Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d4dded-c510-477c-8fad-f616f0094b14/1/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.mft
File: zrWSk2Hh0N4WC4cfKb3VpAQMoRE.mft (raw, json)
Hash identifier: 2vLKUjmM+jSoMbgDsAnwgCB/Gb8Hj86oCtsJupRUmEA=
Subject key identifier: 49:F2:D3:6A:FF:81:55:EC:81:F2:21:0F:0D:08:6B:D8:EC:43:5B:68
Authority key identifier: CE:B5:92:93:61:E1:D0:DE:16:0B:87:1F:29:BD:D5:A4:04:0C:A1:11
Certificate issuer: /CN=ceb5929361e1d0de160b871f29bdd5a4040ca111
Certificate serial: 019E2091417A9FBF57AAD0DE9ADCB42EE2DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d4dded-c510-477c-8fad-f616f0094b14/1/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.mft
Manifest number: 189A
Signing time: Wed 13 May 2026 09:00:50 +0000
Manifest this update: Wed 13 May 2026 09:00:50 +0000
Manifest next update: Thu 14 May 2026 09:00:50 +0000
Files and hashes: 1: dZjxO1t1y7iTrJ-KRqPRE_p1jMA.roa (hash: B1GSi5keg2Ocppx2D4kG/XL7mz409lb5KLKl79R0HCE=)
2: zrWSk2Hh0N4WC4cfKb3VpAQMoRE.crl (hash: BzjxOZGT3Dcaqy22hW7y8L+9ZRo2TaEB6Vgi5sdvzZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/d4dded-c510-477c-8fad-f616f0094b14/1/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/d4dded-c510-477c-8fad-f616f0094b14/1/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 09:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:91:41:7a:9f:bf:57:aa:d0:de:9a:dc:b4:2e:e2:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ceb5929361e1d0de160b871f29bdd5a4040ca111
Validity
Not Before: May 13 09:00:50 2026 GMT
Not After : May 14 09:00:50 2026 GMT
Subject: CN=49f2d36aff8155ec81f2210f0d086bd8ec435b68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f4:6b:11:4b:c5:b9:4e:24:8b:44:6f:f9:47:
a7:81:17:69:b9:99:5d:6e:cb:b0:2e:9b:2f:d5:a5:
82:ae:53:3f:92:58:8e:d6:10:cb:73:3c:26:c6:a9:
10:43:c2:b5:85:3f:2b:93:99:04:cb:f5:29:f3:83:
dd:6f:6e:35:b4:da:a1:de:d2:26:79:0e:15:ad:ac:
bf:e3:42:16:3a:7c:03:e2:0e:34:9c:18:d1:d4:b2:
7e:1f:25:75:e5:fc:00:53:d7:11:c7:67:71:66:61:
26:4f:ca:c8:05:39:f6:ad:0f:48:b8:af:f8:de:cb:
8f:fe:d5:ad:de:a8:d4:ba:7e:34:2c:76:93:2a:a9:
09:69:a0:c3:26:56:f5:5f:ae:b8:b8:e6:0a:90:8f:
51:82:62:c5:aa:6b:bc:be:dd:7a:f1:bf:e1:8c:7f:
4f:41:ab:f1:7b:69:15:d8:de:ac:22:50:82:de:68:
4f:bb:16:67:c6:f7:6b:fa:68:52:99:32:53:a7:ec:
3d:c9:75:ab:b4:e9:c1:93:17:11:92:ab:cf:48:cf:
79:44:75:4d:83:a5:6f:e6:b7:55:73:69:60:60:de:
de:7d:7d:0e:15:f4:0c:98:ab:97:c2:01:16:a7:96:
76:52:11:69:79:b6:b5:2c:dd:ee:f9:e7:5d:50:8c:
3e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:F2:D3:6A:FF:81:55:EC:81:F2:21:0F:0D:08:6B:D8:EC:43:5B:68
X509v3 Authority Key Identifier:
keyid:CE:B5:92:93:61:E1:D0:DE:16:0B:87:1F:29:BD:D5:A4:04:0C:A1:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d4dded-c510-477c-8fad-f616f0094b14/1/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d4dded-c510-477c-8fad-f616f0094b14/1/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:d3:89:20:f0:fc:fa:c6:5b:5f:9f:bc:30:cf:72:47:81:30:
e5:eb:a8:a0:c2:d5:0b:59:17:79:b4:5a:7a:90:99:11:90:71:
6a:d7:27:98:12:4c:c7:d9:4a:c2:90:0c:ac:e7:88:c0:78:a6:
ea:4e:84:f9:62:26:b5:dd:24:49:e1:91:a7:21:fd:23:9b:f9:
40:aa:e9:93:f7:4e:b5:81:79:be:b4:fc:4f:5d:37:be:00:92:
cc:a1:75:19:ca:91:1c:37:f3:7f:da:03:bb:14:de:a9:ae:db:
de:47:27:06:25:f8:83:3b:0c:ef:d5:59:ba:83:93:91:50:72:
a6:d4:90:7a:a1:26:13:bd:0a:14:c6:ef:2d:12:6a:73:fd:21:
70:73:73:64:60:b2:c3:81:c8:0d:d3:e4:c4:c3:47:d4:95:3c:
28:9d:f1:84:d9:a9:29:9e:f7:15:61:d5:0a:b9:7c:bf:ec:2d:
fe:a8:f9:b4:e8:67:7e:c5:23:ed:41:77:84:0c:60:55:c3:02:
8d:bb:ca:f7:ff:d6:95:cd:96:4d:31:a3:b2:fe:ea:86:d4:78:
c8:dc:03:65:b9:b1:ee:f0:59:9e:77:92:4f:7e:b2:b4:0c:4b:
58:d7:4c:be:61:5c:0e:e3:3f:e6:5f:dd:7b:59:2f:12:6f:3c:
ac:98:0f:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:49:54 2026 by rpki-client