Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.mft
File: zHrEehn2b0GDl-6l_vFaB_8sACM.mft (raw, json)
Hash identifier: FThutdfng28ITqKf1U84Ht2yZfdV+qZShvNDn9ELw+k=
Subject key identifier: FE:B5:D7:4B:5D:BD:12:1C:8E:67:95:60:6E:11:83:7E:3D:83:DE:B4
Authority key identifier: CC:7A:C4:7A:19:F6:6F:41:83:97:EE:A5:FE:F1:5A:07:FF:2C:00:23
Certificate issuer: /CN=cc7ac47a19f66f418397eea5fef15a07ff2c0023
Certificate serial: 019E1E6C55C147729A364434A8E1D7EA9F1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zHrEehn2b0GDl-6l_vFaB_8sACM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.mft
Manifest number: 1908
Signing time: Tue 12 May 2026 23:01:16 +0000
Manifest this update: Tue 12 May 2026 23:01:16 +0000
Manifest next update: Wed 13 May 2026 23:01:16 +0000
Files and hashes: 1: AENYJALANSjKlBoltdKemnCFKjs.roa (hash: s2OVjDuX6iIGr8lYPRWiO+GCWriVBdcRjsgW+JAkKFY=)
2: WT3Gx2IH-UOQxMFe0DcDIk0_2gs.roa (hash: 8xLda/bRGDPhlqY86QUEIR+DAlGhY+eQ/Yy7FCK+A6E=)
3: zHrEehn2b0GDl-6l_vFaB_8sACM.crl (hash: yW8wzw7TZ3a0u8eSOXZII6mlrv59W/E0CgaIUWpG3D4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zHrEehn2b0GDl-6l_vFaB_8sACM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:55:c1:47:72:9a:36:44:34:a8:e1:d7:ea:9f:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc7ac47a19f66f418397eea5fef15a07ff2c0023
Validity
Not Before: May 12 23:01:16 2026 GMT
Not After : May 13 23:01:16 2026 GMT
Subject: CN=feb5d74b5dbd121c8e6795606e11837e3d83deb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ea:33:b1:f9:d5:c6:cc:81:d8:28:76:d0:c4:
f1:f7:60:15:35:44:1a:95:34:56:4d:1b:19:fb:9d:
32:0e:26:6f:f7:78:79:01:c2:87:c6:f1:d0:5a:e7:
00:5a:2a:df:a9:cd:6a:c3:9c:0f:6f:5a:d0:24:9c:
82:45:19:7a:74:ff:e2:3c:b1:d9:ce:ca:5a:58:18:
44:93:5a:6f:c6:db:bd:dc:4b:2f:8a:7b:7a:e1:6e:
0e:fc:e2:f4:be:03:8e:d7:79:91:9c:d7:19:2e:03:
0c:13:3f:b7:fe:ae:b8:74:6c:83:1c:01:5f:d7:ba:
48:80:13:03:58:68:82:13:3f:45:cd:81:ef:9e:84:
64:f9:19:6a:7a:8d:b7:50:b3:2b:a3:67:b2:82:55:
2c:ae:90:82:a3:fa:62:53:50:91:e7:4d:13:a7:b9:
73:d2:7d:e9:5b:76:b4:e1:64:5a:e4:f9:29:58:99:
63:b9:6f:94:d0:5f:ba:2d:d4:83:74:18:5b:4b:cc:
41:48:91:23:1c:e6:64:19:8e:ee:5f:82:66:db:46:
f4:7a:19:e2:76:9b:b1:0f:2d:bb:dc:99:d7:66:1a:
29:f8:88:ee:fb:61:57:2c:c3:da:95:af:dd:cc:42:
03:ac:20:76:84:a1:0c:37:ca:26:53:d9:2c:b8:ea:
35:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:B5:D7:4B:5D:BD:12:1C:8E:67:95:60:6E:11:83:7E:3D:83:DE:B4
X509v3 Authority Key Identifier:
keyid:CC:7A:C4:7A:19:F6:6F:41:83:97:EE:A5:FE:F1:5A:07:FF:2C:00:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zHrEehn2b0GDl-6l_vFaB_8sACM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:97:2e:95:5f:fb:df:20:ef:8d:27:22:10:f4:3b:0a:ac:a7:
d7:ee:39:9b:68:ce:d5:05:8f:d8:c4:20:22:e5:a3:75:19:8b:
c9:7c:1c:4c:54:ec:ac:ce:f9:ec:34:15:b9:a1:1b:87:cd:5d:
dd:64:64:ca:27:b7:74:3a:27:ac:61:79:ab:0e:0a:5f:3b:ab:
a5:a7:1a:25:1e:4a:12:43:f7:f5:3b:52:05:18:0c:da:f8:ab:
29:96:01:57:e3:03:dd:e6:67:90:50:12:03:9c:85:4e:22:68:
2e:19:a1:ab:af:f1:db:37:bb:a8:44:dd:09:ed:16:7b:83:ef:
1c:22:0d:86:48:73:75:00:7c:28:83:eb:fd:a0:b7:57:52:5d:
09:cf:4d:4a:d9:06:cf:21:14:be:7a:e8:22:35:dc:fc:be:8f:
9e:7d:eb:6a:9a:09:95:0d:48:0a:65:5f:8d:9e:86:9f:09:68:
5a:01:36:b2:9b:5b:68:38:96:4d:33:df:e5:98:d4:98:de:6b:
fe:37:21:9d:c3:77:8a:63:66:ff:9b:af:a2:90:24:1f:9f:0e:
79:79:ae:49:6d:f8:4c:33:d3:da:22:7e:8f:c0:3e:00:4e:06:
13:6e:8b:11:af:d3:31:f2:e3:ea:0c:be:22:1c:05:e0:5c:c6:
3e:e2:cd:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:33:14 2026 by rpki-client