Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.mft
File: zEDZYkKwgu_ltPIliCCzBZOWGY0.mft (raw, json)
Hash identifier: H0aqlqiJoAaVaiRYTqmhocsy2zp9yrWQj5aBVavO43g=
Subject key identifier: F3:59:CE:97:D7:09:11:E1:0F:F1:7D:4D:3A:17:D1:56:C0:75:81:5F
Authority key identifier: CC:40:D9:62:42:B0:82:EF:E5:B4:F2:25:88:20:B3:05:93:96:19:8D
Certificate issuer: /CN=cc40d96242b082efe5b4f2258820b3059396198d
Certificate serial: 019E1DFDE635E097C36CE1A7BA219A8D95D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zEDZYkKwgu_ltPIliCCzBZOWGY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.mft
Manifest number: 1907
Signing time: Tue 12 May 2026 21:00:39 +0000
Manifest this update: Tue 12 May 2026 21:00:39 +0000
Manifest next update: Wed 13 May 2026 21:00:39 +0000
Files and hashes: 1: 98fyEBb-PIBiroCj51bzkd-V_i4.roa (hash: 2RN0v3XP/euGb82/ECdLfjWteqkCXDXBbJynvO0cBWE=)
2: y97Q2cCIA4p_jfA1RbOfelZQKOo.roa (hash: oRmoVnYM94QBjpHDaFRFV+BA4jZYdHdlmrs4oEppUqA=)
3: zEDZYkKwgu_ltPIliCCzBZOWGY0.crl (hash: hDNIh/UAIfnwbQm9h7JBYmF/yb+NnqxdSFck+p8n33Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/zEDZYkKwgu_ltPIliCCzBZOWGY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fd:e6:35:e0:97:c3:6c:e1:a7:ba:21:9a:8d:95:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc40d96242b082efe5b4f2258820b3059396198d
Validity
Not Before: May 12 21:00:39 2026 GMT
Not After : May 13 21:00:39 2026 GMT
Subject: CN=f359ce97d70911e10ff17d4d3a17d156c075815f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:32:3c:37:1d:d7:7f:fe:71:80:64:6a:3a:8c:
da:de:e9:88:0f:09:d5:b0:cc:ad:b2:98:66:72:42:
4a:93:76:4d:df:70:99:7f:c1:02:5a:c4:63:5f:c1:
7b:50:61:03:78:88:c8:45:d5:96:9b:75:54:b7:b4:
c1:9b:cf:eb:66:48:7e:5d:4c:4d:c2:a2:90:d8:47:
46:59:a0:3e:a2:0b:5f:e4:1b:c3:86:ea:0a:e4:4f:
82:fa:00:9a:c8:64:b3:48:be:c9:25:52:6f:db:7b:
68:9e:1e:0a:9e:76:c4:4b:19:33:97:cb:72:aa:a7:
32:44:f6:38:7c:86:3d:2d:08:09:b9:4b:db:c5:c5:
99:2e:1e:3b:70:50:10:66:de:a7:88:fd:d6:62:67:
ee:eb:95:f3:20:de:87:7b:cd:03:38:64:87:2f:bf:
3f:d2:ed:44:2f:bd:47:e0:3a:09:ad:65:e6:6d:48:
eb:2b:1a:86:26:f9:61:2d:da:99:77:75:b9:1a:a2:
44:2e:5c:70:de:48:ae:4e:09:08:e9:83:8d:19:53:
5d:c3:60:67:d5:20:84:24:ba:9a:e3:18:1b:ff:d3:
8a:af:f1:60:11:47:70:f1:4d:3b:fe:c8:ad:12:55:
40:26:c2:d8:fc:b7:79:83:a8:57:72:e1:16:00:6c:
2b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:59:CE:97:D7:09:11:E1:0F:F1:7D:4D:3A:17:D1:56:C0:75:81:5F
X509v3 Authority Key Identifier:
keyid:CC:40:D9:62:42:B0:82:EF:E5:B4:F2:25:88:20:B3:05:93:96:19:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEDZYkKwgu_ltPIliCCzBZOWGY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:e8:3e:90:f1:bb:b7:14:5b:67:5c:6d:35:45:26:25:98:06:
eb:95:87:b4:fd:7e:48:4a:72:a6:49:37:16:14:88:58:02:c8:
09:67:9e:ed:95:0b:34:68:9c:6b:89:eb:80:cc:56:f5:7e:93:
01:39:fd:57:bf:98:28:47:4b:0b:a1:e4:21:c1:6b:67:ec:ef:
15:f6:58:b0:82:84:4a:d6:72:e1:02:66:76:fb:87:f6:05:a4:
df:95:ac:8d:2b:88:af:45:a0:14:c1:c1:d6:35:d1:b8:3b:e3:
d9:ad:e9:74:4b:dc:fe:34:d8:1c:de:c8:7a:28:0c:b5:89:85:
84:ef:31:dd:a7:82:75:7a:93:85:8e:c9:91:b8:35:7d:c5:20:
1e:10:cc:b4:0d:88:9e:ee:f2:d6:aa:75:c1:08:41:40:d4:47:
52:75:68:c1:db:f3:5f:86:90:0c:16:8d:76:f9:fd:b7:a6:3a:
01:d5:5c:f6:ca:43:85:53:af:90:48:0f:37:96:d0:91:75:7c:
64:5a:d6:11:51:7a:b3:5f:ea:01:43:cf:d0:6e:ef:ff:42:ec:
ba:2c:f4:40:70:cb:1a:53:34:54:07:9d:0b:44:49:d6:ba:21:
5e:f7:73:7c:4e:c1:c9:66:8a:6b:8e:4c:47:16:88:6c:5a:2c:
b9:c7:57:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:03:26 2026 by rpki-client