Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/6d157e-267f-43a4-ae0a-5a2e9d6695fc/1/ZtPx9jwQCcQqaJGYY6m4uoV4ZzA.mft
File: ZtPx9jwQCcQqaJGYY6m4uoV4ZzA.mft (raw, json)
Hash identifier: cfFuXQQb/wZcTzM4wqYM3MQQVDLPnbNXF28GqtrQgJY=
Subject key identifier: 78:DE:B0:DE:18:72:D7:E0:46:80:68:68:B2:41:19:A1:D7:81:DC:4D
Authority key identifier: 66:D3:F1:F6:3C:10:09:C4:2A:68:91:98:63:A9:B8:BA:85:78:67:30
Certificate issuer: /CN=66d3f1f63c1009c42a68919863a9b8ba85786730
Certificate serial: 019E1D598EEFE692F83520A6E56A8E40FF74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtPx9jwQCcQqaJGYY6m4uoV4ZzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/6d157e-267f-43a4-ae0a-5a2e9d6695fc/1/ZtPx9jwQCcQqaJGYY6m4uoV4ZzA.mft
Manifest number: 13
Signing time: Tue 12 May 2026 18:01:08 +0000
Manifest this update: Tue 12 May 2026 18:01:08 +0000
Manifest next update: Wed 13 May 2026 18:01:08 +0000
Files and hashes: 1: NmfGAB9g6IwfbTf5IGeRlUzzLK8.roa (hash: nTmZ/2NC+LsTf/mvJ/ayjnPfWSnwWzWFoHlvAvwIR94=)
2: ZtPx9jwQCcQqaJGYY6m4uoV4ZzA.crl (hash: d5NRtkmSaQyxXH0B7BxqJj0f5nOXBvSc7QdcHjJuMX0=)
3: tY2WtQaeJpuUmJI8VN0JtvLm7nM.roa (hash: KjixT4XxmdU3bVJwP3k9mRsSDgi6HnBSPdfTCDjkwQo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/6d157e-267f-43a4-ae0a-5a2e9d6695fc/1/ZtPx9jwQCcQqaJGYY6m4uoV4ZzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/6d157e-267f-43a4-ae0a-5a2e9d6695fc/1/ZtPx9jwQCcQqaJGYY6m4uoV4ZzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtPx9jwQCcQqaJGYY6m4uoV4ZzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:8e:ef:e6:92:f8:35:20:a6:e5:6a:8e:40:ff:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d3f1f63c1009c42a68919863a9b8ba85786730
Validity
Not Before: May 12 18:01:08 2026 GMT
Not After : May 13 18:01:08 2026 GMT
Subject: CN=78deb0de1872d7e046806868b24119a1d781dc4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3f:b9:e9:b1:31:04:c1:ef:89:f7:00:c9:7c:
5e:01:a7:d9:d2:26:3c:c8:a8:88:34:0e:ba:a0:72:
7f:41:07:31:09:2f:4b:42:10:c7:a0:df:21:78:74:
76:81:8e:df:5e:d1:19:c9:1c:42:0d:65:da:88:27:
b9:5f:6d:b7:85:ef:08:39:9f:bc:cd:05:c8:14:a5:
90:fe:0e:5b:2b:9e:fc:21:91:fa:38:d9:23:6c:fd:
7e:23:4b:f5:bb:a3:36:a6:6f:e4:ff:e2:d3:68:85:
09:c3:a5:17:39:69:2d:98:38:28:69:50:24:b5:64:
34:94:75:c6:a8:76:4d:18:4f:83:86:2b:5b:c7:f6:
f1:34:61:8c:20:b1:81:b6:5b:10:23:f4:29:55:e0:
0e:3e:f3:a1:9c:f7:43:01:32:0e:dc:8d:86:9b:3b:
09:07:ac:80:41:2c:b3:4e:1b:da:3c:a4:46:e5:de:
c3:1f:0f:c0:cd:80:91:53:b1:fc:4e:43:08:bb:c4:
6b:91:a9:00:87:48:c9:b2:6c:91:66:14:b6:2e:8c:
a5:f9:81:23:12:23:13:f9:9f:8b:09:4a:2c:45:27:
5a:9d:df:0a:93:20:d8:04:c8:09:26:5e:c0:3e:2f:
b7:b1:81:8a:69:ca:57:d9:21:9c:eb:b5:2a:c7:ff:
19:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:DE:B0:DE:18:72:D7:E0:46:80:68:68:B2:41:19:A1:D7:81:DC:4D
X509v3 Authority Key Identifier:
keyid:66:D3:F1:F6:3C:10:09:C4:2A:68:91:98:63:A9:B8:BA:85:78:67:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtPx9jwQCcQqaJGYY6m4uoV4ZzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6d157e-267f-43a4-ae0a-5a2e9d6695fc/1/ZtPx9jwQCcQqaJGYY6m4uoV4ZzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6d157e-267f-43a4-ae0a-5a2e9d6695fc/1/ZtPx9jwQCcQqaJGYY6m4uoV4ZzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:de:4d:91:32:95:81:15:94:db:87:93:ed:cf:27:75:95:81:
25:e5:cd:36:ad:66:8a:cf:a3:ae:96:6b:b8:26:72:0d:b1:5c:
bf:ed:aa:34:97:15:4b:6d:5e:b0:c2:15:a9:5e:78:12:18:c6:
c9:eb:c0:de:11:13:91:c8:54:e5:d2:ac:21:f9:1a:63:98:f3:
5c:3b:7e:b2:77:84:19:e5:c3:a8:99:95:03:b7:f8:c8:47:60:
83:15:5b:0a:79:40:ca:f3:03:fd:bc:2b:95:39:7f:b8:ad:49:
c8:fa:ae:a0:81:c5:4d:92:4b:8e:c2:89:b0:67:fd:8c:cf:47:
12:47:7b:21:46:73:4e:43:85:42:50:79:be:c1:fd:7a:46:9d:
16:41:c7:76:90:a9:d3:87:83:33:6d:6b:6b:4f:6c:d8:cc:d3:
40:e3:dc:c6:1a:a5:72:87:86:e0:45:45:19:7a:34:09:d7:26:
fe:7d:22:c2:4c:61:78:60:19:b5:ef:eb:95:3b:10:af:7e:3a:
20:83:86:35:01:75:21:e4:da:7f:f6:b3:2e:4f:81:1c:32:92:
61:1f:96:da:23:65:b9:20:f5:54:7a:17:c5:a4:81:3c:eb:e2:
a2:f8:9e:e1:bf:b5:74:d0:b5:db:da:06:5f:31:d0:49:a2:c0:
0d:51:ad:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:44:44 2026 by rpki-client