Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.mft
File: zo6b4kjHQbpqJqyM_iwrt8LXo7E.mft (raw, json)
Hash identifier: gjoFVGFAiHVy8C/9M/WHojvblT/Hsvj7+C7Wg6PHwBs=
Subject key identifier: 11:54:01:05:D8:FA:72:C8:21:54:C8:FC:AD:09:B0:FC:DC:A9:8F:77
Authority key identifier: CE:8E:9B:E2:48:C7:41:BA:6A:26:AC:8C:FE:2C:2B:B7:C2:D7:A3:B1
Certificate issuer: /CN=ce8e9be248c741ba6a26ac8cfe2c2bb7c2d7a3b1
Certificate serial: 019E20918D8C1D694F5D3B664ED7D59C4991
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zo6b4kjHQbpqJqyM_iwrt8LXo7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.mft
Manifest number: 125B
Signing time: Wed 13 May 2026 09:01:10 +0000
Manifest this update: Wed 13 May 2026 09:01:10 +0000
Manifest next update: Thu 14 May 2026 09:01:10 +0000
Files and hashes: 1: z0HMvI8Tn4kNW4qTvegWr7zZfkQ.roa (hash: gn2Rwh38asVwA7jLccAuFqntHaZG2BuAuv36mcj+c3Q=)
2: zo6b4kjHQbpqJqyM_iwrt8LXo7E.crl (hash: KDvkwrO6leHoC4nXhFuhhS7+vvmBmLBr7JgGOYbiwy0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/zo6b4kjHQbpqJqyM_iwrt8LXo7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 09:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:91:8d:8c:1d:69:4f:5d:3b:66:4e:d7:d5:9c:49:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce8e9be248c741ba6a26ac8cfe2c2bb7c2d7a3b1
Validity
Not Before: May 13 09:01:10 2026 GMT
Not After : May 14 09:01:10 2026 GMT
Subject: CN=11540105d8fa72c82154c8fcad09b0fcdca98f77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:7f:b4:39:af:04:52:fd:a4:e5:18:2a:84:0d:
36:4d:51:61:26:af:92:2c:50:0f:9b:44:6d:00:0b:
75:5f:bc:e9:55:c7:c7:72:e4:1d:fe:a8:ae:5e:68:
c0:7a:51:39:8e:91:10:a4:e1:f8:45:20:4c:46:d7:
a3:f5:44:8a:12:68:66:90:af:e1:ae:ce:fb:47:c6:
9b:35:47:a3:0d:82:e3:c0:f2:2b:d5:9f:57:a4:92:
c4:1f:29:b6:39:73:45:ce:72:ab:08:e2:30:fc:23:
c7:80:61:9c:e2:71:b9:47:6a:36:55:00:2f:62:95:
a0:75:91:d9:75:bb:6d:b2:46:5f:e3:6a:a5:4f:c5:
c4:e1:be:c4:a7:93:76:4f:b4:35:7d:6b:56:3e:46:
94:3b:e1:fe:a2:22:30:a4:b8:43:23:38:80:7d:c1:
f4:a1:42:ec:e9:c7:71:7c:29:26:bb:14:2b:17:b1:
02:65:93:4e:2f:67:59:da:f8:2f:05:90:1a:01:c5:
b9:f2:e3:7a:5e:1c:7c:97:47:d4:c3:d3:58:2e:29:
1f:8f:e0:b4:3c:46:3c:ab:96:c7:86:4b:11:72:b8:
3b:88:bf:a1:b3:f8:37:bf:80:9a:35:66:6f:d2:c9:
b1:19:33:05:be:6d:d0:04:9a:c2:64:da:03:cb:26:
8d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:54:01:05:D8:FA:72:C8:21:54:C8:FC:AD:09:B0:FC:DC:A9:8F:77
X509v3 Authority Key Identifier:
keyid:CE:8E:9B:E2:48:C7:41:BA:6A:26:AC:8C:FE:2C:2B:B7:C2:D7:A3:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zo6b4kjHQbpqJqyM_iwrt8LXo7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:c4:6b:1d:a4:e1:01:41:97:c9:27:91:0a:09:03:c0:f8:d0:
d6:75:72:90:3a:0b:8b:93:d8:e7:9b:55:dc:83:68:82:6c:ce:
f0:f2:3b:0a:6e:eb:3f:dd:4e:d6:47:0c:40:95:92:18:dc:35:
7f:5b:aa:39:86:f8:11:d8:b0:9e:ba:fa:42:b0:b6:04:3c:69:
c4:90:f1:57:24:0f:ba:2f:39:2e:d4:6a:68:f0:f6:a6:21:c9:
03:1c:c6:8e:6d:83:4a:4b:67:67:37:36:b7:4e:56:18:f9:9a:
cc:80:7d:ba:2b:d8:c1:36:fa:d1:06:6e:a5:1b:41:91:2f:3c:
17:44:b7:1b:22:46:bc:9a:96:30:f2:6b:5b:ce:34:9d:e0:5e:
a7:bb:be:51:61:69:57:a9:95:0b:65:fc:e2:13:8d:a9:c5:47:
84:ad:79:f0:69:8f:04:08:e7:58:4c:6a:0c:d4:a0:38:e6:43:
48:47:79:6c:22:6e:22:1d:54:1d:c1:12:5e:f2:5d:b3:cb:af:
49:2e:3e:4e:5f:5c:e2:f9:7c:0e:03:91:58:6d:ff:73:bb:40:
c2:48:b8:f0:16:b1:e3:3f:ca:52:a1:bc:c7:77:d7:56:7d:13:
d4:8f:44:ce:d6:e0:ce:0e:69:06:f1:df:3b:99:f1:6b:7b:1f:
6c:be:78:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:54:11 2026 by rpki-client