Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.mft
File: zPJHTehBFnUrkICnoNsyJTXFYCY.mft (raw, json)
Hash identifier: iBBY6PU2lxHnLlxDHJSCB2irYH3JnWgy00VMzSX9Uo8=
Subject key identifier: 0B:2E:0A:26:9F:1E:53:C5:C5:8A:02:07:3E:8A:FC:E3:6D:E5:7C:D6
Authority key identifier: CC:F2:47:4D:E8:41:16:75:2B:90:80:A7:A0:DB:32:25:35:C5:60:26
Certificate issuer: /CN=ccf2474de84116752b9080a7a0db322535c56026
Certificate serial: 019E1EA3108FF8A4D83A6926F854B7DA0AB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zPJHTehBFnUrkICnoNsyJTXFYCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.mft
Manifest number: 1325
Signing time: Wed 13 May 2026 00:01:03 +0000
Manifest this update: Wed 13 May 2026 00:01:03 +0000
Manifest next update: Thu 14 May 2026 00:01:03 +0000
Files and hashes: 1: DmCEvnPa2cR0m4Wq8MgYYGsM2fc.roa (hash: FlCMboWRwBxntExiPGM7Dlg1+J7ywCWO67fbQBOqoGo=)
2: zPJHTehBFnUrkICnoNsyJTXFYCY.crl (hash: IrsHnMTN1cD/8Q7NnnofVKOvc3MlUc0fOzq7RTucGlw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zPJHTehBFnUrkICnoNsyJTXFYCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:10:8f:f8:a4:d8:3a:69:26:f8:54:b7:da:0a:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccf2474de84116752b9080a7a0db322535c56026
Validity
Not Before: May 13 00:01:03 2026 GMT
Not After : May 14 00:01:03 2026 GMT
Subject: CN=0b2e0a269f1e53c5c58a02073e8afce36de57cd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b5:f8:e3:57:dd:d8:1d:0a:87:70:f3:ad:2c:
bf:8a:71:3e:4c:fa:bc:cd:c7:bf:e1:4c:2d:c8:1d:
94:d3:1d:df:cc:30:58:d4:8d:a5:9d:a1:98:aa:e5:
58:e2:9a:de:80:27:9d:41:cc:5a:43:17:99:0d:e2:
ec:b9:99:6e:7a:18:a3:d9:80:ed:5e:38:e6:25:4d:
8c:98:0e:21:9e:6c:76:a4:18:5d:98:63:85:10:a9:
0a:74:dd:73:63:b9:e9:80:59:b4:e8:a2:9e:1a:97:
bf:62:53:a2:23:b8:52:5f:d6:a6:51:12:76:05:e8:
8b:e0:f2:89:f1:ed:ef:7e:da:a6:a3:5b:e8:9b:79:
fd:b4:bc:76:2a:a8:1e:e2:31:02:a8:f4:f7:83:8f:
3e:c3:13:68:7c:6d:95:df:cd:e6:7f:5c:ff:96:cc:
6c:c1:61:a9:ec:17:e7:b0:a7:b4:3b:e1:cc:5a:e9:
23:f1:b3:10:f7:a5:aa:5e:6b:43:75:2b:06:66:3f:
c2:f3:f9:e2:84:d8:e6:c1:39:73:03:a0:2d:7a:c3:
e6:e7:0e:6d:63:9e:d6:ae:93:86:74:7d:3b:5a:af:
c3:47:74:10:90:62:6c:59:7f:51:7b:15:ec:d2:21:
61:04:b9:9d:98:6d:d5:91:2c:7b:ac:ff:97:b8:ca:
63:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:2E:0A:26:9F:1E:53:C5:C5:8A:02:07:3E:8A:FC:E3:6D:E5:7C:D6
X509v3 Authority Key Identifier:
keyid:CC:F2:47:4D:E8:41:16:75:2B:90:80:A7:A0:DB:32:25:35:C5:60:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPJHTehBFnUrkICnoNsyJTXFYCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:76:d9:aa:9c:7c:60:70:a1:5a:61:88:ce:76:5c:60:8c:26:
81:66:ad:5b:c4:53:d2:e7:bd:c3:a3:78:5e:e5:99:18:7b:95:
fe:04:5f:21:f9:16:9d:72:0f:51:cd:2b:d0:c0:69:36:4f:86:
9f:fa:78:70:d9:f0:e7:ef:57:94:4a:fb:1c:a6:30:3c:a6:4a:
cc:05:43:fd:c5:78:78:c1:ed:f6:ec:ef:f5:53:20:cb:ba:22:
08:50:63:77:84:29:83:dd:0e:28:a1:e5:c8:f7:7d:38:f1:6b:
6d:47:ff:d8:e5:4f:4f:e1:dc:2a:d2:cf:5f:ed:32:35:a6:2e:
f5:fa:db:75:4c:02:b0:70:d9:0d:f4:cd:0f:10:f0:11:20:8f:
1d:b3:7d:67:7c:39:6d:19:e0:89:a0:b4:b2:4f:1e:2e:1e:06:
e3:81:d0:3f:5a:a0:52:ab:d8:06:b4:f2:e4:33:ea:4b:c8:c4:
3e:a6:c9:93:17:32:fd:8f:65:cb:8a:00:5b:5a:e4:cd:87:bb:
ff:04:40:3f:77:7d:2c:e3:30:f1:4b:2b:ea:b6:00:12:66:1c:
73:69:5e:3f:5d:25:a5:95:da:6d:80:8e:a2:90:d1:63:ab:20:
8c:f5:31:24:d1:36:68:87:6f:37:ac:75:f1:c9:74:c7:7f:6b:
d5:40:dd:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:46:56 2026 by rpki-client