Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.mft
File: zVdth24X5nqjsfHBDas52yk14is.mft (raw, json)
Hash identifier: AscSouGXZzt/FMZGI2N9titdvL2IJgt55Izb90Ee8os=
Subject key identifier: 3F:CD:90:A4:07:F6:44:1B:E1:60:00:51:22:65:1A:F7:AC:25:C3:29
Authority key identifier: CD:57:6D:87:6E:17:E6:7A:A3:B1:F1:C1:0D:AB:39:DB:29:35:E2:2B
Certificate issuer: /CN=cd576d876e17e67aa3b1f1c10dab39db2935e22b
Certificate serial: 019E1C7D72494233ABE11B100B1A0DFA260B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zVdth24X5nqjsfHBDas52yk14is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.mft
Manifest number: 130C
Signing time: Tue 12 May 2026 14:00:43 +0000
Manifest this update: Tue 12 May 2026 14:00:43 +0000
Manifest next update: Wed 13 May 2026 14:00:43 +0000
Files and hashes: 1: 9_TVXot_dyIkEe9KiLsuyW2oktk.roa (hash: AY0ZbEX8AuKpfJf3mMe1LHPcHhetoh8C291fNwOvGkw=)
2: M2b0AyIxBEZE26l78yx_U6jH-HM.roa (hash: qI3z2lgsBJDNei5CDronPrCJiOhj9yjVA1Waw1BZhZw=)
3: l42LyB_1C2P-LllZFiZxTraA8VY.roa (hash: DBvrQLij/XijOP3rNHrPmHSYFZ7FdPcqe5/jQy1zmiA=)
4: pmSF4ZNgMAiXnZmJxCpdm1pB6-g.roa (hash: xUeQdptZzqoAGQubj2MviaZ8/z+Eg6EPbQmMGzslfVM=)
5: s13GH00hV2jIxjzw03ezHAtEnrE.roa (hash: wwzOhbN/GMGtfE1ca6NvpkVgz3P26P0FotyIBvRPTpA=)
6: wsv3RhVPC0LRVw4Iv-_qJ-xb_MA.roa (hash: htIN8qHXgg74PxltVLjdHQI1GM5oys81YrYBTFBjHyw=)
7: ye6mvuXzy7csS4P5Wv96CCJApj0.roa (hash: NSM/S0z1U/vSEnlZqLyEDEH4nftKUXxOnQpUwun2eU8=)
8: zVdth24X5nqjsfHBDas52yk14is.crl (hash: vfLSUcC99+q1wzCtEhppDXsr3VjCh4L1EcwZqc41+EA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.mft
rsync://rpki.ripe.net/repository/DEFAULT/zVdth24X5nqjsfHBDas52yk14is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:7d:72:49:42:33:ab:e1:1b:10:0b:1a:0d:fa:26:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd576d876e17e67aa3b1f1c10dab39db2935e22b
Validity
Not Before: May 12 14:00:43 2026 GMT
Not After : May 13 14:00:43 2026 GMT
Subject: CN=3fcd90a407f6441be160005122651af7ac25c329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f4:86:fe:a2:4c:da:41:db:20:52:f4:0a:59:
73:8b:21:df:6e:d2:09:97:f1:dc:7b:4a:20:5d:57:
c5:f8:b6:04:ff:31:39:1a:51:b5:7a:e2:d2:c0:4d:
68:15:29:a6:34:72:89:c3:cd:16:95:78:87:2c:ae:
7c:e8:cd:5f:62:ac:6f:7e:6f:06:e3:00:a4:a4:38:
c9:93:83:ee:44:19:35:9a:5b:c6:fa:54:66:5d:3a:
8e:5f:a1:21:d4:0d:79:0b:73:66:de:87:db:0a:91:
40:43:53:0e:ba:87:85:31:fe:9f:f1:a4:3a:ed:22:
9b:b7:65:1a:14:6e:ca:2a:c1:26:7e:10:a3:43:66:
f6:44:95:b4:8a:02:70:c2:2f:a9:57:13:35:a0:ae:
b7:3b:2a:f1:25:e8:56:ec:07:33:9c:9b:2c:d7:7a:
41:27:27:70:b5:4e:3c:c9:0b:e6:d7:a4:55:41:57:
06:62:f2:d4:93:03:d1:a0:95:a6:a6:f3:a1:cf:b6:
5d:54:29:6b:af:06:98:e2:61:43:c9:3c:be:85:07:
12:e3:0d:ca:00:47:b9:c8:23:6f:35:83:05:23:89:
71:bd:ce:62:bd:e9:19:49:5c:ed:2e:30:0e:d5:f9:
d6:66:c1:8d:0c:99:d9:eb:3a:3f:80:89:cf:f6:d6:
fc:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:CD:90:A4:07:F6:44:1B:E1:60:00:51:22:65:1A:F7:AC:25:C3:29
X509v3 Authority Key Identifier:
keyid:CD:57:6D:87:6E:17:E6:7A:A3:B1:F1:C1:0D:AB:39:DB:29:35:E2:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zVdth24X5nqjsfHBDas52yk14is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:d5:bc:9d:fc:14:b5:d4:ff:37:1d:fe:75:3e:c8:55:b7:87:
01:00:dc:16:a4:60:63:ea:d2:cb:0e:d4:e5:81:7d:6b:a2:69:
a1:88:31:21:d3:59:d0:46:c2:16:56:19:02:db:d1:d8:1b:52:
42:f6:53:5a:37:53:e3:81:38:cc:07:87:94:d2:13:f1:fd:45:
5f:7a:5d:23:b3:32:af:72:35:43:9c:2c:97:23:90:08:06:ce:
38:5b:ac:17:cc:ee:89:b7:db:0e:a3:22:05:b5:aa:93:2f:58:
f6:ca:29:21:ae:b6:d5:88:e5:90:f5:fc:4f:de:52:38:62:c2:
99:11:fe:0f:e6:5b:c7:b1:aa:a3:5f:b3:40:23:17:68:49:48:
77:6f:4a:39:57:92:4d:56:55:68:cd:37:e3:00:8c:5f:21:f5:
e8:fd:96:43:42:95:d0:02:9d:94:da:2f:3f:9c:03:53:52:a9:
0f:70:33:ef:44:66:a7:8b:8a:3c:cb:ed:65:77:b6:62:c3:3d:
86:12:65:b5:92:fe:c6:6e:dc:eb:99:1c:79:e1:47:b0:29:40:
32:32:f6:f2:38:e5:02:04:75:ba:4d:60:e7:f1:a8:67:de:d0:
74:66:73:01:20:c4:8b:92:7b:5f:60:f9:09:86:a0:f8:c5:b7:
45:f5:cf:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:30:57 2026 by rpki-client