Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/c1d9b7-393d-4625-afe7-f3c887281eba/1/tZvm7lSfM1xyhJennxRBA06FLDU.mft
File: tZvm7lSfM1xyhJennxRBA06FLDU.mft (raw, json)
Hash identifier: /MlVQh+udXeFC6K+8WSByspDX2cdSZ1UhvcW0dmgj58=
Subject key identifier: 94:3D:23:03:03:0A:8B:0F:20:46:08:94:CC:1D:DB:81:51:76:A7:E4
Authority key identifier: B5:9B:E6:EE:54:9F:33:5C:72:84:97:A7:9F:14:41:03:4E:85:2C:35
Certificate issuer: /CN=b59be6ee549f335c728497a79f1441034e852c35
Certificate serial: 019E1F1158D5348E4A335AAC33CFBFD94176
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tZvm7lSfM1xyhJennxRBA06FLDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/c1d9b7-393d-4625-afe7-f3c887281eba/1/tZvm7lSfM1xyhJennxRBA06FLDU.mft
Manifest number: 17D2
Signing time: Wed 13 May 2026 02:01:31 +0000
Manifest this update: Wed 13 May 2026 02:01:31 +0000
Manifest next update: Thu 14 May 2026 02:01:31 +0000
Files and hashes: 1: LgEQFbr6DfaKxHT0opE-rJchHzU.roa (hash: p1Ib6SCkOlVl2vZjNlb0ktrjTCjuEUefHqGrnq38IDo=)
2: tZvm7lSfM1xyhJennxRBA06FLDU.crl (hash: H5qc+U/9xgCVcGxGTRqRkw/N+aHPtxMnyxsVjvYCmjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/c1d9b7-393d-4625-afe7-f3c887281eba/1/tZvm7lSfM1xyhJennxRBA06FLDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/c1d9b7-393d-4625-afe7-f3c887281eba/1/tZvm7lSfM1xyhJennxRBA06FLDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tZvm7lSfM1xyhJennxRBA06FLDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 02:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:11:58:d5:34:8e:4a:33:5a:ac:33:cf:bf:d9:41:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b59be6ee549f335c728497a79f1441034e852c35
Validity
Not Before: May 13 02:01:31 2026 GMT
Not After : May 14 02:01:31 2026 GMT
Subject: CN=943d2303030a8b0f20460894cc1ddb815176a7e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:50:16:3e:f1:24:0e:3d:c2:74:73:e0:a6:8e:
7a:bf:74:02:6c:23:a6:52:7f:b2:7d:59:b2:58:dd:
b9:8f:fc:19:10:86:cf:e4:f2:ee:22:0d:62:ea:d8:
7e:ab:8c:0c:f6:44:c6:05:c4:2d:47:04:ae:96:a7:
2c:55:51:62:7a:38:3a:46:10:e4:63:30:42:ea:e5:
ea:e9:f3:89:56:6b:6a:a2:37:1f:3c:09:5a:ad:57:
68:d0:85:30:51:5e:36:b5:d1:eb:bd:a3:8a:8c:a3:
b5:3b:03:76:1b:7b:0f:03:7c:e7:19:fa:e2:73:cd:
8e:a5:e7:d5:fc:f7:fe:84:48:81:c3:95:63:ae:48:
6d:fc:48:4a:43:9d:93:6b:9b:99:3a:4f:94:82:d9:
b0:4a:27:7b:56:20:c5:26:1b:94:59:0c:76:4b:d3:
f0:42:1a:41:25:2a:48:0d:22:bc:ce:59:b6:86:ec:
18:bd:5b:1f:97:15:eb:7f:c1:60:a0:2f:18:a6:37:
1c:c0:9b:20:4e:0b:b1:99:1b:ce:98:b8:33:e5:89:
bb:c2:de:c1:2c:2f:63:9b:6a:03:bc:31:ba:41:da:
e0:12:da:7d:1d:3d:d0:be:54:76:de:41:12:94:61:
a1:01:89:36:b6:78:5f:67:9b:ab:d1:01:9a:82:6d:
98:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:3D:23:03:03:0A:8B:0F:20:46:08:94:CC:1D:DB:81:51:76:A7:E4
X509v3 Authority Key Identifier:
keyid:B5:9B:E6:EE:54:9F:33:5C:72:84:97:A7:9F:14:41:03:4E:85:2C:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tZvm7lSfM1xyhJennxRBA06FLDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c1d9b7-393d-4625-afe7-f3c887281eba/1/tZvm7lSfM1xyhJennxRBA06FLDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c1d9b7-393d-4625-afe7-f3c887281eba/1/tZvm7lSfM1xyhJennxRBA06FLDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:7b:4c:8a:2a:f7:10:d2:e7:7e:c3:4d:f6:35:bc:80:d8:4f:
a4:af:0b:e3:e7:bd:5e:3d:24:e8:51:1d:d8:c0:e7:7a:1f:2b:
e5:10:67:f7:f4:c6:a9:58:ac:5d:c9:50:c9:9a:4e:fa:83:a0:
cd:1a:d5:0e:96:7e:f9:c1:25:7f:13:c4:07:4f:db:5f:26:4c:
1d:61:af:ba:fc:5b:b2:ce:04:5c:0e:74:84:88:ad:ad:57:47:
21:6a:58:2f:2c:65:1c:62:5e:56:ae:82:92:44:bf:13:e2:5e:
de:4f:a0:d6:e4:c9:e8:7a:b0:f6:e0:61:db:ea:1c:9b:52:a1:
e5:75:0b:1d:16:f7:f2:04:48:d0:ef:da:ae:bd:64:a7:2d:6a:
7d:cd:53:b5:9c:ad:96:38:dc:ca:31:f8:ca:7a:78:2a:80:47:
45:12:98:b1:ef:81:a3:15:96:bb:72:5b:91:63:dc:2c:05:90:
00:d3:e6:cb:2b:65:4f:c7:72:b0:0f:53:c6:35:e1:f6:9e:66:
60:10:14:1e:c2:c8:90:65:ad:a8:ad:ae:62:50:df:22:c5:3b:
82:c3:60:4b:56:3d:fa:53:ce:80:e8:67:b7:72:cd:f8:c8:e2:
b2:0d:ad:85:ed:f5:f7:6b:3f:81:54:ed:77:06:45:d6:83:a7:
a6:46:63:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4fEVjVNI5KM1qsM8+/2UF2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1OWJlNmVlNTQ5ZjMzNWM3Mjg0OTdhNzlmMTQ0MTAzNGU4
NTJjMzUwHhcNMjYwNTEzMDIwMTMxWhcNMjYwNTE0MDIwMTMxWjAzMTEwLwYDVQQD
Eyg5NDNkMjMwMzAzMGE4YjBmMjA0NjA4OTRjYzFkZGI4MTUxNzZhN2U0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAylAWPvEkDj3CdHPgpo56v3QCbCOm
Un+yfVmyWN25j/wZEIbP5PLuIg1i6th+q4wM9kTGBcQtRwSulqcsVVFiejg6RhDk
YzBC6uXq6fOJVmtqojcfPAlarVdo0IUwUV42tdHrvaOKjKO1OwN2G3sPA3znGfri
c82OpefV/Pf+hEiBw5Vjrkht/EhKQ52Ta5uZOk+UgtmwSid7ViDFJhuUWQx2S9Pw
QhpBJSpIDSK8zlm2huwYvVsflxXrf8FgoC8YpjccwJsgTguxmRvOmLgz5Ym7wt7B
LC9jm2oDvDG6QdrgEtp9HT3QvlR23kESlGGhAYk2tnhfZ5ur0QGagm2YkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJQ9IwMDCosPIEYIlMwd24FRdqfkMB8GA1UdIwQY
MBaAFLWb5u5UnzNccoSXp58UQQNOhSw1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFp2bTdsU2ZNMXh5aEplbm54UkJBMDZGTERVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9jMWQ5YjctMzkzZC00NjI1LWFmZTct
ZjNjODg3MjgxZWJhLzEvdFp2bTdsU2ZNMXh5aEplbm54UkJBMDZGTERVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi9jMWQ5YjctMzkzZC00NjI1LWFmZTctZjNjODg3MjgxZWJh
LzEvdFp2bTdsU2ZNMXh5aEplbm54UkJBMDZGTERVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGntMiir3
ENLnfsNN9jW8gNhPpK8L4+e9Xj0k6FEd2MDneh8r5RBn9/TGqVisXclQyZpO+oOg
zRrVDpZ++cElfxPEB0/bXyZMHWGvuvxbss4EXA50hIitrVdHIWpYLyxlHGJeVq6C
kkS/E+Je3k+g1uTJ6Hqw9uBh2+ocm1Kh5XULHRb38gRI0O/arr1kpy1qfc1TtZyt
ljjcyjH4ynp4KoBHRRKYse+BoxWWu3JbkWPcLAWQANPmyytlT8dysA9TxjXh9p5m
YBAUHsLIkGWtqK2uYlDfIsU7gsNgS1Y9+lPOgOhnt3LN+Mjisg2the3192s/gVTt
dwZF1oOnpkZj+w==
-----END CERTIFICATE-----
Generated at Wed May 13 11:15:28 2026 by rpki-client