Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.mft
File: znGAxLrTz0JaUGcuHLep0qx44gw.mft (raw, json)
Hash identifier: 1w00u0IdUl0zGga5QHORhAB8c2US9aJOxN3EPRQgxgo=
Subject key identifier: 36:87:EC:F9:D8:C8:9D:B5:48:07:B9:AC:CC:C5:EA:FF:0F:FD:9A:72
Authority key identifier: CE:71:80:C4:BA:D3:CF:42:5A:50:67:2E:1C:B7:A9:D2:AC:78:E2:0C
Certificate issuer: /CN=ce7180c4bad3cf425a50672e1cb7a9d2ac78e20c
Certificate serial: 019E1D59882C0285F77C7430E05D95D1511F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/znGAxLrTz0JaUGcuHLep0qx44gw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.mft
Manifest number: 15AD
Signing time: Tue 12 May 2026 18:01:07 +0000
Manifest this update: Tue 12 May 2026 18:01:07 +0000
Manifest next update: Wed 13 May 2026 18:01:07 +0000
Files and hashes: 1: CmEbUhenhDmMKvHKSkFpe9LG8X0.roa (hash: Jsb+hfYBWXp4dm2lj3dTAoFqYAK6O+6kl4dBC77ANZE=)
2: GtNJ0lmoQ9ZuqCpl3-J4Re7um1k.roa (hash: OD5qNfz5l9josRO/cRdoZZIkXHpha2NNc9udJTgh6/s=)
3: SQ9ZxRxAMd1xoAu9tA2c2yS9YUQ.roa (hash: MYiap9ADnfYQb/YwxbWyM4PVhhzPTbhg8edINlxn310=)
4: znGAxLrTz0JaUGcuHLep0qx44gw.crl (hash: KckCu/9P96u7yRruwic5LJR6ZbQ3OO8sIXU2dLGlWyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.mft
rsync://rpki.ripe.net/repository/DEFAULT/znGAxLrTz0JaUGcuHLep0qx44gw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 18:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:88:2c:02:85:f7:7c:74:30:e0:5d:95:d1:51:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce7180c4bad3cf425a50672e1cb7a9d2ac78e20c
Validity
Not Before: May 12 18:01:07 2026 GMT
Not After : May 13 18:01:07 2026 GMT
Subject: CN=3687ecf9d8c89db54807b9acccc5eaff0ffd9a72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e3:9d:30:b3:33:77:fd:56:b8:6a:aa:ff:c2:
ab:68:51:66:56:97:8a:26:bc:99:b0:c2:97:dd:0a:
d2:1f:d4:e3:41:5b:e9:bb:3c:6c:76:3c:60:23:47:
99:6b:8e:9c:d8:66:fc:13:7f:8a:27:a6:80:3b:32:
81:da:a6:32:0b:ba:2f:d1:53:86:3c:3c:b0:3f:0f:
33:93:db:a5:40:12:15:fd:d0:e0:80:cf:12:f7:f9:
8d:1b:18:21:37:1b:95:e2:f4:14:b3:d4:39:4a:01:
4a:f7:42:8b:92:05:d7:c3:f2:ad:8c:2d:dc:fc:1b:
4b:e4:39:17:fb:41:05:96:d4:e1:64:e6:6a:49:83:
69:aa:05:f9:53:c8:28:d9:cb:9e:2b:45:4b:7b:84:
e1:99:ca:4d:68:a0:be:ea:ce:f9:e7:bf:ee:09:7a:
57:03:4f:e1:9e:ca:03:f5:b1:e3:f9:cc:70:b7:45:
f3:fa:44:a4:e1:9e:d9:5a:40:75:0d:41:7f:81:77:
6a:0e:3c:1a:32:92:28:2d:65:38:d4:30:d7:85:b6:
03:ef:97:26:1e:62:77:16:77:3f:d4:f9:e7:ec:1f:
03:6f:d4:68:17:da:83:e5:c8:eb:a1:c4:9f:e1:12:
01:9b:7e:b1:1d:98:65:56:d2:2d:79:cb:1b:ec:7b:
90:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:87:EC:F9:D8:C8:9D:B5:48:07:B9:AC:CC:C5:EA:FF:0F:FD:9A:72
X509v3 Authority Key Identifier:
keyid:CE:71:80:C4:BA:D3:CF:42:5A:50:67:2E:1C:B7:A9:D2:AC:78:E2:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znGAxLrTz0JaUGcuHLep0qx44gw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:ee:34:6e:9c:37:6c:e9:e5:99:c8:3f:9e:76:c8:b2:ac:86:
da:14:18:9b:b4:7f:60:38:c5:40:27:82:f1:86:53:23:31:2e:
7c:50:c1:4b:95:07:bf:24:99:d3:7c:d2:62:d5:b8:97:f2:20:
90:bc:f9:0c:8e:73:bd:1b:85:78:f6:6e:ef:64:0c:f0:f5:9e:
81:e5:25:c1:a9:af:20:95:59:b1:6a:b9:6f:db:d8:90:32:2c:
65:93:75:08:44:c6:9d:c3:6f:d7:f0:38:57:17:e3:36:bc:20:
ea:48:52:b0:f8:2a:cf:31:fe:48:a8:6a:6a:d2:c8:95:f6:22:
c8:6b:80:56:69:c6:d9:98:a1:ad:64:9d:19:c0:49:e9:4f:fe:
19:93:17:40:fc:00:b1:6e:aa:a4:94:5c:1d:46:d4:c7:97:b8:
7d:e6:dd:b7:d2:a2:a9:bd:d4:b3:1d:80:d9:46:75:c9:ca:29:
f7:1b:25:b2:39:ed:21:3f:87:c6:14:8e:89:7f:bb:10:a2:18:
87:97:5e:a9:f3:a4:2d:74:38:42:fb:58:46:84:67:cc:84:1b:
8c:dc:04:bd:65:58:5b:03:f5:7b:88:04:11:f3:9a:3a:35:19:
4a:7f:3e:df:68:28:52:29:69:df:22:d9:3c:21:29:0a:a1:a0:
f7:39:ee:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:38:10 2026 by rpki-client