Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/zGUyZJpq70cUhBucj1RmDYibBik.mft
File: zGUyZJpq70cUhBucj1RmDYibBik.mft (raw, json)
Hash identifier: MgnG0fHhnlToVengOQ0yxEq52tau/OgLZZZTyZetACw=
Subject key identifier: 21:5B:43:2A:A3:5F:B9:01:8D:2C:75:F5:19:24:15:9F:28:FD:CF:D4
Authority key identifier: CC:65:32:64:9A:6A:EF:47:14:84:1B:9C:8F:54:66:0D:88:9B:06:29
Certificate issuer: /CN=cc6532649a6aef4714841b9c8f54660d889b0629
Certificate serial: 019E2023D99EE7AC98812EAB86C214BF2374
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zGUyZJpq70cUhBucj1RmDYibBik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/zGUyZJpq70cUhBucj1RmDYibBik.mft
Manifest number: 0EB5
Signing time: Wed 13 May 2026 07:01:20 +0000
Manifest this update: Wed 13 May 2026 07:01:20 +0000
Manifest next update: Thu 14 May 2026 07:01:20 +0000
Files and hashes: 1: QOvuUL6JmFjMR4OHkrweykbMl00.roa (hash: APm5d1yLpYTNVNqcU55k9Dr295k8B4YAIygsX75/UWA=)
2: TF8KSi-DuhED0p9n9N5dVWabzRk.roa (hash: 39Z2dsiv//rq6lSkgmQdDk1aolP4R2gp4zSwQSQYE8w=)
3: zGUyZJpq70cUhBucj1RmDYibBik.crl (hash: W9oJ1f5MVSQA9nwZbJFegZS6WlxevVg5NZvCDTGve3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/zGUyZJpq70cUhBucj1RmDYibBik.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/zGUyZJpq70cUhBucj1RmDYibBik.mft
rsync://rpki.ripe.net/repository/DEFAULT/zGUyZJpq70cUhBucj1RmDYibBik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:23:d9:9e:e7:ac:98:81:2e:ab:86:c2:14:bf:23:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc6532649a6aef4714841b9c8f54660d889b0629
Validity
Not Before: May 13 07:01:20 2026 GMT
Not After : May 14 07:01:20 2026 GMT
Subject: CN=215b432aa35fb9018d2c75f51924159f28fdcfd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c8:73:1c:99:78:c8:18:cb:49:fa:2e:17:29:
0b:e8:6f:08:00:47:d4:4f:6e:f4:72:e3:db:1d:a9:
dc:50:d7:11:3e:88:67:de:dd:20:dd:e9:e9:74:23:
8c:f4:24:10:b4:63:99:7c:87:35:33:fb:7c:ab:4d:
2f:76:b4:01:09:13:dc:b3:61:4c:a2:a4:3b:a1:fb:
ff:89:20:5a:72:66:45:bf:9a:1b:3a:ed:ba:f9:48:
50:ed:da:b3:8d:6b:c8:2b:be:e0:48:10:42:ba:23:
1f:f1:fc:54:28:4f:d6:22:d5:89:93:a1:f2:ea:6e:
48:23:b0:d7:10:a3:8e:eb:65:3c:0e:f0:ed:51:09:
ac:00:b0:04:ee:52:7a:c7:e8:be:41:c2:3f:e3:90:
c8:1d:c7:ad:2b:21:2d:60:9e:d6:87:7a:f8:06:3f:
90:39:ca:4e:d2:4a:19:bb:01:a5:d4:e3:78:13:cb:
fa:e2:c4:37:39:06:df:aa:b1:34:14:51:12:52:7e:
2d:2f:44:d9:dd:2c:17:6c:3b:b9:39:10:e7:66:50:
a3:23:10:99:11:cc:13:8b:1e:cd:4a:86:eb:f9:ba:
a2:65:b7:43:0f:66:d0:34:a7:37:19:39:f2:81:02:
88:dd:ec:20:39:03:8a:b5:88:86:a6:fe:e5:8a:f8:
73:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:5B:43:2A:A3:5F:B9:01:8D:2C:75:F5:19:24:15:9F:28:FD:CF:D4
X509v3 Authority Key Identifier:
keyid:CC:65:32:64:9A:6A:EF:47:14:84:1B:9C:8F:54:66:0D:88:9B:06:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zGUyZJpq70cUhBucj1RmDYibBik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/zGUyZJpq70cUhBucj1RmDYibBik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/zGUyZJpq70cUhBucj1RmDYibBik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:dc:f3:69:7e:86:87:b7:cc:2f:03:c9:25:44:1d:67:df:76:
4c:37:10:8c:53:38:89:e7:68:7c:59:9d:38:62:a5:24:b0:1c:
94:0a:47:6e:3c:31:60:56:96:dd:5b:13:80:ba:4f:52:d1:d7:
d8:d0:2e:b9:86:8f:56:5b:c8:76:1c:34:29:64:dc:61:f6:88:
95:b1:4c:7c:dc:df:5c:c6:63:a9:1d:08:ae:c0:c0:62:fe:e2:
dd:8e:72:bf:7a:74:3b:4b:22:d2:e9:f5:e5:3a:36:a5:58:de:
9b:38:9d:1e:06:63:bc:3d:f2:f8:78:ad:bc:4a:64:39:e4:a1:
39:60:f9:f8:0d:08:66:eb:e1:6c:db:25:1a:2c:1c:c3:ac:ba:
48:53:98:a9:46:7a:c5:d0:1d:96:02:9f:3b:11:26:e4:a5:9b:
c1:1c:d7:8c:17:0e:5c:ba:56:95:5e:0c:ec:3b:82:a2:81:78:
cf:c9:39:28:50:b6:c3:1d:d0:fd:94:ae:61:e8:ad:40:08:6f:
74:6b:9c:ce:41:fb:87:73:13:69:6a:c7:be:35:0a:5a:34:c6:
76:c7:18:2e:59:29:44:be:00:42:54:d9:9e:ef:29:a4:8a:23:
49:b4:21:6e:a1:fb:3c:d5:ea:a2:ed:82:a3:c8:bf:11:f4:f5:
aa:b4:d1:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4gI9me56yYgS6rhsIUvyN0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjNjUzMjY0OWE2YWVmNDcxNDg0MWI5YzhmNTQ2NjBkODg5
YjA2MjkwHhcNMjYwNTEzMDcwMTIwWhcNMjYwNTE0MDcwMTIwWjAzMTEwLwYDVQQD
EygyMTViNDMyYWEzNWZiOTAxOGQyYzc1ZjUxOTI0MTU5ZjI4ZmRjZmQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAschzHJl4yBjLSfouFykL6G8IAEfU
T270cuPbHancUNcRPohn3t0g3enpdCOM9CQQtGOZfIc1M/t8q00vdrQBCRPcs2FM
oqQ7ofv/iSBacmZFv5obOu26+UhQ7dqzjWvIK77gSBBCuiMf8fxUKE/WItWJk6Hy
6m5II7DXEKOO62U8DvDtUQmsALAE7lJ6x+i+QcI/45DIHcetKyEtYJ7Wh3r4Bj+Q
OcpO0koZuwGl1ON4E8v64sQ3OQbfqrE0FFESUn4tL0TZ3SwXbDu5ORDnZlCjIxCZ
EcwTix7NSobr+bqiZbdDD2bQNKc3GTnygQKI3ewgOQOKtYiGpv7livhzvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCFbQyqjX7kBjSx19RkkFZ8o/c/UMB8GA1UdIwQY
MBaAFMxlMmSaau9HFIQbnI9UZg2ImwYpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekdVeVpKcHE3MGNVaEJ1Y2oxUm1EWWliQmlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8zMTBkMzQtZjVkOC00ZTk2LTliN2Mt
NjQ4ZjUwMWFmYWU1LzEvekdVeVpKcHE3MGNVaEJ1Y2oxUm1EWWliQmlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC8zMTBkMzQtZjVkOC00ZTk2LTliN2MtNjQ4ZjUwMWFmYWU1
LzEvekdVeVpKcHE3MGNVaEJ1Y2oxUm1EWWliQmlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW9zzaX6G
h7fMLwPJJUQdZ992TDcQjFM4iedofFmdOGKlJLAclApHbjwxYFaW3VsTgLpPUtHX
2NAuuYaPVlvIdhw0KWTcYfaIlbFMfNzfXMZjqR0IrsDAYv7i3Y5yv3p0O0si0un1
5To2pVjemzidHgZjvD3y+HitvEpkOeShOWD5+A0IZuvhbNslGiwcw6y6SFOYqUZ6
xdAdlgKfOxEm5KWbwRzXjBcOXLpWlV4M7DuCooF4z8k5KFC2wx3Q/ZSuYeitQAhv
dGuczkH7h3MTaWrHvjUKWjTGdscYLlkpRL4AQlTZnu8ppIojSbQhbqH7PNXqou2C
o8i/EfT1qrTR2w==
-----END CERTIFICATE-----
Generated at Wed May 13 14:51:52 2026 by rpki-client