Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.mft
File: p_ZlIvQD2MmUpIRoKHB5lBfOHoE.mft (raw, json)
Hash identifier: SsXDPFJ/iVkpBzqsN76HsfOi5doYkMr+esihAtQ2dUE=
Subject key identifier: DE:9E:CF:A6:BF:09:A9:50:69:9E:43:CA:98:36:7F:A1:A7:8F:01:10
Authority key identifier: A7:F6:65:22:F4:03:D8:C9:94:A4:84:68:28:70:79:94:17:CE:1E:81
Certificate issuer: /CN=a7f66522f403d8c994a484682870799417ce1e81
Certificate serial: 019E20C8CFE237218F70D8156CA2A2401A45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.mft
Manifest number: 148B
Signing time: Wed 13 May 2026 10:01:31 +0000
Manifest this update: Wed 13 May 2026 10:01:31 +0000
Manifest next update: Thu 14 May 2026 10:01:31 +0000
Files and hashes: 1: Kh2cfJTXoBgXnb5cU5bkPsfJ3G8.roa (hash: OIPaE117G5MhGem++zxKuvBio3gr+RNCi90er+bU030=)
2: p_ZlIvQD2MmUpIRoKHB5lBfOHoE.crl (hash: 5hgNM13LaA2qW8vcRT3gwlgScGq+VfqlPby6G1Ubk8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 10:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:c8:cf:e2:37:21:8f:70:d8:15:6c:a2:a2:40:1a:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7f66522f403d8c994a484682870799417ce1e81
Validity
Not Before: May 13 10:01:31 2026 GMT
Not After : May 14 10:01:31 2026 GMT
Subject: CN=de9ecfa6bf09a950699e43ca98367fa1a78f0110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a0:07:f7:98:c2:10:26:c6:46:74:02:15:83:
0c:7c:7f:be:46:58:b2:d3:e1:eb:99:a7:c4:cd:ae:
75:11:d6:60:94:b2:2b:89:15:31:c8:b0:6c:96:b1:
5e:d9:7a:58:33:32:47:a9:f1:38:86:23:08:8d:ec:
c1:89:15:d6:ff:42:20:c6:d8:ea:27:68:4d:1b:50:
84:ea:30:09:95:74:a3:1c:a5:40:74:9c:1f:67:61:
44:59:3c:b8:47:03:d1:42:b1:00:b2:04:2b:a4:c3:
43:6c:80:ac:d5:62:c4:dd:7e:5b:e0:44:4e:94:1c:
2b:64:35:90:18:ea:fe:57:de:d6:91:6e:e6:e1:d1:
c5:e8:a3:0a:6d:d2:8e:4c:fa:bd:e4:27:f3:98:53:
eb:fd:c4:39:2a:6c:1d:46:11:dc:f4:a3:83:d0:bd:
9c:e5:36:37:33:be:8e:a4:13:db:b9:7d:b9:ef:0c:
04:90:33:77:21:3e:42:96:bc:59:bc:75:63:ea:0b:
47:0a:cc:35:cf:bf:84:1b:d4:f3:84:c0:3e:08:e2:
80:65:39:b2:05:d2:1c:59:f9:1d:be:d6:57:b1:6b:
d2:43:48:c0:33:51:41:4f:2e:59:d9:50:54:7d:90:
d7:6b:35:8c:92:df:ef:31:7a:57:c3:6d:e4:ee:c1:
b9:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:9E:CF:A6:BF:09:A9:50:69:9E:43:CA:98:36:7F:A1:A7:8F:01:10
X509v3 Authority Key Identifier:
keyid:A7:F6:65:22:F4:03:D8:C9:94:A4:84:68:28:70:79:94:17:CE:1E:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:4b:0d:1f:f8:c8:8d:b3:ae:45:84:c6:1b:38:d0:be:64:a7:
8c:e9:01:63:e6:ea:64:11:86:27:ce:a3:33:d4:04:fe:bb:2f:
c8:c2:54:99:ce:2b:11:62:09:32:87:f4:2e:41:ca:1f:c0:c4:
bb:6e:bb:b6:02:b9:fd:b9:6e:e0:3d:8b:6a:7b:02:f0:00:c2:
3c:0e:04:94:a3:3b:7b:7b:f5:7f:d9:99:d9:ac:bb:52:b7:bc:
41:07:f2:fb:90:45:3d:c2:45:fd:af:47:7b:df:89:6d:39:58:
4c:a5:e2:fd:3a:af:cb:0d:04:88:32:16:4c:80:52:ed:92:bd:
ae:b9:28:03:f1:59:5e:f6:83:66:15:28:0e:a2:ab:e6:30:ac:
14:6d:3f:51:15:be:65:b7:cb:24:bf:37:f5:fe:04:86:d5:24:
d1:43:be:5d:ff:4f:7c:da:53:08:cb:ea:d8:9d:2e:a2:b2:43:
66:16:ab:2d:2f:59:f1:74:27:d6:af:68:4a:0d:fa:6e:c1:36:
75:c8:3f:63:b8:ce:d0:bb:3b:07:76:2f:64:e0:ac:d6:46:fd:
02:41:3e:80:de:c1:6c:a5:97:32:dc:20:0b:d6:ac:96:d2:20:
46:d6:5a:5d:8c:b1:e8:29:c6:b2:90:59:cd:7d:dc:97:89:77:
83:1d:fe:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:37:56 2026 by rpki-client