Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.mft
File: zRJC5sfr2Coj-hoI85br5as0z2s.mft (raw, json)
Hash identifier: iMKeutJOT0Dn1T612awXMFgLKhXnVvH6Qr3fE2waePw=
Subject key identifier: BB:0D:3D:53:F1:5E:0B:A0:5C:3A:83:DF:C6:FA:38:57:E6:F0:73:2A
Authority key identifier: CD:12:42:E6:C7:EB:D8:2A:23:FA:1A:08:F3:96:EB:E5:AB:34:CF:6B
Certificate issuer: /CN=cd1242e6c7ebd82a23fa1a08f396ebe5ab34cf6b
Certificate serial: 019E2091499864C6037B7BE6AB16596C6905
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRJC5sfr2Coj-hoI85br5as0z2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.mft
Manifest number: 1907
Signing time: Wed 13 May 2026 09:00:52 +0000
Manifest this update: Wed 13 May 2026 09:00:52 +0000
Manifest next update: Thu 14 May 2026 09:00:52 +0000
Files and hashes: 1: nOWsqCuFuUl88d8fe68oh7ATL8Y.roa (hash: 3ZcPCRJToIBazA6ZM2eZ5k1Cl21KURsg9GhtHBDZCsw=)
2: vyrrFLAQmM4kpL-C4kzXL9B0pEk.roa (hash: uDR2ErZozryJ4og8nKltQlCSGLY9GDhP6CrAdfmEEk8=)
3: zRJC5sfr2Coj-hoI85br5as0z2s.crl (hash: c2V3fV5yn3IXeafVThmcjZj8dP4+11GKSKNIF6ZStrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/zRJC5sfr2Coj-hoI85br5as0z2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 09:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:91:49:98:64:c6:03:7b:7b:e6:ab:16:59:6c:69:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd1242e6c7ebd82a23fa1a08f396ebe5ab34cf6b
Validity
Not Before: May 13 09:00:52 2026 GMT
Not After : May 14 09:00:52 2026 GMT
Subject: CN=bb0d3d53f15e0ba05c3a83dfc6fa3857e6f0732a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:9f:16:30:49:ec:af:92:28:0d:fc:af:82:05:
1e:8d:e3:e0:3c:34:43:46:d8:f9:d7:79:0e:33:6d:
d0:e6:50:7c:13:dd:73:fc:02:f3:be:5e:6e:1f:13:
b9:2f:f8:5b:e6:a9:4e:7a:5d:b2:80:fd:d6:fb:67:
ec:21:64:d9:2f:38:47:38:76:5e:cd:a8:96:2a:61:
c8:12:a8:fe:25:d1:60:db:84:8a:2a:fe:96:c0:c7:
f4:10:66:f5:88:0c:e2:b1:72:1f:a6:d4:82:b3:8f:
25:ea:32:2b:4f:f1:40:f6:22:6c:b6:92:ed:de:da:
4b:0c:4d:fd:05:6f:6f:f6:3d:8c:99:da:c9:5a:d9:
99:3f:85:e0:a9:65:23:1c:11:99:e9:5f:f2:ce:8d:
21:15:2e:fd:93:5b:e6:09:9e:72:76:3d:f0:6b:f8:
6f:7e:ee:47:39:ce:ee:25:3a:e9:12:3c:2b:1a:03:
01:cf:5e:34:b7:ed:c3:42:02:8b:a7:93:ed:e7:47:
06:c9:17:02:78:ae:7c:a9:8a:bc:a8:18:a1:82:2d:
fa:fd:ee:a2:be:bc:20:02:76:86:e1:8b:ea:c5:42:
b3:6c:04:fa:d9:28:23:3b:ce:02:4e:7e:a0:35:2b:
02:81:f9:bc:14:a8:cc:ea:16:e6:73:9d:11:02:f2:
5f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:0D:3D:53:F1:5E:0B:A0:5C:3A:83:DF:C6:FA:38:57:E6:F0:73:2A
X509v3 Authority Key Identifier:
keyid:CD:12:42:E6:C7:EB:D8:2A:23:FA:1A:08:F3:96:EB:E5:AB:34:CF:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRJC5sfr2Coj-hoI85br5as0z2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:b9:c9:d0:84:1d:2b:7c:c6:2f:14:78:1a:94:44:95:36:bd:
a9:c8:4f:5a:4e:4c:a6:51:b3:d1:3b:a1:fc:db:e9:10:18:04:
c6:b4:c5:1d:ba:b4:2c:44:e2:b2:22:b9:76:48:9f:b3:67:26:
34:40:70:01:d0:32:03:be:94:4d:ec:e7:e8:ae:d2:04:01:45:
49:f0:4a:7b:d1:d0:3d:ea:bc:23:8b:d9:fd:f4:e3:03:ad:48:
4a:d3:e0:4b:a2:b2:4d:05:5c:20:0f:8b:8d:c6:8e:ac:9f:d9:
fd:2e:a9:88:fb:4c:f5:0f:13:b8:1d:5f:80:c3:f5:f1:da:dd:
7f:24:44:03:bf:cb:09:c9:6d:9d:51:bd:0a:06:28:0b:cd:69:
f3:ae:63:1e:e3:5b:b3:d8:4e:03:e3:cc:a0:3f:35:84:c0:84:
01:82:d3:53:18:45:64:de:6c:a9:a3:66:2c:e9:d4:c3:1c:8d:
97:03:33:dd:cf:90:b4:83:54:42:68:f7:5a:e0:e5:86:77:dd:
d0:7f:a4:40:82:99:02:f1:79:cd:82:ca:39:d3:2a:6d:31:86:
f3:21:27:59:c1:ed:14:d5:7f:2a:59:44:d1:63:af:fb:30:40:
e1:ec:c5:f7:e5:55:fb:6c:ca:c0:c4:bc:3d:85:78:70:8f:c1:
1c:ea:81:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:02:11 2026 by rpki-client