Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.mft
File: ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.mft (raw, json)
Hash identifier: eaD8lof6V5eZkKOMt2rtfQ/7jc5CFk1VBqPvM2B9i7A=
Subject key identifier: C0:C5:E8:96:6F:30:14:DC:1C:91:4A:03:CA:FE:2A:23:6D:4A:16:60
Authority key identifier: 64:1C:78:FC:17:48:BD:CC:6A:6C:88:C6:7D:28:3E:1D:02:D9:DC:C8
Certificate issuer: /CN=641c78fc1748bdcc6a6c88c67d283e1d02d9dcc8
Certificate serial: 019E1DC71CCF60A4FB4706BA2D8CE147333F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.mft
Manifest number: 11BB
Signing time: Tue 12 May 2026 20:00:48 +0000
Manifest this update: Tue 12 May 2026 20:00:48 +0000
Manifest next update: Wed 13 May 2026 20:00:48 +0000
Files and hashes: 1: 4MqnD80Bm4Q9Vwi3gClRgRwhb2o.roa (hash: x1GbrEL07BjOEaho/RiiT61nbrPNpOtoeGwW3Ksg7ps=)
2: QVoMIPeCUFrk5bxFsPoRfsrvGSw.roa (hash: eQ5qNmayw3NJjRPGsMleqFUXeNcmfxmEvvPybtQSVss=)
3: ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.crl (hash: mf8LHMSJVpo0xdQ1apCQeUEcPLXftrAIX4b7vRdcm+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:1c:cf:60:a4:fb:47:06:ba:2d:8c:e1:47:33:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641c78fc1748bdcc6a6c88c67d283e1d02d9dcc8
Validity
Not Before: May 12 20:00:48 2026 GMT
Not After : May 13 20:00:48 2026 GMT
Subject: CN=c0c5e8966f3014dc1c914a03cafe2a236d4a1660
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1b:72:e7:30:7a:f2:13:a1:78:f8:7c:20:1e:
5e:f7:14:58:82:0a:a6:0f:c8:c0:d2:09:2f:88:20:
3d:bc:6a:c4:cb:cc:04:d3:ba:71:1b:60:2d:7c:03:
9e:d6:6a:29:93:94:08:b5:fc:a8:be:29:8b:7a:45:
1c:35:cc:e8:53:82:7a:35:23:19:40:64:f1:28:62:
51:fb:d1:92:32:59:21:68:b6:48:54:86:cb:26:45:
df:ba:20:fe:c6:bb:0c:09:88:7f:92:a2:f1:ba:0d:
cd:6f:8d:f0:de:04:8e:1b:e4:7b:3d:39:57:c1:58:
82:5e:d1:9f:b0:4f:c0:61:fb:cb:5d:5d:f6:91:ba:
45:c9:1c:3a:b8:f6:4b:b3:60:e2:be:75:fc:c0:a4:
31:b1:ad:b5:b2:d5:db:3f:16:78:53:dd:5a:bd:e6:
4f:68:3d:6f:88:7c:ac:f0:e7:46:65:98:2c:88:7e:
26:40:d3:71:0b:8f:20:f5:8c:56:9d:3d:de:72:c6:
a2:89:92:52:db:16:8d:00:47:d0:e8:a2:3a:df:1e:
f0:f9:7a:2c:6d:4b:f9:c9:ef:96:41:e2:dd:43:49:
a6:bb:03:40:40:74:b5:66:06:47:a0:be:ac:37:7f:
53:1c:36:f8:6c:8e:57:1b:e8:de:81:6a:12:cf:f0:
4c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:C5:E8:96:6F:30:14:DC:1C:91:4A:03:CA:FE:2A:23:6D:4A:16:60
X509v3 Authority Key Identifier:
keyid:64:1C:78:FC:17:48:BD:CC:6A:6C:88:C6:7D:28:3E:1D:02:D9:DC:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:71:b6:9e:a9:50:93:dc:74:8a:7e:3d:d7:b6:7e:b8:2e:48:
e6:47:3a:1c:12:4c:21:e1:d4:47:48:6a:3c:f7:48:e6:1f:14:
71:e0:38:6a:70:e1:e1:0b:ff:f0:3a:65:46:f8:31:51:9a:d6:
4f:da:20:fa:8a:1c:1c:5b:9a:96:49:e9:d9:fb:b2:17:a2:07:
e5:05:b5:0c:15:84:93:25:29:c7:22:6d:a9:68:1e:58:c7:b4:
a4:71:e6:3c:fa:74:88:39:56:89:ee:cf:d4:e1:d7:6a:91:5f:
f2:6c:a2:71:74:a3:02:2f:1e:7e:d7:f5:3c:fe:be:0a:29:a6:
ed:3a:6b:dd:a4:6e:ad:98:53:4c:94:11:48:c9:d1:99:f1:9e:
ad:b2:be:ef:9b:74:80:74:86:94:12:f4:01:51:90:e8:a3:5b:
02:9f:d7:90:bf:82:7a:7f:f3:3e:29:3c:68:54:23:74:96:68:
ee:c7:46:4d:16:3e:95:81:79:0f:bd:44:45:d7:a3:5e:a1:a9:
ae:d4:70:71:10:05:c2:f5:8b:f6:e9:e0:2d:e6:6d:30:31:03:
e3:93:90:7a:3c:0c:42:37:db:22:72:fc:06:44:87:24:e2:f0:
ef:ae:82:34:22:f6:7f:21:be:71:13:d1:78:77:3e:6d:6d:ed:
8f:fe:06:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:11:42 2026 by rpki-client