Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/07476c-2c5b-40e9-b562-54fa30864c21/1/zlaqDiFVjJKkhlQkTgWWGh_PoPI.mft
File: zlaqDiFVjJKkhlQkTgWWGh_PoPI.mft (raw, json)
Hash identifier: Rat+UGtyaz25u/NgU5q035rBHeMUV00sTL8DXATCzGc=
Subject key identifier: 51:CA:8A:63:40:36:22:F0:6E:3D:AD:D8:F1:CC:43:72:48:AA:E7:1A
Authority key identifier: CE:56:AA:0E:21:55:8C:92:A4:86:54:24:4E:05:96:1A:1F:CF:A0:F2
Certificate issuer: /CN=ce56aa0e21558c92a48654244e05961a1fcfa0f2
Certificate serial: 019E1DFE3ED9232B751EE08F4FF85710AE61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zlaqDiFVjJKkhlQkTgWWGh_PoPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/07476c-2c5b-40e9-b562-54fa30864c21/1/zlaqDiFVjJKkhlQkTgWWGh_PoPI.mft
Manifest number: 1908
Signing time: Tue 12 May 2026 21:01:01 +0000
Manifest this update: Tue 12 May 2026 21:01:01 +0000
Manifest next update: Wed 13 May 2026 21:01:01 +0000
Files and hashes: 1: P2B766sld6YbwOxda85NHhDsjNc.roa (hash: Rh+n3/ugGLGil4AXCXWWDwwftkzN5fZJ5lMUe38d6gg=)
2: zlaqDiFVjJKkhlQkTgWWGh_PoPI.crl (hash: RFvd6iVsW8+Uq2TZGAnL6Ytep8wpgjgEKAazEzHqq3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/07476c-2c5b-40e9-b562-54fa30864c21/1/zlaqDiFVjJKkhlQkTgWWGh_PoPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/07476c-2c5b-40e9-b562-54fa30864c21/1/zlaqDiFVjJKkhlQkTgWWGh_PoPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zlaqDiFVjJKkhlQkTgWWGh_PoPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:3e:d9:23:2b:75:1e:e0:8f:4f:f8:57:10:ae:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce56aa0e21558c92a48654244e05961a1fcfa0f2
Validity
Not Before: May 12 21:01:01 2026 GMT
Not After : May 13 21:01:01 2026 GMT
Subject: CN=51ca8a63403622f06e3dadd8f1cc437248aae71a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:38:cc:55:8a:e8:c7:29:90:00:4d:e8:55:b5:
81:de:88:0e:c9:e0:09:11:92:31:29:3c:c4:8a:15:
7e:ce:f7:0e:91:41:fe:7e:76:c7:c7:a1:e3:51:c3:
2e:f0:45:d9:55:44:99:86:60:15:6d:80:d7:ca:1c:
f7:f8:41:01:77:1a:1b:4c:0c:6b:d4:a0:82:a2:68:
3a:f1:07:a2:33:94:af:46:23:54:ea:a8:be:4a:b1:
67:36:fa:6c:45:7e:f4:bd:88:2a:48:37:85:36:c8:
9d:c6:f9:cc:cf:eb:f2:49:d2:a6:51:b4:6a:26:4e:
78:88:d2:2a:8e:cf:10:1b:32:ed:39:8a:72:31:91:
50:89:1d:d7:17:94:7e:71:86:a6:4b:48:c1:e8:f0:
86:21:ef:12:b9:c1:41:c1:75:a0:65:34:11:78:fc:
cd:eb:63:66:fd:1f:5e:15:53:b5:73:5b:cb:2b:99:
13:74:a5:33:87:be:c8:48:2a:bc:c2:a9:c3:5d:59:
16:e4:9d:28:46:85:79:dc:7e:a8:2b:ee:83:11:4a:
88:5c:62:84:f7:df:1f:59:b8:30:18:5d:97:da:b1:
50:9d:a2:9f:a7:6b:15:f6:ff:6e:58:3f:ef:41:c0:
eb:9c:fd:2c:fc:3c:c9:9b:fe:15:67:2c:95:94:52:
f4:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:CA:8A:63:40:36:22:F0:6E:3D:AD:D8:F1:CC:43:72:48:AA:E7:1A
X509v3 Authority Key Identifier:
keyid:CE:56:AA:0E:21:55:8C:92:A4:86:54:24:4E:05:96:1A:1F:CF:A0:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zlaqDiFVjJKkhlQkTgWWGh_PoPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/07476c-2c5b-40e9-b562-54fa30864c21/1/zlaqDiFVjJKkhlQkTgWWGh_PoPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/07476c-2c5b-40e9-b562-54fa30864c21/1/zlaqDiFVjJKkhlQkTgWWGh_PoPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:9b:55:ab:4d:01:96:9b:c7:47:dc:29:c7:fd:31:06:55:ff:
27:70:eb:30:66:ed:fe:9b:cc:cf:76:33:c5:cc:7f:e8:52:fd:
d5:e1:30:53:d5:f0:35:8c:ac:65:29:f8:54:7c:c8:df:48:b1:
3c:d3:46:84:d7:13:8e:9e:3b:29:37:dc:77:88:d5:55:9a:dc:
69:c8:08:e5:7c:ed:d4:e6:a4:a2:88:58:0d:83:a6:aa:c5:65:
a2:fc:ee:eb:ad:9e:22:e9:cd:51:c0:dd:a1:fe:70:78:00:d3:
e4:c3:6d:14:23:46:8c:47:8f:7a:c0:b8:6b:c1:85:e0:8b:4d:
f2:4a:e4:d2:8a:44:10:1e:97:24:ad:b3:e3:1f:ea:dd:c5:ac:
4c:8e:94:a3:84:f4:ae:48:61:ed:6c:09:c2:e3:f2:05:34:73:
7a:72:f8:89:ad:32:c7:d9:7b:64:55:47:e4:92:49:8f:89:f6:
22:e0:04:a2:47:6c:ac:2b:71:16:f8:fa:8a:04:ad:39:7f:45:
1c:d0:1d:7f:b3:3b:3a:18:24:c8:e9:8a:95:cd:2c:68:81:9c:
ad:f1:01:91:8c:28:d3:0d:68:38:8d:ff:bb:b0:15:17:2f:33:
6e:7c:ba:08:21:84:de:14:49:20:11:2e:02:e1:02:d9:a6:69:
03:12:17:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:26:15 2026 by rpki-client