
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/e1e2a7-fd96-4cf1-82c3-ba2b90d49547/1/Zr2CuhiBrWT1JOM-zhKtpLO11X8.mft
File: Zr2CuhiBrWT1JOM-zhKtpLO11X8.mft (raw, json)
Hash identifier: 2B7h0KVI7L4w9OM6V0ndx3Pa1Q/urUtCTdZ9+9rkryg=
Subject key identifier: 5D:9E:7A:28:7F:D1:C3:00:3D:3C:CD:1D:34:4F:83:49:62:CE:5E:AF
Authority key identifier: 66:BD:82:BA:18:81:AD:64:F5:24:E3:3E:CE:12:AD:A4:B3:B5:D5:7F
Certificate issuer: /CN=66bd82ba1881ad64f524e33ece12ada4b3b5d57f
Certificate serial: 019E1C0FF33FD7A77238D8BE0DB0FCE73D74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zr2CuhiBrWT1JOM-zhKtpLO11X8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/e1e2a7-fd96-4cf1-82c3-ba2b90d49547/1/Zr2CuhiBrWT1JOM-zhKtpLO11X8.mft
Manifest number: 1906
Signing time: Tue 12 May 2026 12:01:07 +0000
Manifest this update: Tue 12 May 2026 12:01:07 +0000
Manifest next update: Wed 13 May 2026 12:01:07 +0000
Files and hashes: 1: EY3B-toGXUZtNKRbRIT1VD4kBHE.roa (hash: 3Wh78iI9ibfL8FY/7stYt19m1NshKZMf/srlWVz8NYk=)
2: Zr2CuhiBrWT1JOM-zhKtpLO11X8.crl (hash: nxoH/xqWtl+rnIIvyLdNeKBgJCBmL0ahoZtnpBgNCZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/e1e2a7-fd96-4cf1-82c3-ba2b90d49547/1/Zr2CuhiBrWT1JOM-zhKtpLO11X8.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/e1e2a7-fd96-4cf1-82c3-ba2b90d49547/1/Zr2CuhiBrWT1JOM-zhKtpLO11X8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zr2CuhiBrWT1JOM-zhKtpLO11X8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:0f:f3:3f:d7:a7:72:38:d8:be:0d:b0:fc:e7:3d:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66bd82ba1881ad64f524e33ece12ada4b3b5d57f
Validity
Not Before: May 12 12:01:07 2026 GMT
Not After : May 13 12:01:07 2026 GMT
Subject: CN=5d9e7a287fd1c3003d3ccd1d344f834962ce5eaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:71:09:af:28:f1:3c:b0:cf:70:29:bd:88:be:
fe:54:a3:33:8d:a9:80:97:e1:3a:cb:54:b1:ed:9f:
fc:2d:6a:9c:e7:1c:5e:23:fd:fb:c5:1d:9e:ed:80:
a6:4d:45:9a:cd:6c:11:18:7e:0d:9f:77:76:5d:14:
e6:21:26:79:aa:2a:db:dc:e6:19:d1:29:55:4b:bf:
78:20:19:a7:e3:95:b8:44:af:3d:51:91:32:56:ab:
47:a9:36:f6:be:0b:9a:32:ae:e7:5e:6c:46:bb:d0:
ed:8d:89:76:33:5a:fc:78:23:ad:95:45:60:be:cf:
88:6f:8e:61:3d:33:ca:57:fc:8b:4f:24:96:24:18:
c0:16:d4:99:5c:34:e2:48:01:4d:f2:29:1c:44:f6:
0b:b2:3f:f4:0a:b7:17:a9:15:02:d2:70:1a:68:ed:
86:44:da:53:6b:95:4f:fa:af:42:ca:46:bc:d6:8e:
24:de:b8:44:37:6e:76:c0:d1:45:13:cf:87:f4:61:
dc:89:4f:91:7f:6b:d7:9e:fd:16:91:e7:54:c8:c2:
08:57:ed:df:d8:b2:69:67:d9:66:ed:43:63:3a:c5:
6f:47:ad:cc:61:c0:fa:31:51:1d:f6:b6:84:28:b4:
ce:da:b4:63:6c:96:cb:b7:40:6d:b3:da:58:a3:50:
55:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:9E:7A:28:7F:D1:C3:00:3D:3C:CD:1D:34:4F:83:49:62:CE:5E:AF
X509v3 Authority Key Identifier:
keyid:66:BD:82:BA:18:81:AD:64:F5:24:E3:3E:CE:12:AD:A4:B3:B5:D5:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zr2CuhiBrWT1JOM-zhKtpLO11X8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e1e2a7-fd96-4cf1-82c3-ba2b90d49547/1/Zr2CuhiBrWT1JOM-zhKtpLO11X8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e1e2a7-fd96-4cf1-82c3-ba2b90d49547/1/Zr2CuhiBrWT1JOM-zhKtpLO11X8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:9d:11:a9:d5:6b:5f:9e:c8:c5:38:dc:b0:13:d8:a9:d5:94:
a5:39:86:1c:04:61:cb:a0:11:0d:81:ee:a0:09:b2:53:85:d2:
29:a6:db:c5:3b:04:2d:df:67:cf:db:b7:5a:7b:5a:fd:8d:f3:
cd:89:fc:41:28:71:51:24:ec:a3:11:b6:ad:b4:b2:1f:8e:6c:
9b:ce:4a:fb:36:97:4b:26:f8:e1:df:b6:3b:82:c4:08:e5:5e:
3a:e1:60:39:f7:4a:03:3e:67:dc:dd:ac:65:75:fb:87:97:5d:
b7:7c:14:6d:4a:d3:6a:45:81:1c:78:21:fa:5c:00:8a:0b:ce:
8e:41:d8:4a:03:e0:bd:d1:aa:14:64:91:70:f8:e1:be:ea:d8:
f8:81:4f:c4:5c:66:a0:35:9f:90:89:7e:66:a6:e1:74:18:15:
10:9f:7d:24:ea:a4:ae:fb:5c:d2:ba:c0:f5:e0:1c:21:4f:c7:
bc:41:42:9b:1e:ca:28:21:47:68:7a:98:2b:12:6f:01:da:4f:
20:c6:13:fa:f4:23:ef:fc:97:82:d8:7d:90:a2:11:2f:d2:8a:
34:86:b2:f0:d1:d7:07:a1:88:c0:4e:b7:41:98:7f:fe:4e:50:
28:44:b4:a7:fb:d7:46:cf:da:40:2a:b5:4c:14:a3:5b:91:5d:
b8:31:01:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:38:03 2026 by rpki-client