
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5af6ba-cec9-414c-b766-c015a9d4f8ef/1/ZW5AemuZwPBSkyzHd_8N6bOhl04.mft
File: ZW5AemuZwPBSkyzHd_8N6bOhl04.mft (raw, json)
Hash identifier: tvUl8QiagEc9IDDLn8CpHKJEu52KIc7R5tNtwJOY8Mo=
Subject key identifier: A1:32:DA:33:3D:34:2D:2C:67:A3:96:D9:38:B0:F1:0A:E1:16:7A:1E
Authority key identifier: 65:6E:40:7A:6B:99:C0:F0:52:93:2C:C7:77:FF:0D:E9:B3:A1:97:4E
Certificate issuer: /CN=656e407a6b99c0f052932cc777ff0de9b3a1974e
Certificate serial: 019E1EDA2A6389C2B52E1668CD38B3D51CF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZW5AemuZwPBSkyzHd_8N6bOhl04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/5af6ba-cec9-414c-b766-c015a9d4f8ef/1/ZW5AemuZwPBSkyzHd_8N6bOhl04.mft
Manifest number: 190A
Signing time: Wed 13 May 2026 01:01:14 +0000
Manifest this update: Wed 13 May 2026 01:01:14 +0000
Manifest next update: Thu 14 May 2026 01:01:14 +0000
Files and hashes: 1: ZW5AemuZwPBSkyzHd_8N6bOhl04.crl (hash: m5Sdj+mDuwMqcbFIK6IbfgNnnc5cpRdGwKoBWAFvNaA=)
2: kEykguVs5gOkKU_5k7qyvCofolk.roa (hash: Gn4QfNQldi0PRVW/G1ca80Zkj+YUJm6Oi9CFZjoOuKE=)
3: uNLIyd7V4HU3pDKXDcfQdjnF5vo.roa (hash: p5fGMUK7hRzmC1gWrFuB/aW3upLQMZlcdSjSJk6KWc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/5af6ba-cec9-414c-b766-c015a9d4f8ef/1/ZW5AemuZwPBSkyzHd_8N6bOhl04.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/5af6ba-cec9-414c-b766-c015a9d4f8ef/1/ZW5AemuZwPBSkyzHd_8N6bOhl04.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZW5AemuZwPBSkyzHd_8N6bOhl04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:da:2a:63:89:c2:b5:2e:16:68:cd:38:b3:d5:1c:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=656e407a6b99c0f052932cc777ff0de9b3a1974e
Validity
Not Before: May 13 01:01:14 2026 GMT
Not After : May 14 01:01:14 2026 GMT
Subject: CN=a132da333d342d2c67a396d938b0f10ae1167a1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6d:9f:de:be:b8:17:31:0c:9d:e5:5b:ec:fa:
0b:86:18:ec:62:16:6a:bd:44:e5:54:4a:38:fc:57:
73:a2:1e:7d:94:97:a7:5a:44:0d:cb:a6:69:15:48:
c3:b0:a0:47:0a:ff:f5:cd:c8:69:69:32:fb:3a:41:
e1:52:3d:6d:04:0b:93:c7:49:e3:05:21:2d:7d:e4:
f8:32:fe:00:21:41:54:11:5e:52:64:a3:99:69:e1:
5a:e4:6e:03:44:1b:c4:9b:51:2c:63:8f:5e:fb:61:
d8:95:55:91:9a:0a:e7:44:8e:0b:2f:8f:94:3b:c0:
b6:74:75:29:eb:25:d4:7c:bb:55:23:2b:05:3a:92:
93:f3:58:b3:74:40:1a:13:e7:85:a4:78:f3:1c:6f:
25:4a:de:a7:2b:c5:b5:b7:52:c3:93:4a:07:7a:40:
81:05:e8:4a:1e:1e:b4:6b:44:f3:5b:4d:92:cf:5a:
ba:01:9b:7b:df:0c:b5:bc:7c:34:67:4e:0c:2b:1d:
53:e4:93:5a:47:90:78:e0:cf:85:90:6e:6e:ac:5a:
b0:88:99:cc:26:84:c1:69:11:ec:30:bb:36:28:86:
89:04:33:80:1a:07:59:f8:6c:72:05:eb:0e:6b:61:
87:86:e6:a3:0b:d0:3c:43:0d:15:e0:e3:b7:1e:ba:
3d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:32:DA:33:3D:34:2D:2C:67:A3:96:D9:38:B0:F1:0A:E1:16:7A:1E
X509v3 Authority Key Identifier:
keyid:65:6E:40:7A:6B:99:C0:F0:52:93:2C:C7:77:FF:0D:E9:B3:A1:97:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZW5AemuZwPBSkyzHd_8N6bOhl04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5af6ba-cec9-414c-b766-c015a9d4f8ef/1/ZW5AemuZwPBSkyzHd_8N6bOhl04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5af6ba-cec9-414c-b766-c015a9d4f8ef/1/ZW5AemuZwPBSkyzHd_8N6bOhl04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:7a:3b:fc:03:dd:61:d1:47:55:f7:68:bd:38:d9:4f:21:e6:
0c:06:7b:45:ec:43:25:7d:3b:a6:8e:ee:55:30:ad:b5:52:b1:
d2:0f:45:6c:a3:93:cc:5b:9b:32:3b:4f:28:5e:ba:5a:ba:7a:
5a:59:27:a2:57:a5:2d:c0:9f:33:21:ae:52:57:c1:4b:6c:4f:
8c:53:08:2e:e8:5c:0c:79:3a:a8:83:1b:d5:82:00:9f:f5:84:
c2:cc:dc:d7:60:eb:e5:fb:bf:2c:6f:6a:e0:d0:da:5d:b3:3c:
59:c9:ff:59:70:c6:66:45:93:4b:02:d7:45:f2:ec:54:bc:d4:
67:f3:a7:8b:3b:99:7e:c1:0d:fd:c4:e5:83:97:50:4f:1d:dc:
8e:bf:e9:b7:82:06:33:35:24:ae:c5:ba:ab:4a:e5:01:80:e2:
d2:ae:52:45:bd:95:52:c7:0f:14:28:24:42:72:6d:7c:0f:45:
23:4a:29:56:7a:e6:42:f1:38:b1:90:3c:f7:f2:30:9d:c6:0a:
59:cd:24:77:2e:17:cf:91:6f:45:3b:85:58:4c:01:04:66:06:
d5:cf:67:57:19:64:b6:06:3c:8b:12:7c:0b:1d:39:27:38:62:
1f:7e:0f:cb:16:7c:b5:da:44:b3:90:ef:86:89:d3:86:18:5d:
21:5f:63:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:35:44 2026 by rpki-client