Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.mft
File: zJd-nVKvvEd5nTl1_O6KxRygz2o.mft (raw, json)
Hash identifier: EXlZHcX8IHikouC09vfm60DUNYQw+pmI3pivJrT0Lus=
Subject key identifier: 1A:4B:EF:49:25:5A:4A:0A:00:12:70:6B:F9:12:EA:66:5E:42:1E:11
Authority key identifier: CC:97:7E:9D:52:AF:BC:47:79:9D:39:75:FC:EE:8A:C5:1C:A0:CF:6A
Certificate issuer: /CN=cc977e9d52afbc47799d3975fcee8ac51ca0cf6a
Certificate serial: 019E1DC7690E5B41DE8221D87E680C8E3337
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zJd-nVKvvEd5nTl1_O6KxRygz2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.mft
Manifest number: 17D9
Signing time: Tue 12 May 2026 20:01:08 +0000
Manifest this update: Tue 12 May 2026 20:01:08 +0000
Manifest next update: Wed 13 May 2026 20:01:08 +0000
Files and hashes: 1: Sq1CvQy8o0B9tgh2Xu1eMwRJZtk.roa (hash: HdfFsuae+bs6Px2O/nXidzw9nHeIbmVY360ACfcO/uA=)
2: apKWJZAqjwjRd0dehHbbTa9ZY3A.roa (hash: nVaIovGi66UncedynfpwyGBTPpXsXon+jV7FMQbYQEg=)
3: zJd-nVKvvEd5nTl1_O6KxRygz2o.crl (hash: KysIGIjTO5wBUoH1hflEBCgV8Hrs+1vvPPowv55VcP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/zJd-nVKvvEd5nTl1_O6KxRygz2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:69:0e:5b:41:de:82:21:d8:7e:68:0c:8e:33:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc977e9d52afbc47799d3975fcee8ac51ca0cf6a
Validity
Not Before: May 12 20:01:08 2026 GMT
Not After : May 13 20:01:08 2026 GMT
Subject: CN=1a4bef49255a4a0a0012706bf912ea665e421e11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9b:bf:1b:d8:9f:32:bd:bd:2e:ad:cb:66:a4:
72:86:82:4e:16:27:80:41:72:59:b5:74:e2:4e:2a:
1c:37:96:87:e9:0f:e8:f1:91:49:db:16:5a:a0:8b:
1f:3f:7c:94:07:6e:89:5d:dc:98:25:e5:0e:92:12:
60:6b:fb:f2:8b:2d:eb:ca:6f:23:c9:a8:10:3a:cb:
56:a7:77:4b:4a:ef:cc:91:bd:3e:cb:3d:89:39:80:
6d:58:fd:25:06:ba:77:9f:30:40:8a:0c:cf:41:1d:
7c:34:9b:c8:0a:32:d1:ec:da:6c:8b:e2:17:9f:7c:
7e:c8:58:d4:c0:75:63:90:66:24:b5:b7:47:39:fd:
b5:0f:4b:55:d8:1f:75:d7:95:34:3f:57:3d:01:a8:
91:b3:2e:43:1c:6c:e2:72:f7:b2:91:5a:a5:0f:3c:
7a:55:c9:44:35:d3:cc:c5:8f:e7:31:8e:59:f7:ed:
e6:fd:ee:50:db:da:94:71:42:df:86:ba:77:e5:23:
34:01:5c:b0:0f:da:96:f2:4e:7f:03:6e:41:45:a0:
69:4d:b0:7c:92:1e:a8:d7:b5:4e:ac:d8:24:b0:ea:
19:e0:07:0e:8e:0d:d2:1d:3f:1f:f1:00:c2:cf:3f:
68:b0:fc:d1:0c:af:38:17:55:4a:a6:12:e1:50:7d:
9e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:4B:EF:49:25:5A:4A:0A:00:12:70:6B:F9:12:EA:66:5E:42:1E:11
X509v3 Authority Key Identifier:
keyid:CC:97:7E:9D:52:AF:BC:47:79:9D:39:75:FC:EE:8A:C5:1C:A0:CF:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zJd-nVKvvEd5nTl1_O6KxRygz2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:58:21:9c:81:16:bc:c1:d9:ed:6e:f5:aa:4d:66:c7:55:c1:
c4:56:3c:df:13:63:f3:e6:8c:3f:ec:91:34:66:37:18:cb:4c:
62:b4:b8:f7:73:50:30:87:eb:48:2d:02:4d:f7:c8:7c:b1:0f:
1e:42:b2:61:fc:91:0a:d5:46:83:9a:7b:0c:c2:ef:e0:62:0d:
9c:ec:40:01:d6:1f:0a:44:38:05:2e:e8:13:0a:05:c3:8b:74:
29:44:7b:a0:33:83:c9:de:70:ab:92:40:99:e7:7a:34:41:fc:
61:a2:42:0c:76:f7:6d:57:f5:b7:6a:8e:91:71:8b:06:6f:db:
14:cb:e4:d4:55:a7:04:09:71:21:6d:57:ab:4d:c6:ad:d1:d3:
6b:80:b6:2c:6f:ad:57:0a:36:c4:dd:67:7f:e6:fc:1e:c1:f2:
37:dd:5a:1c:f1:44:c8:6e:5e:69:29:b4:80:b3:73:7e:b4:24:
fc:a0:22:0c:c2:43:70:0c:12:57:96:79:3a:ba:07:41:af:98:
ae:02:53:97:ad:ce:af:4e:91:a7:29:6a:8b:ba:95:cc:74:b1:
83:47:70:de:33:ee:59:82:20:cb:04:30:f5:a1:a0:63:b4:76:
de:4d:45:c9:5f:d7:e8:40:89:0c:8f:d7:4e:b1:ba:b3:ee:ad:
2d:43:40:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:17:09 2026 by rpki-client