Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/208623-268c-4bf6-b947-f459235d987b/1/zPae-KVIMMWntjeJH8PJCrEsung.mft
File: zPae-KVIMMWntjeJH8PJCrEsung.mft (raw, json)
Hash identifier: K65hqlwejzAilW/xCwlbEu2dx+uxFriWuTqPaao5zRw=
Subject key identifier: 51:CF:A9:9F:AA:13:8F:0C:87:47:AA:19:CA:FE:7E:0B:0C:4C:7F:3D
Authority key identifier: CC:F6:9E:F8:A5:48:30:C5:A7:B6:37:89:1F:C3:C9:0A:B1:2C:BA:78
Certificate issuer: /CN=ccf69ef8a54830c5a7b637891fc3c90ab12cba78
Certificate serial: 019E216CD73644F3E62F89066E038E0DCDD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zPae-KVIMMWntjeJH8PJCrEsung.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/208623-268c-4bf6-b947-f459235d987b/1/zPae-KVIMMWntjeJH8PJCrEsung.mft
Manifest number: 0336
Signing time: Wed 13 May 2026 13:00:41 +0000
Manifest this update: Wed 13 May 2026 13:00:41 +0000
Manifest next update: Thu 14 May 2026 13:00:41 +0000
Files and hashes: 1: SMSEOT3Bw8BdVDxGYRzfDIZdEU0.roa (hash: Q+jvQC3Cp7YojEH0cGPSd1xy7T9E3c9+3+jfE13JjeY=)
2: g8Z517-jOmVF6Xu2Nxp8NTAxGx4.roa (hash: OXnUsbk5vh8et8vrHb0/ntkeJcO9A+ORppXS73LPvXg=)
3: zPae-KVIMMWntjeJH8PJCrEsung.crl (hash: VBvVqPZ1wtKCY3RlkWfHTBxbuqB5rZyrH42hxiptaqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/208623-268c-4bf6-b947-f459235d987b/1/zPae-KVIMMWntjeJH8PJCrEsung.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/208623-268c-4bf6-b947-f459235d987b/1/zPae-KVIMMWntjeJH8PJCrEsung.mft
rsync://rpki.ripe.net/repository/DEFAULT/zPae-KVIMMWntjeJH8PJCrEsung.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 13:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:21:6c:d7:36:44:f3:e6:2f:89:06:6e:03:8e:0d:cd:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccf69ef8a54830c5a7b637891fc3c90ab12cba78
Validity
Not Before: May 13 13:00:41 2026 GMT
Not After : May 14 13:00:41 2026 GMT
Subject: CN=51cfa99faa138f0c8747aa19cafe7e0b0c4c7f3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:68:93:95:45:b4:49:58:19:0d:9e:f9:6b:c7:
9f:b0:33:1e:90:f8:e4:d4:32:94:75:cb:ff:20:a1:
6a:14:4b:e3:26:c9:bc:db:9b:42:b1:e4:7a:d8:70:
49:a4:8b:65:17:d8:9d:7b:fa:a1:f3:2e:3d:06:2b:
0f:60:79:63:6e:4f:5f:e7:81:24:74:8c:d9:6a:09:
b8:42:1f:9e:c0:31:8c:9c:82:bd:ad:2c:bc:06:14:
e2:cb:93:bc:fe:b5:d7:33:84:3c:ef:ca:89:42:8a:
77:1b:11:a9:e4:16:d2:fc:60:58:62:0d:62:e7:aa:
3d:be:a9:6d:31:80:04:03:ee:28:08:b0:5f:93:0d:
32:dc:3a:9c:b8:60:d1:19:66:91:b4:42:83:7b:3f:
33:de:72:8f:f9:97:72:64:b8:04:ef:8e:f5:36:e9:
45:90:23:d6:d3:11:d6:1d:09:28:70:5d:2d:43:61:
c1:f3:21:8d:a7:6b:d9:c5:5d:d1:6d:02:97:d2:9c:
72:6b:c1:81:d9:e5:4e:83:29:c6:35:39:e0:ea:9c:
ef:cb:1e:aa:d4:fa:cb:80:cd:cc:a9:a0:fa:99:b3:
d5:53:5f:0f:cc:41:1f:f2:80:8c:03:3b:d3:8f:e9:
df:5b:4f:64:71:1f:fc:a0:11:ed:41:e6:a3:29:45:
68:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:CF:A9:9F:AA:13:8F:0C:87:47:AA:19:CA:FE:7E:0B:0C:4C:7F:3D
X509v3 Authority Key Identifier:
keyid:CC:F6:9E:F8:A5:48:30:C5:A7:B6:37:89:1F:C3:C9:0A:B1:2C:BA:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPae-KVIMMWntjeJH8PJCrEsung.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/208623-268c-4bf6-b947-f459235d987b/1/zPae-KVIMMWntjeJH8PJCrEsung.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/208623-268c-4bf6-b947-f459235d987b/1/zPae-KVIMMWntjeJH8PJCrEsung.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:e3:c9:df:60:ba:2f:90:f1:ef:ea:d5:e9:fb:d5:73:4a:08:
64:7c:e3:44:07:18:bd:e8:0d:e6:27:bb:cf:1b:15:79:b7:f5:
64:32:db:74:2f:11:6d:79:bd:01:a8:2a:fc:2a:ca:82:0e:20:
6a:6d:19:77:c7:84:68:8e:9a:b1:24:97:0d:da:a0:10:da:6e:
20:fc:c1:3c:e5:06:bf:b8:30:c3:12:ba:1f:cf:82:78:0f:3c:
53:08:4d:35:81:74:10:d8:5b:c0:6f:1f:c6:c4:12:97:74:d7:
bf:1a:5e:c9:d0:db:fc:d1:74:f7:af:26:4a:26:ce:23:c2:16:
89:cc:2d:cb:65:87:7f:d7:d3:03:35:fd:41:d6:e3:30:54:a0:
be:8c:d2:38:f6:dd:f2:60:93:6d:f7:b7:d0:85:5d:43:03:d4:
a7:95:2c:0d:bf:b4:3a:13:af:1b:38:2f:de:fd:3d:f3:1a:79:
66:49:c5:57:19:37:37:21:09:c5:5a:ee:26:1b:ed:7d:cd:9a:
cd:16:7d:98:19:04:d5:d5:29:c5:c2:fd:76:5d:e3:44:76:17:
8a:77:27:9f:28:df:7f:f5:7c:72:1e:0d:b2:9a:ca:19:41:2a:
72:a4:db:cc:46:a8:8a:98:2e:fe:87:08:e1:58:95:54:5f:56:
e0:55:74:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:38:35 2026 by rpki-client