Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.mft
File: z9s9kEs0RAVGtiQdeJTZMwC8vSg.mft (raw, json)
Hash identifier: lNH84AZ1haRkK8vkP72CuOqckO3FCAZUlnQi0paUpu0=
Subject key identifier: 0E:A9:79:F9:89:70:A5:31:51:86:6E:9F:61:7B:48:84:83:E9:85:DC
Authority key identifier: CF:DB:3D:90:4B:34:44:05:46:B6:24:1D:78:94:D9:33:00:BC:BD:28
Certificate issuer: /CN=cfdb3d904b34440546b6241d7894d93300bcbd28
Certificate serial: 019E20232F0D3740169A0DAB1ECF7734214B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z9s9kEs0RAVGtiQdeJTZMwC8vSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.mft
Manifest number: 0FA4
Signing time: Wed 13 May 2026 07:00:37 +0000
Manifest this update: Wed 13 May 2026 07:00:37 +0000
Manifest next update: Thu 14 May 2026 07:00:37 +0000
Files and hashes: 1: BcIjFBUMP6CBeWgUBi0kiP8mMD4.roa (hash: AnrLYQrWg/R3TPt/tXnLy7bKSyCDh8qfOknLsoHKVr0=)
2: tt8_4epx4fUU-t0TnlM9j9Sy8Gc.roa (hash: LFx80Ot89ti4/nAcgN280XkSiewCdAO+iihbkS/s85Y=)
3: z9s9kEs0RAVGtiQdeJTZMwC8vSg.crl (hash: UcPcso2altRJpZi84A6GX2u8OrG83RMMmr/jWeA+VOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/z9s9kEs0RAVGtiQdeJTZMwC8vSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:23:2f:0d:37:40:16:9a:0d:ab:1e:cf:77:34:21:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfdb3d904b34440546b6241d7894d93300bcbd28
Validity
Not Before: May 13 07:00:37 2026 GMT
Not After : May 14 07:00:37 2026 GMT
Subject: CN=0ea979f98970a53151866e9f617b488483e985dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:92:2c:7c:e2:ba:69:e7:69:bd:81:8e:71:56:
b5:f3:fd:84:ad:cb:8f:e8:3f:53:f9:3a:bd:21:dd:
bd:ad:1f:d5:5e:67:fa:b7:14:1b:75:50:3b:84:86:
4f:4f:c0:fe:e3:68:4b:0d:61:d5:c1:48:b7:d6:6d:
18:3a:43:c2:2b:d1:49:af:75:69:0a:c9:6e:b4:0a:
25:20:27:c7:df:f4:92:fd:b9:5f:ef:1a:c5:52:84:
bd:b1:1c:21:12:39:e8:62:d3:09:c3:b9:ec:8b:fa:
f0:3b:c9:d1:5f:ab:d1:eb:42:dd:4a:d8:be:37:7f:
14:ed:77:84:85:f5:59:90:1b:3c:d4:de:d7:e1:72:
75:11:a7:8d:2e:76:87:ce:8d:40:99:06:31:e8:53:
c0:04:b7:cc:5d:04:99:9d:21:b2:5e:9b:f6:8d:38:
98:d9:3c:e5:cd:56:30:ef:09:e4:45:47:df:24:2b:
f3:a7:13:42:ec:b0:47:57:97:32:ef:79:a9:a0:a1:
08:d5:d0:61:c9:c8:4f:a9:96:ef:92:99:c0:32:4d:
de:b7:cf:56:ab:18:66:c7:6f:93:9a:b1:85:49:26:
b2:bd:a6:6a:06:0d:9c:ab:3d:c8:d7:61:56:ef:39:
f0:86:a3:ee:88:00:32:f0:ad:ee:7a:21:0e:82:6a:
08:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:A9:79:F9:89:70:A5:31:51:86:6E:9F:61:7B:48:84:83:E9:85:DC
X509v3 Authority Key Identifier:
keyid:CF:DB:3D:90:4B:34:44:05:46:B6:24:1D:78:94:D9:33:00:BC:BD:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9s9kEs0RAVGtiQdeJTZMwC8vSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:18:08:93:ab:6e:c0:4a:ba:e6:be:e4:d0:2c:10:f7:d4:e6:
d2:61:e7:7c:b2:c7:4a:90:ac:d5:4e:00:be:35:6f:05:7c:2b:
67:8f:08:69:e3:8e:64:07:dc:e3:6a:3c:a0:20:85:fb:6a:c5:
0c:b0:be:50:96:26:0e:9c:dc:18:35:ce:77:dc:e3:91:31:f1:
f3:a2:6b:94:c4:6d:37:71:d6:17:39:7b:bb:b1:02:d6:9d:57:
e3:ea:15:8d:37:b0:bb:3b:37:d7:72:b6:b0:f3:35:bb:a8:36:
b0:47:14:2b:21:d0:c8:12:d2:47:10:3a:ac:79:86:a7:e7:df:
31:35:8d:96:2c:1d:d3:40:19:ee:fe:94:c8:5f:85:41:f7:fa:
e8:a1:fd:a0:06:66:ab:ee:f5:fc:1a:28:a2:5f:45:4c:29:fd:
99:04:64:b9:07:70:07:33:36:18:d2:dd:ac:23:82:c2:a2:d7:
e8:dc:1e:45:05:bc:67:5d:18:f3:8d:15:f4:46:9e:4b:b2:2c:
cd:17:2b:f6:68:9e:3d:da:29:cf:b2:25:6c:c9:52:e6:f8:b6:
d0:e2:63:96:85:a5:e0:94:71:48:38:04:81:3f:b8:bc:a4:cc:
65:c3:9d:de:65:59:ed:0e:b6:a5:0a:55:c2:fd:8f:1b:38:06:
0d:e2:23:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:59:40 2026 by rpki-client