Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.mft
File: ZcKTOAvEH1LZExWFqFgAOPkvXcw.mft (raw, json)
Hash identifier: Eh8/ekiYoew8kwN0iT0ar2d9oJ1Vv3aoZw2M0HXr8t8=
Subject key identifier: 99:D3:41:AC:C5:C9:07:C9:72:31:72:4F:F0:B1:83:90:7D:D8:5F:4F
Authority key identifier: 65:C2:93:38:0B:C4:1F:52:D9:13:15:85:A8:58:00:38:F9:2F:5D:CC
Certificate issuer: /CN=65c293380bc41f52d9131585a8580038f92f5dcc
Certificate serial: 019E1C4757488DA7215EC2254F39E19DAAE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZcKTOAvEH1LZExWFqFgAOPkvXcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.mft
Manifest number: 1907
Signing time: Tue 12 May 2026 13:01:37 +0000
Manifest this update: Tue 12 May 2026 13:01:37 +0000
Manifest next update: Wed 13 May 2026 13:01:37 +0000
Files and hashes: 1: ZcKTOAvEH1LZExWFqFgAOPkvXcw.crl (hash: JX2FBGfmVGicOYzjbp235NN7W4KERMAecz+Hr2wBk6A=)
2: tLzYTCMgcEaSpA6pqJ49xM0mJhg.roa (hash: v1AukhZWCgWLe1okLFBBNkZmMt/d4/1gGQHfd9186v8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZcKTOAvEH1LZExWFqFgAOPkvXcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:47:57:48:8d:a7:21:5e:c2:25:4f:39:e1:9d:aa:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65c293380bc41f52d9131585a8580038f92f5dcc
Validity
Not Before: May 12 13:01:37 2026 GMT
Not After : May 13 13:01:37 2026 GMT
Subject: CN=99d341acc5c907c97231724ff0b183907dd85f4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:25:71:0e:e3:17:31:76:85:6e:cc:bd:5f:8a:
d9:a4:64:07:be:60:ba:e3:8d:2b:dd:cf:d5:82:ff:
7d:b2:17:0a:7f:e9:ff:43:f6:34:b6:f0:04:15:bb:
b5:f6:ed:21:09:db:75:73:3b:c1:7e:30:0b:a0:2b:
d8:0a:18:2d:5f:de:da:6f:df:20:f6:de:e8:c5:21:
ce:b6:c3:4a:4f:31:eb:0f:87:01:d2:bc:a7:ac:39:
e5:5c:4d:f8:b3:08:b4:32:3d:c8:a1:c3:7a:de:42:
5a:cf:8b:e1:94:af:3d:5b:f4:7b:78:59:92:42:10:
a8:2b:c3:de:39:e3:33:36:87:7e:e7:18:5c:19:1e:
46:58:c6:6f:da:23:1e:7e:c6:fa:09:c4:99:51:2f:
40:34:2e:39:03:3e:2f:53:50:d3:6f:5b:57:95:66:
d0:f7:74:02:b4:ad:c6:d4:84:00:f0:96:e5:ce:b8:
3b:39:70:92:db:48:33:9f:46:a3:bc:7e:48:46:26:
da:97:9f:13:b3:78:58:49:fd:90:b4:ce:13:c6:02:
b6:8f:b2:77:15:4a:66:58:ce:1a:9e:f6:5d:b3:6d:
42:09:e3:db:02:79:95:85:80:a2:d6:92:3e:fb:78:
03:35:2d:d4:5a:d6:e9:33:2a:bd:55:59:14:2e:a4:
48:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:D3:41:AC:C5:C9:07:C9:72:31:72:4F:F0:B1:83:90:7D:D8:5F:4F
X509v3 Authority Key Identifier:
keyid:65:C2:93:38:0B:C4:1F:52:D9:13:15:85:A8:58:00:38:F9:2F:5D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZcKTOAvEH1LZExWFqFgAOPkvXcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:47:42:71:f5:5d:ae:f9:1c:17:64:6e:56:04:38:f5:61:b2:
f9:3a:dd:31:b9:cb:69:44:5a:2b:63:f8:e6:e9:d7:1f:13:43:
68:b1:ae:c3:54:27:a1:d3:3a:ca:33:c3:16:18:d4:68:b3:80:
ef:d8:0d:36:60:fa:18:ec:ae:93:32:35:1c:52:b6:d6:83:1d:
26:bf:b7:76:e6:93:fe:63:f5:a1:bc:af:65:05:61:f4:4d:ed:
51:d5:1f:1c:d2:66:09:7c:fb:2f:de:d2:8b:ff:88:8b:5c:4e:
52:6f:a5:1b:e2:37:49:ad:5d:2e:9a:41:0d:af:f3:c1:4a:47:
cb:eb:1a:ab:67:06:65:e1:20:be:ee:f7:a3:1b:a6:88:28:32:
40:b4:a2:67:66:78:a3:4a:a0:7f:af:de:8c:66:e2:e9:62:fd:
e3:89:31:f8:52:c5:14:1e:1a:cf:f7:06:0d:68:71:ac:1f:b2:
36:44:e6:9d:10:04:7e:e5:e6:9a:5d:7a:44:b0:10:d7:bc:86:
8d:3a:f4:13:9b:42:63:f5:ca:e7:74:b1:0e:f8:f4:dd:d4:6e:
7c:98:f8:80:b4:34:b2:c6:a9:04:f7:b8:80:a2:b5:2f:98:d3:
1c:67:1c:27:03:c7:0d:8b:ce:ca:5e:5a:0b:e6:33:1a:93:ce:
ee:77:59:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:49:07 2026 by rpki-client