Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.mft
File: zBWcih5k_GT_ZmvZIZ3OF0NzyvI.mft (raw, json)
Hash identifier: B2Y2hOT+Kt19+C5W4AxJlJmm0Lxz65UmKN1Nx/dP2UA=
Subject key identifier: 2B:F5:4D:43:50:28:AD:EE:98:37:FB:3C:D1:C4:8B:04:40:88:25:D4
Authority key identifier: CC:15:9C:8A:1E:64:FC:64:FF:66:6B:D9:21:9D:CE:17:43:73:CA:F2
Certificate issuer: /CN=cc159c8a1e64fc64ff666bd9219dce174373caf2
Certificate serial: 019E1EA39983F9AD6C5731D6F1986CF0B224
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.mft
Manifest number: 15CE
Signing time: Wed 13 May 2026 00:01:38 +0000
Manifest this update: Wed 13 May 2026 00:01:38 +0000
Manifest next update: Thu 14 May 2026 00:01:38 +0000
Files and hashes: 1: CuEyheF-29dttpD6VLLaExCFGAA.roa (hash: R6vjhi7yIbFl0joD76O7Kh49JYPbEdB6dMSlf59XV7s=)
2: tSwu_rs-_T3OD9Pp5HQg9a8f-F0.roa (hash: OkFsnGmy75UDy40lQIElr+ClgPv+0wuI2ecBN6Kx84o=)
3: zBWcih5k_GT_ZmvZIZ3OF0NzyvI.crl (hash: qg10c+NpWq/vfxFgKrnN7VTZiP51AXdPDWnofz2Nk/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:99:83:f9:ad:6c:57:31:d6:f1:98:6c:f0:b2:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc159c8a1e64fc64ff666bd9219dce174373caf2
Validity
Not Before: May 13 00:01:38 2026 GMT
Not After : May 14 00:01:38 2026 GMT
Subject: CN=2bf54d435028adee9837fb3cd1c48b04408825d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:af:e5:54:29:92:8f:97:6e:69:b2:97:75:6d:
c2:0b:fd:66:52:cc:27:b7:eb:fc:8b:6b:86:ac:ac:
24:32:69:2a:fd:27:b3:9b:2b:5d:30:d1:8b:39:5c:
50:97:f3:94:4b:89:dd:52:18:d4:5c:81:be:00:db:
84:4c:61:6c:f4:c7:a2:a1:27:5b:a2:86:93:8e:fa:
37:9a:f7:7a:e7:ce:bd:50:7c:24:c5:71:a0:a1:be:
73:cb:c0:d3:33:5a:92:61:42:87:8f:a0:0f:ad:c5:
4c:dc:38:df:98:3a:05:03:8b:ba:e6:6c:39:3e:f3:
59:e8:9d:a4:09:2d:10:68:dc:a3:8a:ef:20:ac:5f:
e4:ad:25:17:f0:08:96:cf:2f:f7:cf:20:c3:dc:bb:
b6:55:92:6d:e0:0c:17:88:f5:bc:bb:5f:cc:04:d6:
d3:6f:6b:17:2c:79:5b:eb:06:20:69:53:64:2e:91:
12:b1:2a:ea:40:ca:14:45:f9:4d:38:8e:f6:ef:0d:
99:e0:a7:50:15:c5:a5:8d:56:13:01:3b:c7:17:3f:
8d:e9:50:79:b9:92:52:9f:95:95:d8:ca:0c:e3:67:
fa:d2:bf:77:53:05:09:fb:27:38:48:5e:38:60:98:
1f:c2:ab:fb:ca:33:59:c7:67:37:7f:0c:97:22:79:
29:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:F5:4D:43:50:28:AD:EE:98:37:FB:3C:D1:C4:8B:04:40:88:25:D4
X509v3 Authority Key Identifier:
keyid:CC:15:9C:8A:1E:64:FC:64:FF:66:6B:D9:21:9D:CE:17:43:73:CA:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:16:f3:71:38:5a:75:5e:c9:9a:af:59:cb:ee:18:88:a8:26:
e5:dd:e9:91:77:82:d2:f8:ef:f4:54:c3:04:41:6c:f1:ab:ea:
ec:cc:2d:77:aa:a2:6b:25:70:82:cc:3e:c5:b9:42:c0:cc:d0:
58:a6:05:ac:3a:05:86:36:d0:e0:57:2f:31:d7:31:6d:8d:9e:
08:92:98:fb:c9:ee:c5:67:6b:0d:9a:ad:97:b5:6f:d5:99:08:
e1:15:5a:83:10:dd:a3:4a:73:62:f6:b6:7d:0d:dd:a6:04:70:
a7:07:94:7b:c9:84:cd:66:c7:b4:81:95:54:31:27:5f:97:ee:
3f:a1:fe:9a:ec:43:ed:93:74:db:b8:1a:19:71:3c:dc:dc:f9:
cc:f0:91:32:63:78:af:64:9a:eb:9c:78:3c:dc:1f:03:d7:64:
c3:8f:eb:95:21:b6:15:92:f0:5c:ea:de:8a:50:c6:55:61:88:
eb:f2:2c:da:ec:27:f2:ee:ea:bf:7c:12:29:e4:30:91:b1:48:
1f:4a:df:d0:89:51:44:66:1d:21:70:e3:7e:4d:54:4d:20:46:
59:d3:5f:cb:e6:8f:f9:ad:65:7d:c0:c3:e3:42:cb:f0:7a:7d:
58:d3:e9:e2:e1:76:b6:7f:3f:ba:6a:93:f5:bc:32:f8:45:d1:
59:2f:3e:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:09:16 2026 by rpki-client