Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft
File: Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft (raw, json)
Hash identifier: W8VL2zS6kTQVSZ6nlAYZQk+j6Vkf3RRv0b+MY1JoQTs=
Subject key identifier: 12:8B:1C:6C:51:E3:44:9A:F4:4A:D2:AA:F3:0D:67:6F:43:90:B9:02
Authority key identifier: 66:5E:17:C0:8A:CD:C7:7E:94:4B:28:39:50:8F:1F:D7:11:E8:E9:7B
Certificate issuer: /CN=665e17c08acdc77e944b2839508f1fd711e8e97b
Certificate serial: 019E1EA2F74B13BC854297235BF84F8EC904
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zl4XwIrNx36USyg5UI8f1xHo6Xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft
Manifest number: 08A3
Signing time: Wed 13 May 2026 00:00:56 +0000
Manifest this update: Wed 13 May 2026 00:00:56 +0000
Manifest next update: Thu 14 May 2026 00:00:56 +0000
Files and hashes: 1: C_VRFP2HIVQ92IBRqKDUpWFoIEw.roa (hash: vn7JZEI6f0C3P1aOSgIzdjUGS6glebz8hQYfRM3UhMg=)
2: IAnS6bEzch3TIofLALz1ygB0iyo.roa (hash: lyXUvYyQfJt4aH/SJqViQQv03gKvKKB5vsWtq0xG3Ro=)
3: Zl4XwIrNx36USyg5UI8f1xHo6Xs.crl (hash: tHo1S0m8bBzYgfnXNNkQFTkwJwmIoeP0kQ43sLIFtG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zl4XwIrNx36USyg5UI8f1xHo6Xs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a2:f7:4b:13:bc:85:42:97:23:5b:f8:4f:8e:c9:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=665e17c08acdc77e944b2839508f1fd711e8e97b
Validity
Not Before: May 13 00:00:56 2026 GMT
Not After : May 14 00:00:56 2026 GMT
Subject: CN=128b1c6c51e3449af44ad2aaf30d676f4390b902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e9:2c:08:96:96:7e:c5:0d:3d:ca:01:35:ed:
f6:48:ee:78:f8:ad:83:53:6b:93:75:6e:44:11:38:
07:28:7c:56:1b:11:a7:e8:ff:aa:e2:b9:89:94:3a:
1c:59:e8:2c:f4:6d:15:0f:f6:e7:46:1c:82:72:11:
52:ea:2d:76:ee:00:0b:df:d9:73:58:69:96:be:0b:
cf:e4:73:c5:ca:d9:fd:35:a9:7f:bb:7d:9f:d9:7e:
42:b8:cb:9a:d9:fc:a6:20:d9:1d:f2:12:fd:4f:ce:
3a:23:da:d3:e8:ff:81:8b:04:c5:96:80:51:42:ec:
09:1e:80:e3:ad:83:ca:f0:70:3b:08:66:81:4e:12:
ad:89:08:d9:0a:d6:c9:16:c7:54:c3:7f:2f:9c:5c:
a3:21:c5:f9:6c:1a:a2:a6:a7:ae:92:ee:63:ab:8d:
da:b5:87:f4:a0:16:df:2d:5f:11:58:c1:7e:0e:53:
7c:54:12:1d:92:9e:1c:a6:9f:27:41:b7:ce:4a:8f:
56:c6:16:1f:96:1f:46:6a:34:93:b1:06:62:92:88:
3b:c4:9e:d1:5b:b7:46:57:c1:c7:55:8f:94:94:85:
3d:6a:6f:44:e8:f2:5c:60:0c:83:1f:53:d7:88:44:
b0:ca:b9:37:7f:6d:95:d2:02:45:39:8c:69:bf:a9:
89:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:8B:1C:6C:51:E3:44:9A:F4:4A:D2:AA:F3:0D:67:6F:43:90:B9:02
X509v3 Authority Key Identifier:
keyid:66:5E:17:C0:8A:CD:C7:7E:94:4B:28:39:50:8F:1F:D7:11:E8:E9:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zl4XwIrNx36USyg5UI8f1xHo6Xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:44:00:b0:53:0d:2d:09:d6:a4:6d:dc:c6:68:6a:06:8b:c4:
98:5c:fc:c4:1f:52:07:11:d2:ba:37:a0:56:c8:78:31:a0:7a:
11:b3:79:15:e4:34:ee:dd:fb:54:78:cf:57:00:f6:ca:c3:ae:
e5:7c:66:70:ef:a3:5b:35:4c:39:bd:e7:fb:3e:9a:f4:41:a9:
2b:3e:58:60:d4:3d:b2:4e:52:6d:9a:e3:af:b9:46:c5:b3:3c:
6f:b1:77:2f:1f:72:00:50:59:e9:d4:f3:7e:35:8b:60:30:74:
3e:fd:5c:70:ef:5a:55:2d:4c:61:0c:a8:c1:86:b1:13:73:a4:
c9:c1:d1:2a:9e:c7:c3:01:17:74:11:7d:3d:fe:3a:59:8d:e1:
1b:1e:e3:e1:96:03:5e:62:3f:bd:33:0a:01:4e:e2:81:c7:c1:
e5:f8:41:8c:3c:10:d0:4f:28:71:9b:a5:f7:c4:34:2f:94:86:
15:d1:7b:4f:e5:4d:a5:f6:43:5a:e9:d7:92:6a:3b:f7:c7:9c:
f0:d2:cd:55:23:6b:b2:0a:16:05:e9:1c:24:d4:14:9f:53:7d:
70:de:d0:75:cb:bb:33:f6:55:86:72:c1:83:15:c0:90:59:ce:
c4:74:b5:14:05:23:ab:86:e5:db:e4:dc:70:ba:25:20:c6:dd:
31:92:5e:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:33:14 2026 by rpki-client