Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/c7cbb1-0dcd-42f4-bf63-3df471c01c9e/1/_zKbmJBKLs6EguDyWPXDT-rVjOI.mft
File: _zKbmJBKLs6EguDyWPXDT-rVjOI.mft (raw, json)
Hash identifier: nKI4XccNto71Vkfb9QO+Mk6gS9lcKAgllFJSv0Ocig0=
Subject key identifier: 10:F9:B3:20:2E:62:DF:3C:B5:F6:A4:B7:BB:71:7D:E6:50:98:C4:AA
Authority key identifier: FF:32:9B:98:90:4A:2E:CE:84:82:E0:F2:58:F5:C3:4F:EA:D5:8C:E2
Certificate issuer: /CN=ff329b98904a2ece8482e0f258f5c34fead58ce2
Certificate serial: 019E1D595635F12E63A34660B924A648C074
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zKbmJBKLs6EguDyWPXDT-rVjOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/c7cbb1-0dcd-42f4-bf63-3df471c01c9e/1/_zKbmJBKLs6EguDyWPXDT-rVjOI.mft
Manifest number: 1898
Signing time: Tue 12 May 2026 18:00:54 +0000
Manifest this update: Tue 12 May 2026 18:00:54 +0000
Manifest next update: Wed 13 May 2026 18:00:54 +0000
Files and hashes: 1: _JnhSJS19JlHl9jJTexqDWYqi9A.roa (hash: SSBeQuTX3gSz2r22CXEew81x4g/DT16JBva2SQJoq3g=)
2: _zKbmJBKLs6EguDyWPXDT-rVjOI.crl (hash: mP+gvKYC8SX3+zZhO9BT/+5qQPVezHUYQUFurZKXo4A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/c7cbb1-0dcd-42f4-bf63-3df471c01c9e/1/_zKbmJBKLs6EguDyWPXDT-rVjOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/c7cbb1-0dcd-42f4-bf63-3df471c01c9e/1/_zKbmJBKLs6EguDyWPXDT-rVjOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_zKbmJBKLs6EguDyWPXDT-rVjOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 18:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:56:35:f1:2e:63:a3:46:60:b9:24:a6:48:c0:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff329b98904a2ece8482e0f258f5c34fead58ce2
Validity
Not Before: May 12 18:00:54 2026 GMT
Not After : May 13 18:00:54 2026 GMT
Subject: CN=10f9b3202e62df3cb5f6a4b7bb717de65098c4aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:60:b1:38:15:91:dc:6f:a5:29:2e:32:07:dd:
4e:a2:08:ec:b1:f2:ff:59:74:13:56:85:56:c0:ac:
a9:16:59:88:0a:6a:3a:7e:98:ea:66:b9:69:0b:ef:
a8:76:37:9b:91:e4:b4:31:e8:7c:0d:2c:52:a3:1b:
56:0c:31:10:c7:d2:e4:fb:f8:71:a9:b3:23:9d:e5:
8c:90:80:4c:59:65:f5:41:4b:e8:52:99:cc:67:a5:
01:d4:0e:4d:84:20:40:31:40:64:67:40:15:52:ce:
ca:8f:78:64:79:14:8d:06:07:e8:6c:97:78:1c:c3:
82:4f:08:27:c5:8f:a1:79:5e:4a:9f:39:24:00:f8:
6a:ed:6a:5f:3c:e8:ba:d2:a2:10:80:bb:eb:ed:0d:
6d:d1:e6:fd:c8:ea:2f:6f:2f:c2:2d:90:3f:56:2c:
6c:f8:ab:09:a1:8b:51:c3:51:b4:17:0f:42:fc:cd:
62:0b:8d:6b:67:3a:d3:7d:5d:3b:4e:47:6e:ce:da:
22:b6:34:cd:d3:c5:dd:d6:a1:4c:68:07:9e:88:2a:
07:06:e7:86:4d:b3:0d:49:8e:37:32:ea:35:3c:e4:
df:ae:bf:00:9b:09:17:8a:12:d9:f8:a1:0c:c4:70:
04:b1:c9:49:b2:d0:f7:9a:c7:3c:cd:5c:18:f9:51:
10:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:F9:B3:20:2E:62:DF:3C:B5:F6:A4:B7:BB:71:7D:E6:50:98:C4:AA
X509v3 Authority Key Identifier:
keyid:FF:32:9B:98:90:4A:2E:CE:84:82:E0:F2:58:F5:C3:4F:EA:D5:8C:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zKbmJBKLs6EguDyWPXDT-rVjOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/c7cbb1-0dcd-42f4-bf63-3df471c01c9e/1/_zKbmJBKLs6EguDyWPXDT-rVjOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/c7cbb1-0dcd-42f4-bf63-3df471c01c9e/1/_zKbmJBKLs6EguDyWPXDT-rVjOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:12:bd:8b:fe:97:48:ba:fa:db:ac:3a:ca:da:06:50:a6:8d:
92:df:c2:2e:62:8e:83:f8:b3:ee:cd:26:9b:2d:f0:37:6e:e8:
b7:a3:3a:28:fa:eb:f0:8c:5e:83:f1:f7:97:f9:f4:f8:84:04:
4a:67:bd:48:de:2e:aa:02:1c:57:82:d7:4f:6c:55:ab:d4:6a:
9d:be:34:d8:07:24:dc:26:60:95:cd:b8:95:40:fe:03:96:02:
d1:74:4a:91:93:42:b9:ce:63:89:4f:4a:e1:d0:44:3a:83:c1:
21:1d:53:fc:44:ef:40:b4:42:77:c4:0c:14:27:28:08:52:42:
91:50:62:a0:0e:a6:cf:3a:82:50:22:6d:5e:c2:cf:1c:15:69:
a4:46:b0:c4:b2:47:3b:6f:d4:43:da:7b:32:ae:08:d7:22:a0:
6c:da:98:f3:f2:76:b1:8c:94:33:2d:88:be:24:74:53:69:f9:
74:fc:f4:00:fd:ba:03:ea:3d:5e:9f:1b:fa:87:79:4d:67:e6:
77:4b:33:74:79:03:de:95:50:0d:f0:f8:33:df:2d:e9:02:eb:
6b:56:8f:94:05:85:f6:c6:fd:12:95:9a:1b:de:70:36:95:e9:
38:a9:2b:de:bb:0a:d3:ad:bb:e1:95:b8:11:4e:40:70:02:c2:
90:02:e8:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:07:52 2026 by rpki-client