Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.mft
File: Z5IEIPci99fzxLJagOF9cpAXEYA.mft (raw, json)
Hash identifier: KOiZJ1RiMhF4qgt5I9jh0a+1LRyX8hO655p4pymqyHo=
Subject key identifier: 8F:AF:2E:B3:81:A1:5B:04:DD:F2:64:3B:79:00:7E:AC:9C:D2:23:3B
Authority key identifier: 67:92:04:20:F7:22:F7:D7:F3:C4:B2:5A:80:E1:7D:72:90:17:11:80
Certificate issuer: /CN=67920420f722f7d7f3c4b25a80e17d7290171180
Certificate serial: 019E1E6C06059B9ADF9693470507029C5B42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5IEIPci99fzxLJagOF9cpAXEYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.mft
Manifest number: 190C
Signing time: Tue 12 May 2026 23:00:56 +0000
Manifest this update: Tue 12 May 2026 23:00:56 +0000
Manifest next update: Wed 13 May 2026 23:00:56 +0000
Files and hashes: 1: WKDKLv-tt62b9C91OCyzPhQ_OcQ.roa (hash: R8pPn24trqZL7l8MMCrinetEIJyyN4dGs9r8jTjJKfw=)
2: Z5IEIPci99fzxLJagOF9cpAXEYA.crl (hash: mGYJTTlmszuxWlzc+s/mYQOD65KcAVB+Z3j8+K8gcfE=)
3: zmOplfT1YKhLKnx8WielhvBrOFw.roa (hash: eaJL0aLY76J5n+3Hq2EQSn+31eGw4xT4GWelS0Nf5Mk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z5IEIPci99fzxLJagOF9cpAXEYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:06:05:9b:9a:df:96:93:47:05:07:02:9c:5b:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67920420f722f7d7f3c4b25a80e17d7290171180
Validity
Not Before: May 12 23:00:56 2026 GMT
Not After : May 13 23:00:56 2026 GMT
Subject: CN=8faf2eb381a15b04ddf2643b79007eac9cd2233b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:19:38:40:28:97:75:41:6d:9c:77:70:a9:89:
6b:c0:ae:c8:23:52:47:97:cd:83:76:69:d3:a0:98:
31:ef:fb:48:82:e7:01:e0:96:7b:fb:74:99:c4:af:
05:4f:82:e6:a0:ba:68:4a:83:09:1e:d2:ec:91:74:
5f:79:a8:6d:3e:73:fe:88:05:c9:12:04:eb:87:44:
2c:a1:89:65:3d:34:cd:99:ff:30:da:b6:1a:cc:0f:
d9:76:07:8d:7f:79:d4:ab:76:fd:70:c5:44:4c:a7:
f2:6e:bf:02:fe:dd:26:dc:92:a7:2b:ae:a2:56:c1:
6d:da:3f:03:59:36:3b:60:8e:d6:24:4b:3d:d5:52:
63:b3:a9:22:27:46:d7:1e:0e:c5:4f:a2:d0:db:04:
af:c5:22:3e:13:ee:af:e2:d6:58:3a:c2:a8:ef:c2:
fa:7e:db:f8:7a:e3:15:f9:3f:f5:e9:df:72:1e:ad:
4c:6c:7a:af:3d:85:e7:a9:e6:23:e8:f7:c0:98:49:
24:3f:45:6e:21:18:60:5b:3a:51:bf:8e:93:49:d5:
c1:08:e7:48:84:06:21:8f:e3:ee:59:2e:f7:e4:79:
73:b4:a3:1a:ae:b4:9b:db:95:80:da:de:8d:36:b0:
c1:0c:72:6a:fd:5f:c9:f1:67:0d:b0:75:04:af:a5:
3d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:AF:2E:B3:81:A1:5B:04:DD:F2:64:3B:79:00:7E:AC:9C:D2:23:3B
X509v3 Authority Key Identifier:
keyid:67:92:04:20:F7:22:F7:D7:F3:C4:B2:5A:80:E1:7D:72:90:17:11:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5IEIPci99fzxLJagOF9cpAXEYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:96:d1:b2:3d:51:98:0c:fe:40:e5:0f:ba:34:9a:75:7e:48:
a6:ef:7e:19:99:34:bf:68:85:35:0a:6b:99:ec:96:18:a9:4a:
40:eb:82:d3:ff:ff:8b:64:06:da:83:3a:fa:b6:e2:2a:3b:87:
1c:98:e2:68:61:5b:9c:d8:c3:32:4f:0d:7f:ed:0c:f5:2d:32:
d9:01:08:cc:cf:05:ef:24:8f:79:bd:a7:55:b1:13:05:1e:72:
e3:07:c3:0f:7c:01:86:13:94:09:60:8a:4c:0d:c2:25:33:51:
0d:66:c3:e5:c1:2e:8d:7a:f2:32:c5:11:21:4d:7c:44:ce:3b:
01:ac:14:80:8d:08:5d:49:e1:f5:91:2f:5a:ba:e4:40:77:09:
de:e8:1e:f1:5b:f6:e1:8c:1d:27:76:9b:50:89:4f:0e:8a:e7:
04:58:16:b2:da:a1:b9:6f:52:ef:0c:05:de:56:e1:2b:b7:59:
5f:33:86:d3:9e:3f:f1:c1:c6:95:a5:8e:f5:5f:88:43:db:fd:
6a:58:d7:2f:83:3c:d5:dd:d2:c3:08:6d:18:ca:9a:c8:25:67:
1a:ce:43:4d:3e:67:8f:c8:0e:eb:49:6b:2d:77:2c:3b:59:82:
aa:6d:ab:ee:e9:9a:46:f5:8c:36:9c:03:f7:0b:3a:8b:ce:28:
63:38:31:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:33:24 2026 by rpki-client