Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/zWj3o5G3sWSe1JA0gtPpMe0049g.mft
File: zWj3o5G3sWSe1JA0gtPpMe0049g.mft (raw, json)
Hash identifier: shpE72jaDRgowNgTFdiTToEjIuvg1dWbBb0/8mk26as=
Subject key identifier: 9D:CA:E9:FE:E9:7F:B3:40:C1:A7:4F:C9:5C:DC:18:08:23:7E:30:F6
Authority key identifier: CD:68:F7:A3:91:B7:B1:64:9E:D4:90:34:82:D3:E9:31:ED:34:E3:D8
Certificate issuer: /CN=cd68f7a391b7b1649ed4903482d3e931ed34e3d8
Certificate serial: 019E1E6CB5E63309E0EE5AED8E868530A8C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zWj3o5G3sWSe1JA0gtPpMe0049g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/zWj3o5G3sWSe1JA0gtPpMe0049g.mft
Manifest number: 1202
Signing time: Tue 12 May 2026 23:01:41 +0000
Manifest this update: Tue 12 May 2026 23:01:41 +0000
Manifest next update: Wed 13 May 2026 23:01:41 +0000
Files and hashes: 1: 1-xP6wGH4E4j9NJ-NB2QfLldx1Lw.roa (hash: uFFlZsAMKLJKDEktW5ybjbZi8RHcBaE5UQZ62izVnr4=)
2: G9U4X93rXqstWDjqCmr74O0MOOc.roa (hash: lHIU6yFEQWHJAGlwWMO/pP3VoRev0tS4Byvjv7Nl/Nk=)
3: SV_A5OMf5Dv_YVGf3i03i121qDE.roa (hash: Yx1VNJorHPI+3bEwTwwZMtNZ1vpLF6jyHjPFF9j0vFs=)
4: u0VefA4FNPAM3OaDOe1uGO8G7GM.roa (hash: L/EGbgrpKOwV4dXB0O77kAg3sNSvZROrNTY/PmdUGpM=)
5: zWj3o5G3sWSe1JA0gtPpMe0049g.crl (hash: +GMhJTU8zK5g+6T17ajQDt+mDQ8LZeVdZCpv8Ptvhjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/zWj3o5G3sWSe1JA0gtPpMe0049g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/zWj3o5G3sWSe1JA0gtPpMe0049g.mft
rsync://rpki.ripe.net/repository/DEFAULT/zWj3o5G3sWSe1JA0gtPpMe0049g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:b5:e6:33:09:e0:ee:5a:ed:8e:86:85:30:a8:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd68f7a391b7b1649ed4903482d3e931ed34e3d8
Validity
Not Before: May 12 23:01:41 2026 GMT
Not After : May 13 23:01:41 2026 GMT
Subject: CN=9dcae9fee97fb340c1a74fc95cdc1808237e30f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:55:f6:c0:6a:9e:9a:0a:36:dc:49:8a:27:4f:
f1:61:9c:5a:2b:01:30:e7:81:56:98:76:9f:87:6e:
85:85:1b:51:4e:60:d3:27:a9:49:01:23:f6:b5:8e:
4a:3e:f6:0c:4a:03:12:6c:3b:7a:e3:37:5d:cb:71:
54:0a:5c:f9:49:d0:30:81:48:5d:c8:33:fd:86:c0:
b1:89:34:b2:06:a7:c4:a0:19:d4:05:76:db:bb:5d:
5c:59:81:e2:fd:f7:09:ef:68:eb:55:a0:3f:49:de:
62:ce:07:cc:a7:44:89:79:bd:04:8b:d1:fe:ee:6f:
43:01:b9:61:5f:b3:e7:da:b3:1b:1d:c8:d8:0f:76:
e8:e3:64:59:27:d7:1b:8a:b5:36:34:be:21:c7:14:
c9:e8:bd:28:64:e2:14:24:7a:a5:26:70:6b:3d:78:
f6:29:79:62:21:2c:e9:ef:a6:1a:b4:94:e8:0a:d1:
83:79:34:57:5f:27:e2:62:ff:d7:aa:f4:d4:a1:52:
b5:ac:38:2f:0e:10:40:81:62:90:45:7a:f3:d0:2e:
dd:13:bd:6b:80:e0:ac:86:5a:ea:e6:71:24:a8:db:
cc:80:e8:f8:b5:84:97:1d:40:a5:73:8b:8c:1d:a6:
ab:b4:fc:e7:0e:3f:84:78:dd:ec:7f:dc:97:d8:d8:
02:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:CA:E9:FE:E9:7F:B3:40:C1:A7:4F:C9:5C:DC:18:08:23:7E:30:F6
X509v3 Authority Key Identifier:
keyid:CD:68:F7:A3:91:B7:B1:64:9E:D4:90:34:82:D3:E9:31:ED:34:E3:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWj3o5G3sWSe1JA0gtPpMe0049g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/zWj3o5G3sWSe1JA0gtPpMe0049g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/zWj3o5G3sWSe1JA0gtPpMe0049g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:08:dc:46:b4:09:a0:2c:35:6b:4d:9c:82:83:3e:b9:c6:04:
3c:e1:b8:7f:ff:79:53:88:3f:22:85:b2:0f:0c:6a:de:52:a7:
f9:c9:fc:a5:0c:99:d9:26:37:c1:cb:6d:61:95:4d:71:f7:f1:
8c:0f:31:57:f6:66:54:b5:e8:73:b2:96:c5:57:ff:b2:7c:c6:
d6:5f:f6:04:5f:02:8d:44:a2:76:d4:f0:ab:70:36:9c:85:5f:
88:0e:7c:f8:f3:04:7e:f6:d4:ba:03:27:c9:1a:f9:f4:47:be:
10:c9:86:a1:5c:6d:b1:e9:8f:04:7a:49:a2:d1:38:19:d0:c5:
8e:e3:d8:24:d4:a4:4e:57:a6:74:cf:66:05:05:b5:16:08:15:
e8:78:fc:9a:d4:b3:26:23:33:e5:ff:d4:16:48:64:6f:fd:b8:
84:1d:42:ca:92:0d:22:c0:19:66:d8:a1:d9:4d:2f:0f:cf:28:
ac:6b:09:44:80:72:f2:1d:e3:de:87:74:e5:d1:98:fc:77:08:
17:6a:b0:47:dc:63:eb:6b:c9:e1:2b:20:a3:b8:1b:ec:1b:30:
72:70:ba:f4:8b:65:4d:15:01:c6:b4:52:60:bc:6a:2c:8c:64:
cc:12:51:ed:9c:59:df:c2:2b:01:d0:79:e8:5f:5e:cb:79:31:
db:b8:10:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:45:25 2026 by rpki-client