TPC8jNpl6MLTs.crl (hash: y+p2A2Xib/AJoV5JsT+FQKIxOPEGC5y8FWi+DdNsFrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/zsOzR6IWvEN7C9TPC8jNpl6MLTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/zsOzR6IWvEN7C9TPC8jNpl6MLTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/zsOzR6IWvEN7C9TPC8jNpl6MLTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:6c:1e:ed:b1:7a:91:74:e1:f1:45:47:80:83:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec3b347a216bc437b0bd4cf0bc8cda65e8c2d3b
Validity
Not Before: May 12 20:01:09 2026 GMT
Not After : May 13 20:01:09 2026 GMT
Subject: CN=683cff1253a2863c80ab0d6c67271e6eccb15a43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:b9:51:6a:27:ae:65:74:b3:d9:d7:91:26:7f:
94:27:90:57:17:76:2b:da:09:21:ee:c4:ed:32:88:
e2:77:72:4d:12:f7:97:21:f2:23:d7:ab:0a:6c:49:
be:fc:53:eb:49:ca:9c:82:d7:83:14:ea:1b:ff:93:
ec:7a:42:c3:a6:8b:47:a4:9b:b7:dc:b3:c5:3b:a3:
9f:3d:96:fb:4f:0a:2a:fa:ed:ca:c9:7a:65:5a:e3:
b4:e6:ba:9e:29:fd:a8:c9:b4:ea:a3:3d:c4:7b:e5:
7a:e3:cb:88:ce:ff:2a:15:14:da:46:c1:ed:0b:25:
52:f7:19:a7:82:a9:61:15:1b:f0:0e:d6:fe:8f:e6:
bb:49:34:3d:11:d6:27:4e:a5:38:b1:3b:90:37:c4:
98:b3:60:0a:35:2e:56:3e:14:ca:38:69:f6:c1:81:
c2:86:1f:d3:6e:2a:a1:9e:9f:05:bf:48:4a:e7:37:
af:44:83:9a:1c:27:36:18:1d:45:cf:07:cd:23:bd:
5e:00:54:f1:52:f7:db:94:b3:c0:da:db:4a:94:d4:
8c:3f:df:7b:53:da:5c:74:0c:18:84:de:90:6c:84:
58:b9:22:0e:df:0e:13:63:f3:3f:f7:c8:4d:40:15:
22:4e:87:f0:72:59:23:a7:b6:6b:fe:cd:43:ac:34:
65:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:3C:FF:12:53:A2:86:3C:80:AB:0D:6C:67:27:1E:6E:CC:B1:5A:43
X509v3 Authority Key Identifier:
keyid:CE:C3:B3:47:A2:16:BC:43:7B:0B:D4:CF:0B:C8:CD:A6:5E:8C:2D:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsOzR6IWvEN7C9TPC8jNpl6MLTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/zsOzR6IWvEN7C9TPC8jNpl6MLTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/zsOzR6IWvEN7C9TPC8jNpl6MLTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:31:e2:58:19:5a:14:d3:ad:06:6c:89:1a:09:78:77:f5:31:
e4:cf:1f:da:43:6b:31:79:96:9f:97:59:e5:57:a8:be:b6:51:
35:19:56:28:26:e6:24:70:e4:3b:21:47:78:94:0b:50:07:f6:
d1:fa:38:36:7a:00:56:c0:db:72:22:e6:d7:de:b5:ca:b7:e2:
23:86:11:82:84:f8:3e:24:cb:e5:9e:17:92:d6:2d:9e:81:e3:
9f:26:a4:32:7c:0a:1d:62:f6:8b:4a:8d:72:5e:ea:a1:ca:74:
75:0a:6a:86:8c:bf:f8:ac:e7:e2:2c:35:6d:bc:00:57:66:8a:
95:2b:78:60:a6:47:fd:58:d0:17:90:b3:2d:c8:40:e9:4e:75:
e8:e2:30:bb:48:21:c4:b3:7c:1d:a2:e7:a7:34:6b:f3:94:9f:
7a:26:b8:1f:da:f6:03:91:b8:d5:d0:1b:36:80:31:29:44:a8:
77:96:2a:ee:fc:54:86:73:fe:02:ab:60:6c:79:5d:ef:96:f4:
24:02:b4:9d:91:06:7d:fd:77:42:ec:76:0c:c1:9a:f5:ed:39:
3b:1d:9d:50:5f:41:ab:4b:c4:3f:ff:24:a4:a1:52:00:b2:72:
6a:a1:0c:df:68:03:66:9b:d1:45:9e:ae:16:ef:84:07:18:33:
d7:bb:43:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:39:34 2026 by rpki-client