Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/z0AYX1Us2XUnbANGT1DHpdNRVkw.mft
File: z0AYX1Us2XUnbANGT1DHpdNRVkw.mft (raw, json)
Hash identifier: wdrTe/EJPxPKGwzEjQxfB+WakjlMxaGTSqeowYAp3/k=
Subject key identifier: 4F:4D:6E:93:66:76:25:DF:72:EC:6F:BE:45:36:5D:0B:7F:92:D4:91
Authority key identifier: CF:40:18:5F:55:2C:D9:75:27:6C:03:46:4F:50:C7:A5:D3:51:56:4C
Certificate issuer: /CN=cf40185f552cd975276c03464f50c7a5d351564c
Certificate serial: 019E1CB4EFB0B9A6D1DF6FFFAC2C93C5A6FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z0AYX1Us2XUnbANGT1DHpdNRVkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/z0AYX1Us2XUnbANGT1DHpdNRVkw.mft
Manifest number: 0222
Signing time: Tue 12 May 2026 15:01:20 +0000
Manifest this update: Tue 12 May 2026 15:01:20 +0000
Manifest next update: Wed 13 May 2026 15:01:20 +0000
Files and hashes: 1: laiDZxmXdgJH8Of-yAuGAFD0Nks.roa (hash: 29mbTdf0w60u4m7lifJIKwS951c2LKKJ0JQHfZ51kdg=)
2: wPJ_bWcqiT5Ryc2PrLz-RlxJFfk.roa (hash: WhlDU2CEPgF/HK0/49CMTEtZOnQc9y/7MprKkJl/+MA=)
3: z0AYX1Us2XUnbANGT1DHpdNRVkw.crl (hash: OZrFr/VpjK9omc21y3Rq18gNtrzYjaTQ0VN1UpvJg8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/z0AYX1Us2XUnbANGT1DHpdNRVkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/z0AYX1Us2XUnbANGT1DHpdNRVkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/z0AYX1Us2XUnbANGT1DHpdNRVkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b4:ef:b0:b9:a6:d1:df:6f:ff:ac:2c:93:c5:a6:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf40185f552cd975276c03464f50c7a5d351564c
Validity
Not Before: May 12 15:01:20 2026 GMT
Not After : May 13 15:01:20 2026 GMT
Subject: CN=4f4d6e93667625df72ec6fbe45365d0b7f92d491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:86:70:0b:a0:0d:78:6c:54:15:ec:2e:e2:73:
77:e8:20:fc:6a:ac:24:38:8e:72:34:0b:40:62:99:
a9:b2:c5:7d:14:00:19:72:2c:87:d4:4d:b4:b5:d4:
02:79:4e:6f:3f:f2:1e:cf:64:70:ea:14:fa:65:79:
01:94:c8:c0:17:bb:12:70:c6:b7:e5:cb:fa:a4:a5:
dd:96:2f:0b:6b:07:3f:72:ce:6a:f5:a2:59:eb:78:
8e:15:bb:21:ab:aa:8c:d7:12:d7:34:a6:58:7b:7f:
59:70:01:ec:60:ca:d7:2b:72:ba:c7:05:73:70:09:
1f:e6:6f:bc:38:d2:98:16:54:d0:c2:c6:b5:45:61:
eb:62:00:ea:c2:71:6d:77:89:a1:62:fe:4d:92:c7:
2c:d0:a7:5a:1f:48:5d:e9:39:b3:a3:d0:b7:bf:f6:
eb:af:0b:a8:a2:23:1c:0e:2e:e3:1d:4c:1c:3c:19:
47:86:eb:1b:79:13:37:71:3e:91:01:32:d7:b2:c4:
50:fa:08:71:7e:eb:83:88:cf:f1:bb:3e:90:d7:7b:
ad:b4:18:33:11:12:3a:a5:4c:2a:fb:82:e1:0a:c4:
18:43:09:3c:7f:9b:bb:e9:0f:47:e9:e0:00:e3:f3:
c6:38:c2:48:49:52:ea:62:b0:c5:1f:3d:eb:03:d3:
d7:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:4D:6E:93:66:76:25:DF:72:EC:6F:BE:45:36:5D:0B:7F:92:D4:91
X509v3 Authority Key Identifier:
keyid:CF:40:18:5F:55:2C:D9:75:27:6C:03:46:4F:50:C7:A5:D3:51:56:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z0AYX1Us2XUnbANGT1DHpdNRVkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/z0AYX1Us2XUnbANGT1DHpdNRVkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/z0AYX1Us2XUnbANGT1DHpdNRVkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:da:49:07:cc:9c:cd:cd:8d:a4:4d:ce:fe:fd:ba:fe:09:05:
56:ab:d3:16:83:89:14:f2:a2:28:a4:ff:50:10:10:b5:2a:06:
1a:69:7a:19:25:2f:94:f2:71:0a:8b:3c:76:7a:3b:fb:a5:3f:
8e:03:3b:56:43:3d:18:d8:3f:a8:ea:75:c7:b4:d9:e0:d1:c1:
a1:d0:28:e0:24:b4:00:eb:55:6c:a8:54:8f:7a:8c:0d:d2:6a:
d5:da:3b:45:82:40:35:59:a0:df:dc:0d:4c:8c:36:f6:a5:e7:
cd:2a:39:ca:77:4e:a6:49:7a:0c:62:1d:6e:44:e3:8a:89:77:
dd:0f:8d:fd:d2:13:42:71:c8:78:48:9c:28:3b:f5:19:f9:19:
38:5b:20:85:43:df:66:ce:9b:d2:80:6c:1c:32:05:fa:89:5b:
a8:c0:a8:d4:0c:0f:7a:26:6f:ed:b2:bc:95:ef:9f:e8:90:b6:
c7:6a:1b:cf:96:82:1b:a9:ad:74:e4:c8:e8:66:22:aa:df:c3:
5f:a7:71:e1:f9:bd:70:c1:62:0f:bd:6e:7b:55:a3:29:67:40:
85:2e:89:f4:de:63:84:60:be:11:be:8d:cf:0e:d4:0c:6a:c7:
1f:84:01:d8:99:94:0e:92:0b:7d:39:c4:48:6c:2d:ef:c7:e8:
29:a2:d8:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:08:52 2026 by rpki-client