Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/35a9a6-60cd-4f24-8ef0-7dc69430d352/1/ZxzQcdyWC9yCmwvn40trYc-LCx4.mft
File: ZxzQcdyWC9yCmwvn40trYc-LCx4.mft (raw, json)
Hash identifier: h8Iv4vL0dJLJBWSfM5O4caE6NMmBZKgNbr0Yj5ZmU/o=
Subject key identifier: 63:48:B0:30:24:96:7C:C8:FF:8C:53:39:9C:F5:5E:7E:9C:3D:BB:5F
Authority key identifier: 67:1C:D0:71:DC:96:0B:DC:82:9B:0B:E7:E3:4B:6B:61:CF:8B:0B:1E
Certificate issuer: /CN=671cd071dc960bdc829b0be7e34b6b61cf8b0b1e
Certificate serial: 019E202353D5C5B75D55D51159A277E0EE38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZxzQcdyWC9yCmwvn40trYc-LCx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/35a9a6-60cd-4f24-8ef0-7dc69430d352/1/ZxzQcdyWC9yCmwvn40trYc-LCx4.mft
Manifest number: 02E2
Signing time: Wed 13 May 2026 07:00:46 +0000
Manifest this update: Wed 13 May 2026 07:00:46 +0000
Manifest next update: Thu 14 May 2026 07:00:46 +0000
Files and hashes: 1: B0kj7SdwSZWmEU9GKPX-vqJAVao.roa (hash: UN4l73RmEx8CBEkdPrS/+GtzsuSkIQeGfMIfQBPpbKI=)
2: Mdx0wPKImju2r6Wn-sTkPv2XXCk.roa (hash: KkcVte1gTb6znaz/vnrVSs9UtNLYEStRQ8bGw7/kCho=)
3: ZxzQcdyWC9yCmwvn40trYc-LCx4.crl (hash: H7IHGOO2LH82rPbxd7S8fqwo58yXUe5Ofb8nbq+GQ9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/35a9a6-60cd-4f24-8ef0-7dc69430d352/1/ZxzQcdyWC9yCmwvn40trYc-LCx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/35a9a6-60cd-4f24-8ef0-7dc69430d352/1/ZxzQcdyWC9yCmwvn40trYc-LCx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZxzQcdyWC9yCmwvn40trYc-LCx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:23:53:d5:c5:b7:5d:55:d5:11:59:a2:77:e0:ee:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=671cd071dc960bdc829b0be7e34b6b61cf8b0b1e
Validity
Not Before: May 13 07:00:46 2026 GMT
Not After : May 14 07:00:46 2026 GMT
Subject: CN=6348b03024967cc8ff8c53399cf55e7e9c3dbb5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e5:c1:20:22:5c:7e:53:ac:bb:8f:14:b9:53:
a7:36:7e:dc:06:ff:43:64:fd:d6:fa:45:62:78:9c:
04:18:e6:94:92:14:18:fb:10:17:d1:b6:9c:ac:cf:
18:1d:4b:7a:4f:0a:47:67:1b:2b:95:6a:bd:e7:6d:
54:7c:90:7e:50:70:bc:ca:bc:07:dc:5c:46:54:55:
d4:27:72:c2:90:e7:c1:03:10:57:54:5e:5c:99:92:
59:89:03:10:51:b4:da:5f:52:6c:88:2f:e9:f6:ca:
86:2d:10:1c:93:9b:45:df:fe:3c:55:13:38:a3:41:
c0:20:c4:a6:24:55:52:42:29:c8:81:f7:84:e4:41:
7b:b1:81:78:91:d9:d9:ce:52:74:3f:d1:ee:a9:79:
d7:f3:3e:05:86:81:5f:ef:97:62:93:25:98:bd:9d:
7e:69:14:fc:40:c3:b9:8d:dd:b4:af:61:25:45:c3:
55:53:8a:91:4f:a0:7b:6e:b4:d7:f6:63:4c:e5:59:
4f:65:2e:45:c4:c6:5d:b5:bf:64:a5:0d:78:a7:ea:
fc:f5:e7:d8:0a:59:07:73:95:63:06:37:b1:85:32:
a2:49:11:6a:c5:ff:97:fd:91:52:b0:3a:1a:30:59:
ae:a8:2e:60:49:68:17:ca:2d:2c:25:9d:04:e8:98:
4f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:48:B0:30:24:96:7C:C8:FF:8C:53:39:9C:F5:5E:7E:9C:3D:BB:5F
X509v3 Authority Key Identifier:
keyid:67:1C:D0:71:DC:96:0B:DC:82:9B:0B:E7:E3:4B:6B:61:CF:8B:0B:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZxzQcdyWC9yCmwvn40trYc-LCx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/35a9a6-60cd-4f24-8ef0-7dc69430d352/1/ZxzQcdyWC9yCmwvn40trYc-LCx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/35a9a6-60cd-4f24-8ef0-7dc69430d352/1/ZxzQcdyWC9yCmwvn40trYc-LCx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:1c:21:81:a0:af:62:fa:02:a9:20:02:be:6a:45:e3:31:46:
46:0d:cc:ea:82:8a:f9:17:4d:eb:95:1c:82:d0:ae:15:e4:69:
75:92:79:b2:d9:89:d1:bd:f9:d0:d0:bf:36:eb:ce:ee:ea:f3:
3c:92:c3:40:44:7c:2b:cc:14:e2:14:87:f8:b0:74:eb:57:31:
03:bc:94:7e:81:e5:55:97:08:27:c0:71:52:62:ea:0f:c8:09:
bc:ef:57:a0:b0:9e:c1:58:8d:1e:d6:f7:4e:88:7e:c7:51:f5:
61:66:1d:97:a6:3b:f6:71:a2:49:02:4e:81:8f:1f:c2:51:3e:
6b:ec:a0:84:b0:4c:e9:fb:b3:a7:2a:a4:4c:5b:81:33:4a:ca:
60:7f:0c:66:37:d7:98:a6:2b:76:f9:d2:0e:71:f8:0a:ac:7d:
93:ff:de:db:43:25:d3:63:b8:74:e8:29:fa:fd:9a:be:da:0b:
1c:a5:16:cd:79:b1:1c:f8:b0:18:21:d7:0e:a3:82:b3:3d:3d:
3d:d0:d8:46:e5:42:ba:a9:1a:c7:b0:a6:99:42:13:f6:f8:b4:
fb:32:67:c8:1a:af:20:13:2f:a1:5e:41:44:51:23:9d:5f:ba:
c7:a4:b3:1b:17:82:78:e2:00:d6:2f:7e:ac:65:58:a4:71:30:
eb:1f:ab:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:59:06 2026 by rpki-client