Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.mft
File: zm4aIgj6PxufPTj_8fjiw02RHzY.mft (raw, json)
Hash identifier: s6P/Oa6OyCj2PTT7PwQO7IpFEhpyFnj6n1jLz/HM7nc=
Subject key identifier: 12:A7:48:FD:14:0C:C9:4B:B6:CB:AE:A7:20:C5:9B:1C:FF:DA:76:4D
Authority key identifier: CE:6E:1A:22:08:FA:3F:1B:9F:3D:38:FF:F1:F8:E2:C3:4D:91:1F:36
Certificate issuer: /CN=ce6e1a2208fa3f1b9f3d38fff1f8e2c34d911f36
Certificate serial: 019E1EA2AAF8D70506F5676E727F6E691143
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zm4aIgj6PxufPTj_8fjiw02RHzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.mft
Manifest number: 1203
Signing time: Wed 13 May 2026 00:00:37 +0000
Manifest this update: Wed 13 May 2026 00:00:37 +0000
Manifest next update: Thu 14 May 2026 00:00:37 +0000
Files and hashes: 1: gvoNw609bD_6W2IwVPcUpI-Guaw.roa (hash: ye+ihzO9nCFXOpOHQxxGEqHh0UKlaKr0ZU9zZSsc480=)
2: zm4aIgj6PxufPTj_8fjiw02RHzY.crl (hash: ZWFRdCbLKnic3gQrCAc0lSCqAcaDfx/bB7ws2x6YDY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zm4aIgj6PxufPTj_8fjiw02RHzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a2:aa:f8:d7:05:06:f5:67:6e:72:7f:6e:69:11:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce6e1a2208fa3f1b9f3d38fff1f8e2c34d911f36
Validity
Not Before: May 13 00:00:37 2026 GMT
Not After : May 14 00:00:37 2026 GMT
Subject: CN=12a748fd140cc94bb6cbaea720c59b1cffda764d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1e:86:ce:07:30:24:a0:db:56:fa:6f:62:f8:
76:80:4f:62:13:fb:41:a7:21:bd:ca:36:06:06:28:
17:98:84:84:20:80:bc:c3:77:93:f7:c5:58:71:dd:
11:77:a2:29:68:0e:1a:b2:d0:b3:6e:6b:53:54:74:
e0:40:c4:ab:9f:78:2e:2a:20:fe:f8:30:46:9d:0e:
90:a6:c3:23:8e:87:c2:a7:40:95:f7:5d:f7:4c:d0:
e1:31:38:2e:2a:5b:b0:2c:5f:ba:05:7e:47:a1:58:
6d:48:87:1c:da:54:ca:25:4d:20:1e:4c:2f:52:2a:
85:d8:04:8d:74:cb:23:ab:88:22:86:a5:e7:4a:c8:
b6:dd:a2:50:f8:64:67:be:28:5e:c2:c2:be:dc:3e:
4f:e4:d5:25:0d:73:d7:bb:65:34:43:a7:5e:da:00:
c0:ed:ea:c6:72:e5:2d:f3:bc:ab:d9:95:0f:d3:53:
e6:1f:da:b7:63:b3:db:2f:ed:28:93:72:3b:84:e6:
12:06:f7:fc:ef:8c:ed:7c:c7:e9:14:a4:d4:cd:9c:
77:aa:b1:7e:01:8e:9e:21:b4:c9:20:bf:29:34:40:
1e:32:7c:d8:11:e9:9e:a9:68:5f:1a:aa:60:cc:6b:
9f:75:c0:f6:0c:3d:2a:08:09:6a:55:95:df:cf:7f:
8f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:A7:48:FD:14:0C:C9:4B:B6:CB:AE:A7:20:C5:9B:1C:FF:DA:76:4D
X509v3 Authority Key Identifier:
keyid:CE:6E:1A:22:08:FA:3F:1B:9F:3D:38:FF:F1:F8:E2:C3:4D:91:1F:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zm4aIgj6PxufPTj_8fjiw02RHzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:61:64:23:26:76:94:a9:46:17:9c:93:a8:0c:5a:ea:7c:5a:
1a:b0:8a:f5:b1:97:98:a4:94:00:18:2a:2a:09:e3:ab:f6:09:
1f:99:d3:5f:43:92:9b:7e:31:76:50:83:09:56:c9:c1:47:50:
9b:e1:9d:79:9f:ce:55:84:8a:0f:0a:78:43:7e:1b:8a:52:f1:
7f:6d:88:ae:88:10:f0:14:f9:46:c0:43:67:28:8b:31:6b:f5:
0b:09:e7:d1:7d:f4:0b:9c:d9:6f:e1:22:bd:33:67:1a:36:04:
9b:c8:40:05:14:54:71:d7:46:7d:62:88:0e:e7:2c:c1:a3:98:
7d:c7:78:3d:13:63:0d:43:76:a3:2d:39:fa:5a:15:98:39:19:
06:fc:5a:46:e8:5e:a8:d3:82:bc:fe:ee:2d:6a:d8:3f:44:56:
22:d7:cd:c0:f2:5c:3d:bd:6a:49:75:55:4b:cd:e7:cf:56:cf:
1c:c6:0c:2c:2b:91:78:5b:42:d5:90:bc:b4:38:ca:fc:31:2b:
27:f3:9d:5d:13:15:85:a8:0e:21:02:70:58:e0:e6:cf:e9:26:
3e:01:1b:71:7d:3b:99:79:b7:d9:04:e3:90:74:42:fb:33:1b:
bc:38:76:81:60:bb:31:c5:ea:71:7a:5a:ad:8e:6d:58:93:ed:
66:42:4a:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:19:19 2026 by rpki-client