Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.mft
File: zDnmvkDYASiJbM0TH2WlWtmKQK8.mft (raw, json)
Hash identifier: iQvfu8r/xUcqFxeiLYTXNHarNjR97+k3sy2mdP7bIes=
Subject key identifier: 06:25:E2:91:D9:10:C7:E8:D8:CD:4E:D2:D6:43:A9:57:4F:2F:AC:CA
Authority key identifier: CC:39:E6:BE:40:D8:01:28:89:6C:CD:13:1F:65:A5:5A:D9:8A:40:AF
Certificate issuer: /CN=cc39e6be40d80128896ccd131f65a55ad98a40af
Certificate serial: 019E1DFE4851F6969530E4BBB0BCB84A5484
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zDnmvkDYASiJbM0TH2WlWtmKQK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.mft
Manifest number: 1907
Signing time: Tue 12 May 2026 21:01:04 +0000
Manifest this update: Tue 12 May 2026 21:01:04 +0000
Manifest next update: Wed 13 May 2026 21:01:04 +0000
Files and hashes: 1: h8MAjW2nwR1TuDpY3gaR4GIp5Is.roa (hash: YMOvJ9hakU4xTrKD5f+aHfr6VChVy5zYjPbZPORV+p4=)
2: hq6cHZZmfTc8iDuXctwL9j8vYGA.roa (hash: gnwIM65nm0H3pqLfxC4cpwXQNNz6WAkiHxWYF953SRw=)
3: zDnmvkDYASiJbM0TH2WlWtmKQK8.crl (hash: 5cScvRc9Lw6RKiO/p9j/MD57KAGCTKhUAYfuwbUvyIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zDnmvkDYASiJbM0TH2WlWtmKQK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:48:51:f6:96:95:30:e4:bb:b0:bc:b8:4a:54:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc39e6be40d80128896ccd131f65a55ad98a40af
Validity
Not Before: May 12 21:01:04 2026 GMT
Not After : May 13 21:01:04 2026 GMT
Subject: CN=0625e291d910c7e8d8cd4ed2d643a9574f2facca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:95:8f:3f:fb:ee:32:62:79:12:ec:7d:06:3e:
a2:68:54:23:74:da:70:35:1c:1c:7e:43:6c:9f:8a:
09:e1:df:c9:96:87:90:8d:3e:4b:cb:89:9f:b9:cd:
6f:73:5e:11:1d:c4:9b:83:0f:88:e3:03:39:ac:23:
84:e1:66:c7:a9:2c:99:cd:b4:ca:75:ea:c7:4f:af:
4f:4b:39:86:d3:13:89:8d:22:74:82:cf:f8:db:be:
44:46:63:56:09:30:62:3f:70:aa:51:5c:b5:af:1c:
97:11:46:9d:dc:0f:ea:8d:ec:be:dd:cc:9a:6b:76:
06:8c:04:1a:ba:47:34:13:96:f0:b1:8b:87:8c:ab:
a5:71:b6:ab:b5:c9:2f:d7:ae:c3:36:c1:d2:76:8f:
71:a5:b8:17:09:02:cc:3f:c1:a4:ab:f8:c6:92:43:
cc:a8:c9:a4:86:37:0a:af:97:39:7c:e6:33:0d:de:
36:49:f6:07:0d:3f:33:28:ac:4f:30:57:f4:74:3d:
3d:cd:9e:a4:6a:d3:e6:a7:4b:a5:43:03:d4:f9:22:
21:f3:64:0f:c7:89:ff:b5:a5:07:1e:4e:ae:5c:a5:
17:fc:60:cd:24:a5:b3:0b:00:dc:55:a7:5a:97:f8:
f4:a6:1a:f1:85:ee:7b:f3:44:9d:09:f9:aa:84:75:
aa:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:25:E2:91:D9:10:C7:E8:D8:CD:4E:D2:D6:43:A9:57:4F:2F:AC:CA
X509v3 Authority Key Identifier:
keyid:CC:39:E6:BE:40:D8:01:28:89:6C:CD:13:1F:65:A5:5A:D9:8A:40:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zDnmvkDYASiJbM0TH2WlWtmKQK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:61:a6:8b:23:31:9a:61:fe:a4:41:33:b6:32:73:06:91:a4:
5d:51:85:52:3f:e9:63:f7:8a:04:24:36:52:f9:46:b4:27:2f:
f5:a6:c1:35:e8:df:0a:83:8d:cd:12:d5:08:66:74:60:8f:10:
ee:13:80:c7:6a:65:83:c2:eb:75:cb:ec:18:d0:d5:b2:9b:4b:
20:c0:97:14:cf:58:61:7a:32:e9:52:4c:4f:eb:f4:de:d6:ce:
d8:09:ff:91:49:ce:2a:b7:68:9d:d8:4b:b7:5c:19:d4:f1:2c:
b9:71:c2:54:e7:84:89:fb:45:31:d2:d0:f9:eb:9b:60:fe:fd:
bc:95:03:8e:68:8e:d1:d6:b8:29:c5:fb:6a:f5:64:90:c9:20:
5f:38:38:c4:01:f2:f7:71:b0:a4:b6:85:19:45:74:18:ad:03:
77:3a:60:4e:76:bb:27:4a:2c:2f:6d:77:a7:6c:c8:e6:2e:80:
52:99:16:ea:ea:71:af:89:1c:1b:46:5c:fc:19:e2:6d:b8:a1:
dd:b8:8b:35:b2:db:10:2b:5d:20:c2:67:48:f2:53:75:1b:9c:
4a:a2:16:83:22:20:54:25:08:80:c3:49:27:19:87:8c:7c:1b:
e0:63:9c:96:e4:94:bf:fd:0e:1e:62:65:3e:4a:ce:f2:81:bd:
8b:b2:40:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:02:12 2026 by rpki-client