Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/ZcXa1UTfSXFghevoDb6C62iiCck.mft
File: ZcXa1UTfSXFghevoDb6C62iiCck.mft (raw, json)
Hash identifier: foygU9hPl4YM7uXTnfs5k1fZpV3phEd4C4plvTlm1uE=
Subject key identifier: 9E:1B:52:A4:26:42:4B:AD:49:4B:E5:DC:91:CE:20:E9:EB:5F:B2:32
Authority key identifier: 65:C5:DA:D5:44:DF:49:71:60:85:EB:E8:0D:BE:82:EB:68:A2:09:C9
Certificate issuer: /CN=65c5dad544df49716085ebe80dbe82eb68a209c9
Certificate serial: 019E1EA2A82C825EE25FC4AA5453BA062F3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZcXa1UTfSXFghevoDb6C62iiCck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/ZcXa1UTfSXFghevoDb6C62iiCck.mft
Manifest number: 1123
Signing time: Wed 13 May 2026 00:00:36 +0000
Manifest this update: Wed 13 May 2026 00:00:36 +0000
Manifest next update: Thu 14 May 2026 00:00:36 +0000
Files and hashes: 1: SLxH_u9zeCm0sBzFGpjFyprUq1k.roa (hash: YHV8hHdigULABzb/Rh8IYMXXingzJr+tiIat3maLhrg=)
2: ZcXa1UTfSXFghevoDb6C62iiCck.crl (hash: sRHWQn0aeuAzg7Zf/yag7MirhYAh4XZ4vCcCVq9fY98=)
3: qWNtslR5VeuzsdBANHUyp5ZAUOU.roa (hash: rgvLkD6mm+PX1WOuRNNO3Ee9uRmn0UljGpNc3jlNEWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/ZcXa1UTfSXFghevoDb6C62iiCck.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/ZcXa1UTfSXFghevoDb6C62iiCck.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZcXa1UTfSXFghevoDb6C62iiCck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a2:a8:2c:82:5e:e2:5f:c4:aa:54:53:ba:06:2f:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65c5dad544df49716085ebe80dbe82eb68a209c9
Validity
Not Before: May 13 00:00:36 2026 GMT
Not After : May 14 00:00:36 2026 GMT
Subject: CN=9e1b52a426424bad494be5dc91ce20e9eb5fb232
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3a:22:45:05:54:62:2c:cd:48:92:78:b4:6f:
ab:39:3d:d9:b6:36:03:24:d8:a2:d2:6a:87:78:fa:
b5:99:97:51:ad:e9:06:ab:80:44:7f:66:d1:85:db:
a0:22:f2:67:9f:70:f4:04:73:92:c1:bd:cd:05:93:
05:82:5c:1b:28:64:1b:36:7e:20:20:ba:76:f7:54:
83:82:c4:ba:05:06:28:e5:07:8b:96:90:28:ec:8b:
b0:68:f3:26:e7:eb:c6:49:47:43:26:1a:af:7e:59:
d4:41:81:a2:45:8f:0a:bb:ff:d5:e1:5f:84:a6:ce:
c0:9c:f5:c0:c1:8b:bb:1a:10:3d:0a:0a:6b:63:33:
ac:f6:35:ba:11:d4:6a:10:b5:d9:8b:89:ec:a1:62:
09:70:86:46:0b:44:c8:67:0b:e5:b3:99:cd:b2:89:
cc:32:86:3d:ca:91:7c:f2:76:36:00:92:a3:54:a1:
2b:cc:15:45:22:85:fe:02:94:36:ef:ac:9b:c1:e9:
79:b1:ea:fb:57:2a:13:96:ee:b4:53:01:30:9c:45:
0b:cd:c7:8f:67:2f:ff:9e:9c:86:af:c9:5d:fd:dc:
65:c7:90:37:14:6c:94:91:6e:3c:d8:87:db:f0:3f:
46:91:8b:b4:5c:29:cc:ae:4d:44:39:e9:53:61:06:
bd:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:1B:52:A4:26:42:4B:AD:49:4B:E5:DC:91:CE:20:E9:EB:5F:B2:32
X509v3 Authority Key Identifier:
keyid:65:C5:DA:D5:44:DF:49:71:60:85:EB:E8:0D:BE:82:EB:68:A2:09:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZcXa1UTfSXFghevoDb6C62iiCck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/ZcXa1UTfSXFghevoDb6C62iiCck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/ZcXa1UTfSXFghevoDb6C62iiCck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:ae:3e:d2:72:73:0b:c5:92:b8:b6:7e:f5:ab:44:64:2f:36:
8b:22:f8:26:13:cd:34:59:62:ea:8c:83:89:d6:77:9d:12:af:
d7:7d:e1:cd:e0:58:26:c8:e8:f3:de:e3:f3:e7:e4:9a:4f:e3:
cb:c1:e1:b7:0d:f3:80:22:c8:fb:0d:1e:54:40:38:8d:c2:f8:
0c:56:7d:9c:c5:39:fd:ed:c6:7c:6b:16:09:05:7f:60:01:0e:
fb:3c:86:51:b8:ef:7a:66:2e:74:61:d0:5f:55:4a:7d:3b:ec:
5e:25:1c:0d:ef:2d:7e:74:24:73:cd:ac:38:4b:d7:52:f5:ec:
a9:d0:ca:9b:c1:2d:ef:d4:28:7f:ef:fe:05:e9:6d:87:22:a5:
98:0b:a8:cf:e1:c8:9e:ca:d1:4c:75:6d:9f:e7:96:ba:da:c8:
cb:5d:4b:6f:d5:f3:48:10:91:d9:d3:6c:36:8c:2f:73:80:3e:
2e:39:30:03:d2:1e:f9:47:f1:9d:6f:ab:ab:a0:fe:5c:a9:b9:
28:39:c1:24:1e:6b:36:1b:fc:2e:15:f3:a8:44:70:61:0f:7a:
b4:91:36:c6:b2:dd:d2:6f:63:36:fa:d6:44:ed:f5:fd:8e:23:
10:e6:e8:0a:85:44:5e:4d:17:5a:04:f1:dc:e5:e3:2d:60:4b:
57:8f:34:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:09:38 2026 by rpki-client