Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.mft
File: Zu8xraxmOFWz3dGTHETPgGTWpus.mft (raw, json)
Hash identifier: mNgDDGKKCtMvfljhqlWgz9tYgBg9vTeH1ffJkcf8qcM=
Subject key identifier: 8A:DC:9F:54:1E:38:27:73:51:BE:EF:AD:E4:75:AB:36:EA:09:47:C5
Authority key identifier: 66:EF:31:AD:AC:66:38:55:B3:DD:D1:93:1C:44:CF:80:64:D6:A6:EB
Certificate issuer: /CN=66ef31adac663855b3ddd1931c44cf8064d6a6eb
Certificate serial: 019E1DFE122667E8F3D6E1F138B25C60322A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zu8xraxmOFWz3dGTHETPgGTWpus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.mft
Manifest number: 1906
Signing time: Tue 12 May 2026 21:00:50 +0000
Manifest this update: Tue 12 May 2026 21:00:50 +0000
Manifest next update: Wed 13 May 2026 21:00:50 +0000
Files and hashes: 1: Y9ARVG_hAm4nIrCTT5R9mNE2Ai8.roa (hash: MI2P4v9i+kU4F9eDStIUnkN/VYUaWV71u0evfwMIhOU=)
2: Zu8xraxmOFWz3dGTHETPgGTWpus.crl (hash: 8jrRSykDXYBDwdUvdEae1KKaO77F65pQ/JdYelSAkQ4=)
3: fzcY56XdnFZoFNt0HXida4aSHGU.roa (hash: MqoKni1V8waFiRzOClIF15P78qFKBD2MS62bZfGpfEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zu8xraxmOFWz3dGTHETPgGTWpus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:12:26:67:e8:f3:d6:e1:f1:38:b2:5c:60:32:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66ef31adac663855b3ddd1931c44cf8064d6a6eb
Validity
Not Before: May 12 21:00:50 2026 GMT
Not After : May 13 21:00:50 2026 GMT
Subject: CN=8adc9f541e38277351beefade475ab36ea0947c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:9b:07:de:ad:c5:35:ea:75:26:f4:ac:64:57:
65:59:0d:1e:a8:36:62:04:f2:3b:82:8b:c3:6b:62:
59:ba:9a:69:82:f4:d3:4c:44:d8:23:39:09:41:a4:
3c:e2:d0:22:08:53:e2:ad:30:29:98:5e:7f:cc:e1:
69:f2:bb:1a:6f:66:38:b3:c9:a3:91:cd:13:c0:a5:
f1:62:77:4d:0d:b8:01:28:88:c5:f5:9e:6f:7f:59:
c7:a1:66:7e:21:a6:a8:34:08:90:49:d8:a0:e7:39:
9f:f4:c5:1b:3e:5d:5d:5a:b2:ba:ee:38:d3:0b:55:
48:99:6f:11:19:57:55:e5:de:0f:e2:f6:03:6b:7f:
ee:10:41:c4:bd:26:a7:3d:26:7f:98:3b:e6:10:ff:
40:26:68:74:9b:64:73:c8:09:a1:3e:cc:4f:ba:2f:
00:ad:62:e5:38:55:f8:aa:75:16:1f:9b:96:90:a1:
19:12:93:4a:a1:e6:44:42:f1:22:f0:a4:fd:dd:0e:
ef:99:38:29:7e:46:bd:a1:c2:88:6d:e4:a0:cf:df:
20:e3:c5:78:a3:ed:32:4f:5d:6b:46:d9:81:7d:ad:
67:c8:cb:9c:62:24:5c:3a:8c:96:70:78:b0:61:bd:
90:8d:a6:47:16:45:82:73:6c:75:df:18:95:fc:83:
e9:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:DC:9F:54:1E:38:27:73:51:BE:EF:AD:E4:75:AB:36:EA:09:47:C5
X509v3 Authority Key Identifier:
keyid:66:EF:31:AD:AC:66:38:55:B3:DD:D1:93:1C:44:CF:80:64:D6:A6:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zu8xraxmOFWz3dGTHETPgGTWpus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:c7:cd:42:32:8c:88:60:8b:62:fc:49:bd:c1:02:ac:84:c3:
c0:d2:e0:ca:8c:26:16:e6:07:34:db:33:0a:87:f4:3a:c1:b3:
96:57:01:00:80:fc:87:ee:12:c7:a4:36:3c:df:3b:b9:ba:77:
9e:21:85:bd:18:3f:26:55:7e:e2:52:c3:a3:d7:0b:1a:ed:93:
48:10:cf:de:15:75:c8:0e:3f:b9:a3:41:28:f3:02:8f:d9:89:
91:f3:9f:fc:31:fc:d7:ed:61:35:e1:07:8b:fe:17:4b:eb:62:
82:d1:7b:bb:a6:64:d9:c0:75:3b:fd:5e:59:a4:0c:5c:7b:af:
19:b5:01:a1:80:7b:d9:d0:aa:14:c9:01:96:56:76:68:a9:41:
75:8c:4b:21:01:cc:9f:e7:31:04:d8:90:27:d1:71:25:00:08:
48:98:d9:d4:5a:68:1f:4c:aa:14:38:b2:15:84:cc:c3:2a:c8:
24:3a:6a:48:b2:64:58:a7:f2:25:5f:a7:5b:16:e2:29:ff:a1:
5a:52:11:c7:cc:cd:b0:41:2a:cb:ad:2d:93:cb:1f:2c:f7:36:
8a:c0:06:89:78:f4:96:ec:19:bf:a0:35:4b:40:5b:d1:65:82:
56:a5:64:e3:75:d1:a3:63:13:da:43:02:df:57:a5:41:04:2e:
e7:c3:36:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:17:38 2026 by rpki-client