Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft
File: ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft (raw, json)
Hash identifier: NzbxG/NmbNZjkcFqcSTkiXipiPFeYwAtQsHtKni876M=
Subject key identifier: 18:1D:0E:D5:75:95:29:53:B2:B6:C4:46:D3:A6:0C:0F:5F:72:20:15
Authority key identifier: 64:FF:B3:09:C2:89:AC:FF:C1:BE:34:A6:F0:B6:67:5C:00:17:13:EA
Certificate issuer: /CN=64ffb309c289acffc1be34a6f0b6675c001713ea
Certificate serial: 019E1F47D81610254BFDD273127C3D9B6611
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft
Manifest number: 0DBE
Signing time: Wed 13 May 2026 03:01:02 +0000
Manifest this update: Wed 13 May 2026 03:01:02 +0000
Manifest next update: Thu 14 May 2026 03:01:02 +0000
Files and hashes: 1: 3wE9z3o-LZC9L1Wi744_KuJH-nA.roa (hash: vmvu4StBrIILT2zOsTXLqhGSv13Lo4k+H588mDsH8cM=)
2: ZP-zCcKJrP_BvjSm8LZnXAAXE-o.crl (hash: A92gRM4pR0DTJIvc3czTp21BzepNDZfkj8fmNfCOqAc=)
3: amULFHSQIT1lD63zvSrNJGtGM-I.roa (hash: UX9F+FQcAi88JV/0o8okdIg01PgokJoY/+NJIGfsY+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 03:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:47:d8:16:10:25:4b:fd:d2:73:12:7c:3d:9b:66:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64ffb309c289acffc1be34a6f0b6675c001713ea
Validity
Not Before: May 13 03:01:02 2026 GMT
Not After : May 14 03:01:02 2026 GMT
Subject: CN=181d0ed575952953b2b6c446d3a60c0f5f722015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:98:e0:9b:f5:10:de:ff:39:3b:51:ae:8c:79:
d4:b6:d8:e4:83:3a:6d:44:b2:69:2f:ea:98:72:de:
cd:d1:c8:03:6d:7b:e6:9f:bd:db:85:aa:4b:c5:50:
b0:bd:99:a5:e6:a4:cf:f0:2d:0a:eb:4c:02:cd:14:
6b:d0:11:fa:3d:2d:e0:ae:a8:6e:dd:83:b8:f0:23:
2a:83:eb:d1:06:81:83:10:51:fb:28:5c:71:d4:ee:
da:ef:cf:a1:c5:fd:62:53:cb:10:ad:b7:a7:87:2d:
fe:e4:1a:de:f3:d9:da:50:7b:3e:d5:3f:b8:68:17:
2a:41:e8:f1:a1:9d:e0:38:35:5f:23:58:75:ed:d3:
59:f3:f9:d7:e9:5a:4b:86:90:c0:2b:cf:a6:47:f8:
16:b1:ed:cb:34:4d:fc:29:86:f6:f9:52:26:d3:d9:
7b:30:2b:32:b7:56:cc:fd:9e:f7:7c:fa:5d:d5:b8:
f5:6c:db:00:0b:b9:a5:db:41:7d:3e:d1:8b:5b:b7:
1f:ff:30:38:db:0e:a4:1f:73:9b:47:94:ac:50:01:
28:e2:c3:1a:e4:3f:48:07:ae:1f:06:20:44:95:9e:
b1:71:76:31:4c:b3:cf:7b:6d:a7:0c:8b:61:c4:e5:
8c:1d:c4:49:44:20:80:5e:a9:04:ee:a0:28:b4:a8:
69:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:1D:0E:D5:75:95:29:53:B2:B6:C4:46:D3:A6:0C:0F:5F:72:20:15
X509v3 Authority Key Identifier:
keyid:64:FF:B3:09:C2:89:AC:FF:C1:BE:34:A6:F0:B6:67:5C:00:17:13:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:8d:2a:92:9e:0d:e7:d6:e9:6b:8c:d1:6d:88:43:fe:44:85:
f5:0f:02:53:4b:3e:42:03:c0:c9:98:fc:e9:0b:e4:64:91:00:
e4:af:04:d8:94:d1:cd:8f:e7:0b:da:86:4a:ab:8d:b0:63:88:
c1:47:77:38:fd:f2:56:66:4d:ed:70:87:bc:b3:ea:86:b2:d5:
c7:5a:8d:a1:bd:a5:4e:d2:80:7b:4d:a8:f3:48:3c:60:84:79:
1d:52:5d:6f:f1:ab:09:37:d3:a0:01:3a:41:ba:cd:10:83:4a:
24:7a:ea:f8:f5:ff:3f:07:8b:a1:05:62:18:d7:a9:9f:7e:47:
a4:a3:e6:90:af:e8:f0:3d:93:d6:ff:00:1d:a2:79:79:ea:78:
a8:0e:84:0b:ba:d3:07:22:57:90:cd:21:f9:fd:43:33:6b:a3:
fa:e1:21:e6:f9:e8:f9:fc:ab:de:b3:9c:ef:99:48:de:6d:71:
8d:74:8c:60:9f:74:12:f1:68:e4:31:cb:43:86:41:a6:5f:86:
d1:b6:5d:d9:21:35:19:b7:dd:d6:3a:99:4a:44:f6:6c:da:bd:
09:ad:07:49:f0:33:42:71:a5:b7:c4:3e:c5:e8:40:f9:08:01:
48:48:30:d1:0e:d2:1b:40:24:cd:06:44:c8:a6:91:41:d5:90:
e9:0f:55:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:51:21 2026 by rpki-client