Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/999647-1e7f-499b-9d48-f950327f88d3/1/zvUB0tBSGF1PZWkhjCi_NYWQAPw.mft
File: zvUB0tBSGF1PZWkhjCi_NYWQAPw.mft (raw, json)
Hash identifier: eO3UPQ9WVlOWXGVtN0RvizBjqSH4wU2Z4hoqw80FFEA=
Subject key identifier: DB:71:91:3A:4E:CB:A0:40:EA:56:90:05:8F:8C:25:44:8A:EC:1D:77
Authority key identifier: CE:F5:01:D2:D0:52:18:5D:4F:65:69:21:8C:28:BF:35:85:90:00:FC
Certificate issuer: /CN=cef501d2d052185d4f6569218c28bf35859000fc
Certificate serial: 019E209131D0BE9E97525B4DD7D49C124644
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvUB0tBSGF1PZWkhjCi_NYWQAPw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/999647-1e7f-499b-9d48-f950327f88d3/1/zvUB0tBSGF1PZWkhjCi_NYWQAPw.mft
Manifest number: 01B9
Signing time: Wed 13 May 2026 09:00:46 +0000
Manifest this update: Wed 13 May 2026 09:00:46 +0000
Manifest next update: Thu 14 May 2026 09:00:46 +0000
Files and hashes: 1: VtiYaN97FHtpr9nyOV9FFG85g5o.roa (hash: YRi8yVEk1+9sLs2A+db3vBfa8pzorD5js8IjbX492Nk=)
2: gIvmrtP4qhP-p_HNvQknynsugUc.roa (hash: T7F6BSJaNt+yN8P1agGWT43ZlvcgWoTw7wuq3mofmEI=)
3: zvUB0tBSGF1PZWkhjCi_NYWQAPw.crl (hash: oMZ9u0xoI3/R4JDrCRa8xY/lCTSa5rooQwnu+cUWcYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/999647-1e7f-499b-9d48-f950327f88d3/1/zvUB0tBSGF1PZWkhjCi_NYWQAPw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/999647-1e7f-499b-9d48-f950327f88d3/1/zvUB0tBSGF1PZWkhjCi_NYWQAPw.mft
rsync://rpki.ripe.net/repository/DEFAULT/zvUB0tBSGF1PZWkhjCi_NYWQAPw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:91:31:d0:be:9e:97:52:5b:4d:d7:d4:9c:12:46:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cef501d2d052185d4f6569218c28bf35859000fc
Validity
Not Before: May 13 09:00:46 2026 GMT
Not After : May 14 09:00:46 2026 GMT
Subject: CN=db71913a4ecba040ea5690058f8c25448aec1d77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:6a:7e:00:5d:e3:59:89:94:a9:f9:79:44:1c:
64:71:10:bf:6e:42:ae:cb:ac:10:ea:55:a5:3f:31:
89:96:c4:97:1c:e0:f5:15:df:57:5d:54:79:22:7e:
99:6d:43:a8:60:89:eb:38:d7:28:60:46:c4:97:aa:
33:73:c5:ba:be:3b:e7:58:bb:4f:d5:d4:60:95:46:
ba:4f:93:6e:2d:95:f4:6d:09:dc:47:f5:4f:cb:1b:
b8:7a:90:54:38:7c:49:45:2f:83:c4:39:41:5a:18:
9c:f6:4d:e0:15:59:01:13:78:80:2c:48:bc:26:3f:
18:21:df:aa:e5:28:ff:41:91:eb:3e:1d:d0:e9:0a:
00:2a:58:42:07:45:67:ef:38:d3:32:ed:cc:c5:d8:
2f:28:d3:cb:7d:58:a5:7c:5e:f5:0f:85:68:33:02:
4c:26:ba:fd:df:40:d2:28:c2:21:50:bb:3f:d4:f2:
06:14:08:e4:a5:cd:37:85:da:b1:4b:83:c7:5f:f4:
7f:56:b6:46:87:80:85:97:41:f8:33:1d:75:f8:f9:
d7:ac:9a:1b:7c:26:e0:40:35:80:0c:16:3b:6f:71:
84:12:5f:c8:d6:66:35:9e:13:4b:4e:a9:26:d3:ab:
78:e9:dd:b0:c9:c4:2c:bf:ff:a6:65:f1:25:a7:3a:
cf:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:71:91:3A:4E:CB:A0:40:EA:56:90:05:8F:8C:25:44:8A:EC:1D:77
X509v3 Authority Key Identifier:
keyid:CE:F5:01:D2:D0:52:18:5D:4F:65:69:21:8C:28:BF:35:85:90:00:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvUB0tBSGF1PZWkhjCi_NYWQAPw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/999647-1e7f-499b-9d48-f950327f88d3/1/zvUB0tBSGF1PZWkhjCi_NYWQAPw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/999647-1e7f-499b-9d48-f950327f88d3/1/zvUB0tBSGF1PZWkhjCi_NYWQAPw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:ad:e5:dd:ea:70:90:1a:5c:45:c9:5a:46:46:69:31:2b:f9:
47:6a:cb:00:e2:77:67:34:a1:2e:7b:fa:8b:c7:2b:eb:38:5d:
76:77:51:bc:8c:b6:9a:fe:0a:2e:09:a3:d4:ac:03:3d:c9:38:
09:ef:1c:a3:10:e2:cb:3c:c3:c7:aa:f7:8b:90:83:13:c1:4c:
36:74:24:e6:ea:00:18:11:69:4c:68:4a:00:3a:57:24:f5:22:
87:c0:41:59:97:c7:62:43:da:fc:f5:09:7a:b8:bf:98:99:5c:
cf:c2:39:ac:84:66:4b:28:27:4a:27:e7:cd:3b:12:95:39:c1:
b2:1e:c7:46:03:50:77:85:64:a0:3b:76:97:93:7a:41:54:0f:
98:39:9d:df:73:90:63:1a:4e:6d:68:4c:86:51:97:1f:dd:5b:
36:1b:c9:6b:02:af:56:1f:d0:72:6a:c9:dd:a2:6e:4d:a9:f5:
66:f9:59:aa:ff:15:ca:35:46:42:c6:be:e8:2a:e4:a5:ee:0e:
a9:d4:ea:28:46:2b:07:c9:67:eb:ae:d7:e7:20:a0:c0:99:62:
4d:75:a6:2e:e9:20:33:6e:bf:e8:c7:a7:02:e8:e4:67:54:60:
6e:93:f2:9d:ed:a4:9f:c2:76:b2:b2:45:5b:21:ec:ef:0e:d1:
82:59:f5:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:05:28 2026 by rpki-client