Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.mft
File: ZuksNB52lEP94dJ1ZgRLS2UVkGA.mft (raw, json)
Hash identifier: DvI8/NU3hVsXIT/EIPtLGbJJvGk8dUtjT3FAmIK/vso=
Subject key identifier: 99:56:05:2B:9C:59:14:EE:32:A7:79:CA:E1:41:7B:8B:89:BE:46:20
Authority key identifier: 66:E9:2C:34:1E:76:94:43:FD:E1:D2:75:66:04:4B:4B:65:15:90:60
Certificate issuer: /CN=66e92c341e769443fde1d27566044b4b65159060
Certificate serial: 019E1FB55A48AD1E780D7E565A108E11AE09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZuksNB52lEP94dJ1ZgRLS2UVkGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.mft
Manifest number: 190F
Signing time: Wed 13 May 2026 05:00:39 +0000
Manifest this update: Wed 13 May 2026 05:00:39 +0000
Manifest next update: Thu 14 May 2026 05:00:39 +0000
Files and hashes: 1: 0z9citdXF8752nMEZiQ4oSMIADQ.roa (hash: JsB61vUCFnFWtGQaFlnVeeC8gXBCxefSLsjNjYyY9/g=)
2: 1QDofdrdxn1wg6XblVl9BvBWUmc.roa (hash: 8Sto9TSm0VzEJfpih+W00AHEzAW1aUXacQ7edZT+jK8=)
3: SHKEVaNgH9Bucka6k6DYJtipntE.roa (hash: BUtzhRgSiAPbFwNwynYtm2FzNHzBaqAfRxGfLRS/A6M=)
4: SiLSIEYAwNCN6yfvfGLloC6RIXg.roa (hash: f37/jtR+gmt7ksn8/WXr+fSg16YuTdrSXAgeLfyiBrs=)
5: VHWtEL_iyyJZZOqjrL2J-IKargg.roa (hash: rnSeZqJKS3ZOhG3KIGaYj7ByHskvac+xvOyX10SyZy8=)
6: ZuksNB52lEP94dJ1ZgRLS2UVkGA.crl (hash: n0nORn7okp1g+A2FQOECYhs0V00kKeaj0twcPC8rQJo=)
7: mYZ-CoJ30ryRjfCq_ZwrN2mkqqU.roa (hash: yzaoDw2vJVnlrfgQa+Wm4W0pkL/1ud5VYXRkIehmaa4=)
8: qBMQ_OTzlhMPTgYD0x98v7ieh-M.roa (hash: srAfkImn91GUj6UJibeFHF6TEzTA92kUfQ1mQv9UhIQ=)
9: vivzNK4w1TVYnua5SgoJCXmDNng.roa (hash: 9/40NjL27IpJKJ6tBTmAIkD9cPnZOn2LOM7782cQFOE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZuksNB52lEP94dJ1ZgRLS2UVkGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 05:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:b5:5a:48:ad:1e:78:0d:7e:56:5a:10:8e:11:ae:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66e92c341e769443fde1d27566044b4b65159060
Validity
Not Before: May 13 05:00:39 2026 GMT
Not After : May 14 05:00:39 2026 GMT
Subject: CN=9956052b9c5914ee32a779cae1417b8b89be4620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9d:a9:74:58:52:37:e5:45:50:58:b5:2b:d0:
1a:3b:47:62:cc:6e:63:7e:50:25:c8:99:9d:5b:03:
5e:ee:4e:0b:f2:58:0a:21:6c:4c:e7:8d:2b:b5:84:
0b:af:83:10:a7:20:a6:50:18:d9:36:8f:d7:6f:d9:
e6:09:1a:11:0f:51:45:39:84:23:8b:0b:20:10:41:
92:7f:bd:e4:24:4f:c7:78:12:f7:30:dd:8e:0f:61:
19:a5:73:1d:1e:ff:b3:c0:d4:10:a9:88:65:cb:e0:
5d:52:71:cc:9d:90:a8:f6:f8:8b:bf:f4:dc:9e:13:
3a:ed:9e:b1:7c:78:7d:35:a5:a2:36:b9:2e:84:68:
32:4e:0e:83:88:30:40:07:e7:a0:f1:37:eb:06:b2:
6e:5d:1d:13:d7:eb:94:e9:1b:3f:0e:26:24:21:6e:
d8:2a:3e:e6:94:d8:dd:fa:53:ab:d7:a8:bc:7d:46:
3a:a5:e1:dc:66:b7:8b:f7:df:bf:b5:a3:1b:c7:c5:
df:39:f1:e0:71:da:ca:f7:09:85:a0:92:56:0c:3d:
11:75:4d:11:94:4e:76:d2:1e:8a:ac:9e:95:92:95:
5e:87:15:f1:12:b7:28:2a:5f:a8:7c:f7:59:a0:9d:
12:3e:84:5b:df:32:6a:c0:22:b1:84:c5:0f:a5:aa:
43:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:56:05:2B:9C:59:14:EE:32:A7:79:CA:E1:41:7B:8B:89:BE:46:20
X509v3 Authority Key Identifier:
keyid:66:E9:2C:34:1E:76:94:43:FD:E1:D2:75:66:04:4B:4B:65:15:90:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZuksNB52lEP94dJ1ZgRLS2UVkGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:12:6f:7e:4e:2a:f9:ee:d7:99:16:45:ca:15:a4:2f:61:5a:
40:a1:a2:25:aa:c7:f5:d3:78:f9:42:6b:e9:19:c9:c0:15:71:
48:ca:38:44:63:41:b5:58:15:23:2f:d9:f6:d8:4c:fc:87:7f:
f7:28:51:89:6e:c5:9a:f4:e9:5b:df:d4:bd:2d:15:cf:95:58:
37:a3:20:9e:45:16:71:d7:36:ca:69:a4:c2:b0:29:19:95:0c:
40:77:1c:e0:82:42:12:3b:22:16:f6:90:b4:8d:03:9e:8d:d0:
8e:6c:e2:9a:71:a2:e3:b6:19:5d:40:13:93:52:5e:be:2a:7b:
27:82:59:3e:04:88:c3:07:73:8b:c8:34:49:da:5d:81:3e:a6:
10:c1:d9:8e:44:3c:ea:db:b4:cd:04:06:96:e1:2d:9b:f9:69:
61:5f:ef:75:29:c2:f2:41:ba:cd:1c:87:8f:26:ff:98:a3:cb:
21:a0:46:c7:1c:ce:dd:62:3d:46:82:9b:48:c4:8d:9b:18:3b:
ce:e3:49:a5:96:4d:9b:4e:af:3f:7d:07:9d:92:57:35:c9:e1:
a7:62:a3:18:dd:94:d4:22:0d:5a:76:32:78:6c:ca:1a:b4:81:
b1:95:6d:6e:c7:08:da:a2:fc:f5:85:8c:25:f2:a4:19:45:45:
4f:8c:66:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:47:46 2026 by rpki-client