Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.mft
File: ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.mft (raw, json)
Hash identifier: kaxzz4Kt+0nUuHS1cmCtcq3Mc44k+sWZHGhWX4ZhYPo=
Subject key identifier: 14:98:F6:05:5A:71:6E:A1:1B:67:B7:77:16:D5:4B:CD:8C:01:0F:95
Authority key identifier: 64:D8:64:AE:92:BD:7C:EA:B5:08:3B:CC:71:10:1E:F0:46:76:F8:AC
Certificate issuer: /CN=64d864ae92bd7ceab5083bcc71101ef04676f8ac
Certificate serial: 019E1FB5C01655A0EE3589ED97BEAEEB1CA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.mft
Manifest number: 0971
Signing time: Wed 13 May 2026 05:01:05 +0000
Manifest this update: Wed 13 May 2026 05:01:05 +0000
Manifest next update: Thu 14 May 2026 05:01:05 +0000
Files and hashes: 1: 0TK3c5i8HR_A-PsT2oVGhcZw6cM.roa (hash: h0uiRwWUdBUK99Ks+Y8sh+LxhfXczzzvDGj593a9g3k=)
2: DV5WKmhJVzf0DZYxIZKRJBGbJrE.roa (hash: oHLHJsgbUguG193W+KSxMKgTzMMz/6UR3KrwC/LYnpQ=)
3: LvaDmqIdnr6ZwvXIw66-Fgt7aJs.roa (hash: GpWCJE/Uhd8pdU1hHuUyPW3gfCMnh5kn2jlAjryWbcU=)
4: ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.crl (hash: ygfYrZ5AUuU/TFcZKvz3AhFu+CaPq8RyaR/VUB+utF4=)
5: ZPnR3HMA7sGvzycup7HofhXYTG8.roa (hash: A+4R2yyAAlbJkqTLskXX0nzQm93oNzg5z6lYvLAvYBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:b5:c0:16:55:a0:ee:35:89:ed:97:be:ae:eb:1c:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64d864ae92bd7ceab5083bcc71101ef04676f8ac
Validity
Not Before: May 13 05:01:05 2026 GMT
Not After : May 14 05:01:05 2026 GMT
Subject: CN=1498f6055a716ea11b67b77716d54bcd8c010f95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:fe:85:af:90:5f:a9:67:82:21:19:ce:31:86:
2a:d3:96:68:87:aa:19:be:14:c9:14:f6:45:aa:52:
de:96:fe:7c:8f:d0:8e:1d:ad:82:c4:68:e6:5d:68:
07:95:ab:92:7d:9e:b4:8d:c7:b0:33:d5:a5:01:fd:
23:74:10:c9:80:58:df:b0:21:d2:54:00:be:4a:3f:
fd:66:a5:a9:ab:34:46:b4:59:21:ab:69:92:67:eb:
07:ab:55:67:4f:60:a2:ca:fd:4a:3a:72:23:07:50:
30:6c:52:b4:d5:58:41:b6:c8:c4:c4:ab:ed:49:54:
c6:4a:77:e0:54:ab:d9:86:a6:f4:30:fb:98:ec:39:
49:a6:18:b8:f1:d6:22:83:8e:f3:5b:7c:3c:45:0b:
fb:fc:53:17:14:a3:71:ba:80:f6:04:ad:d1:e2:d1:
6a:54:d6:4b:aa:c6:82:67:57:25:37:5f:29:fc:16:
d6:a1:9d:88:55:4c:e5:0c:4f:b2:6f:56:34:93:36:
60:be:28:33:23:f4:66:bd:22:45:ce:d7:24:f3:cd:
af:9b:a9:14:12:38:43:30:90:0a:52:25:f5:88:34:
ab:f6:33:bd:5b:a3:ae:d1:2b:07:f1:af:e3:9f:1a:
75:07:e7:a4:d5:61:2b:be:5e:8a:a3:12:93:1b:5c:
61:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:98:F6:05:5A:71:6E:A1:1B:67:B7:77:16:D5:4B:CD:8C:01:0F:95
X509v3 Authority Key Identifier:
keyid:64:D8:64:AE:92:BD:7C:EA:B5:08:3B:CC:71:10:1E:F0:46:76:F8:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:21:af:6e:2c:71:e9:92:92:95:10:91:c4:46:8f:24:9f:77:
7d:0f:6d:20:7f:41:42:be:9e:67:b3:59:4d:0e:c3:d7:bf:25:
41:25:0e:33:d5:0a:08:1f:7d:62:5a:4c:a4:a9:19:09:a6:ae:
93:bc:df:e4:66:37:a1:33:27:da:ca:b4:86:06:fb:35:ca:15:
1d:f1:a4:a2:93:79:af:e0:72:cb:57:ee:af:26:ba:91:dd:21:
73:ed:11:bc:a3:dd:43:6c:4a:11:1e:fd:0f:e9:12:e3:83:7c:
1d:5c:18:52:b8:41:11:aa:ba:26:9a:4d:58:0e:6e:74:a5:6b:
08:9d:0d:af:78:23:a6:8e:6f:5b:c8:c7:9a:f8:2f:75:35:e9:
6f:c3:7b:6a:ae:bd:ab:0d:28:bf:52:33:8a:cc:06:e6:92:10:
23:d2:b1:9f:25:da:48:8a:d4:7b:e5:f2:4e:3f:b1:9a:f9:47:
dc:bb:4a:b9:91:f1:ba:90:0e:ae:6b:c0:bd:de:70:dc:bb:d4:
e1:5b:d7:cb:f4:f1:54:3e:81:08:cb:94:82:53:9f:d8:64:e0:
f5:c1:81:a0:f7:31:14:a5:c6:eb:1a:51:51:74:71:6a:ec:35:
4d:7f:5e:ed:ec:e0:22:c0:42:f1:ca:4f:f2:c3:04:55:7a:8a:
b0:e9:d0:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ftcAWVaDuNYntl76u6xyoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0ZDg2NGFlOTJiZDdjZWFiNTA4M2JjYzcxMTAxZWYwNDY3
NmY4YWMwHhcNMjYwNTEzMDUwMTA1WhcNMjYwNTE0MDUwMTA1WjAzMTEwLwYDVQQD
EygxNDk4ZjYwNTVhNzE2ZWExMWI2N2I3NzcxNmQ1NGJjZDhjMDEwZjk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/6Fr5BfqWeCIRnOMYYq05Zoh6oZ
vhTJFPZFqlLelv58j9COHa2CxGjmXWgHlauSfZ60jcewM9WlAf0jdBDJgFjfsCHS
VAC+Sj/9ZqWpqzRGtFkhq2mSZ+sHq1VnT2Ciyv1KOnIjB1AwbFK01VhBtsjExKvt
SVTGSnfgVKvZhqb0MPuY7DlJphi48dYig47zW3w8RQv7/FMXFKNxuoD2BK3R4tFq
VNZLqsaCZ1clN18p/BbWoZ2IVUzlDE+yb1Y0kzZgvigzI/RmvSJFztck882vm6kU
EjhDMJAKUiX1iDSr9jO9W6Ou0SsH8a/jnxp1B+ek1WErvl6KoxKTG1xhuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBSY9gVacW6hG2e3dxbVS82MAQ+VMB8GA1UdIwQY
MBaAFGTYZK6SvXzqtQg7zHEQHvBGdvisMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWk5oa3JwSzlmT3ExQ0R2TWNSQWU4RVoyLUt3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni83MGIyYzQtMWQ0YS00YjkxLWIwZDAt
MmMwNWNjOTIyMDAxLzEvWk5oa3JwSzlmT3ExQ0R2TWNSQWU4RVoyLUt3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni83MGIyYzQtMWQ0YS00YjkxLWIwZDAtMmMwNWNjOTIyMDAx
LzEvWk5oa3JwSzlmT3ExQ0R2TWNSQWU4RVoyLUt3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfSGvbixx
6ZKSlRCRxEaPJJ93fQ9tIH9BQr6eZ7NZTQ7D178lQSUOM9UKCB99YlpMpKkZCaau
k7zf5GY3oTMn2sq0hgb7NcoVHfGkopN5r+Byy1furya6kd0hc+0RvKPdQ2xKER79
D+kS44N8HVwYUrhBEaq6JppNWA5udKVrCJ0Nr3gjpo5vW8jHmvgvdTXpb8N7aq69
qw0ov1IziswG5pIQI9KxnyXaSIrUe+XyTj+xmvlH3LtKuZHxupAOrmvAvd5w3LvU
4VvXy/TxVD6BCMuUglOf2GTg9cGBoPcxFKXG6xpRUXRxauw1TX9e7ezgIsBC8cpP
8sMEVXqKsOnQ2A==
-----END CERTIFICATE-----
Generated at Wed May 13 09:28:14 2026 by rpki-client