Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/2be009-1ef1-4d57-8f01-7e184b070bbd/1/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.mft
File: zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.mft (raw, json)
Hash identifier: XeuHM6MOcSmb5UHCwsfrEVUCF7+xJydglSfLwsSM2Lg=
Subject key identifier: D7:40:0B:16:1A:93:92:FA:60:45:44:63:1B:23:C3:CD:F9:DD:D8:A9
Authority key identifier: CE:46:EA:62:9A:FB:0C:2D:54:20:0B:5A:65:72:7B:E1:8C:BB:45:A4
Certificate issuer: /CN=ce46ea629afb0c2d54200b5a65727be18cbb45a4
Certificate serial: 019E1DFEBF0D328F21005D95FCF8DE51F389
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/2be009-1ef1-4d57-8f01-7e184b070bbd/1/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.mft
Manifest number: 11B8
Signing time: Tue 12 May 2026 21:01:34 +0000
Manifest this update: Tue 12 May 2026 21:01:34 +0000
Manifest next update: Wed 13 May 2026 21:01:34 +0000
Files and hashes: 1: 5mo5xCIsbIhrhc8a0MMdjoHlY1A.roa (hash: pyWlQmd0OGBAWyVjo0BfVWnydEoUEqSFJZF/M2RGZlA=)
2: zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.crl (hash: Rf/MuyrUd1iLZuZo69T3YDNEJCUESCbPDdorpZ6vHEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/2be009-1ef1-4d57-8f01-7e184b070bbd/1/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/2be009-1ef1-4d57-8f01-7e184b070bbd/1/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:bf:0d:32:8f:21:00:5d:95:fc:f8:de:51:f3:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce46ea629afb0c2d54200b5a65727be18cbb45a4
Validity
Not Before: May 12 21:01:34 2026 GMT
Not After : May 13 21:01:34 2026 GMT
Subject: CN=d7400b161a9392fa604544631b23c3cdf9ddd8a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:11:a5:25:ce:a0:88:0f:7e:82:f4:de:63:d1:
53:88:ef:4d:31:30:7a:8f:2b:9a:94:8c:3c:16:a7:
36:88:9c:45:f2:3c:57:a7:38:ab:fb:08:cb:04:5c:
2d:12:31:bd:24:a1:15:90:2a:d1:27:81:96:ee:ef:
45:e0:cb:dc:58:1f:cb:af:25:65:6e:e2:5f:18:a7:
b5:c3:d4:52:fb:7c:8a:7e:67:ed:90:2d:24:51:fe:
7a:a0:a6:b7:2d:8a:8b:19:c6:20:bc:91:24:5a:45:
75:a0:47:a7:7b:5f:79:14:ea:55:80:28:53:8b:17:
b9:fc:21:7c:b4:ce:a0:85:68:c1:b8:80:73:12:36:
56:b5:76:b9:35:3f:07:28:e8:f4:39:e0:d3:b5:67:
73:29:8f:68:c0:83:94:09:d2:5d:20:0e:37:37:bf:
e6:7a:f7:58:37:98:53:46:6d:74:5f:50:a6:e1:05:
eb:c7:72:b9:e9:48:89:6a:03:6f:61:08:e7:19:dd:
d5:a0:ef:e0:6e:54:b4:0c:1a:c8:ff:c7:70:2c:30:
1a:6b:ff:ce:56:91:33:a0:27:01:41:96:12:51:47:
3b:c6:50:e7:a5:fd:ab:f8:e3:35:a4:c0:61:7a:59:
ce:95:1f:81:96:fa:6b:5e:c1:d0:82:eb:b7:81:52:
36:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:40:0B:16:1A:93:92:FA:60:45:44:63:1B:23:C3:CD:F9:DD:D8:A9
X509v3 Authority Key Identifier:
keyid:CE:46:EA:62:9A:FB:0C:2D:54:20:0B:5A:65:72:7B:E1:8C:BB:45:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/2be009-1ef1-4d57-8f01-7e184b070bbd/1/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/2be009-1ef1-4d57-8f01-7e184b070bbd/1/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:84:89:aa:6f:46:4e:26:8a:69:c9:58:1e:fe:13:be:6b:b2:
10:a3:6f:63:4c:a0:92:7f:fe:b7:e6:15:d0:d0:4d:85:7a:72:
4d:b2:d2:52:37:6c:81:7b:ff:cd:af:17:02:f1:74:11:3b:66:
c3:70:eb:f1:35:5d:23:22:f5:e1:36:e6:32:1a:2f:12:d0:3b:
4b:b9:50:c8:78:34:a3:c6:73:b3:34:74:de:e6:76:29:17:31:
e4:85:6d:8a:ce:51:67:95:60:8b:6b:ef:cf:b6:15:da:1f:2d:
1b:ff:86:6d:86:ad:27:7c:76:02:da:e5:00:36:01:f0:f4:16:
d4:2f:60:ec:4f:fc:69:6f:da:dd:0a:07:a9:99:02:dd:ed:58:
cb:f6:d3:07:ef:0a:e9:9e:ac:af:19:b3:63:2e:c9:46:6b:fd:
74:9f:07:4b:a1:7c:14:39:fc:70:ae:c7:0d:4b:21:be:4a:ef:
7d:3c:27:a9:0a:3f:17:3e:05:c3:d2:e2:02:69:b3:ee:32:ab:
99:17:94:56:cc:72:fb:cb:10:f0:2f:f6:10:e0:4a:b5:60:db:
58:fa:41:f6:ee:0c:68:7c:7c:bc:6e:72:76:ce:75:30:7c:0b:
82:fb:ad:a7:04:31:cd:9d:a2:b3:93:3e:96:f8:e9:84:72:2a:
07:8f:80:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:30:13 2026 by rpki-client