Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft
File: ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft (raw, json)
Hash identifier: oEJJqO2h/RXyUnyB0deEtXLGt5C9DK087suTfaHpq4Q=
Subject key identifier: 91:DD:87:F7:A7:52:BB:0B:80:FF:D8:55:A0:DB:F7:8D:0A:7A:71:4D
Authority key identifier: 65:4D:96:67:2A:59:EC:38:95:FC:15:84:7A:CA:1B:29:DB:79:12:44
Certificate issuer: /CN=654d96672a59ec3895fc15847aca1b29db791244
Certificate serial: 019E20C8EDE21EE819D23028C621A680B28D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZU2WZypZ7DiV_BWEesobKdt5EkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft
Manifest number: 088A
Signing time: Wed 13 May 2026 10:01:39 +0000
Manifest this update: Wed 13 May 2026 10:01:39 +0000
Manifest next update: Thu 14 May 2026 10:01:39 +0000
Files and hashes: 1: Utc_slWR8yHDk290AryGYchTlYA.roa (hash: NUCfh9s0WjqwyOFskJUWEakWr/HjDtF3kDLbwsne7Ro=)
2: ZU2WZypZ7DiV_BWEesobKdt5EkQ.crl (hash: 4tT2KVB4GL0SPs3CR5OTcf5rIW6ytwWpR2/hJ0AbAN4=)
3: zynEh3pPdQY3KJQVgvhOsaYxciw.roa (hash: rOMrg3wVXzNicfVb9K/t1LGxhcGrIWejZTOsjk80vqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZU2WZypZ7DiV_BWEesobKdt5EkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 10:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:c8:ed:e2:1e:e8:19:d2:30:28:c6:21:a6:80:b2:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=654d96672a59ec3895fc15847aca1b29db791244
Validity
Not Before: May 13 10:01:39 2026 GMT
Not After : May 14 10:01:39 2026 GMT
Subject: CN=91dd87f7a752bb0b80ffd855a0dbf78d0a7a714d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:08:f2:c1:83:34:72:a6:24:81:b4:bb:20:06:
10:e4:c7:76:32:6a:40:d3:d5:de:42:63:2f:3d:94:
33:58:45:de:f5:b2:a1:03:55:d8:39:d7:e4:7c:2b:
cc:c6:d5:07:ae:12:14:05:5f:a1:7e:da:35:15:64:
0f:32:1e:86:b7:d2:89:88:10:45:92:1b:33:a4:2b:
42:85:26:36:73:d9:7e:b8:af:b1:53:c5:6b:9f:00:
12:92:89:20:56:8e:37:37:2b:87:4a:5f:05:61:46:
ee:c0:fb:02:2a:c3:a9:f2:cc:43:74:17:b2:b1:a6:
1d:81:57:55:77:ee:61:0e:18:e0:c2:48:37:7b:b4:
6f:5d:9f:8d:f1:76:e3:3f:3f:3b:65:33:94:5f:1d:
72:88:47:a0:db:5f:08:3a:9c:2a:86:1f:6e:81:db:
28:a4:dd:02:f0:5c:c2:6c:1b:42:4d:15:dc:a2:0f:
30:4c:52:06:ca:40:72:41:26:f7:5f:10:09:b7:d9:
f6:3a:56:eb:39:56:af:5b:93:27:b8:bc:22:74:29:
aa:f1:4a:cb:d8:4d:23:f4:3a:79:7d:33:59:f6:ad:
41:9e:77:a7:f7:5c:cf:58:7f:89:47:84:75:6d:f0:
c2:e8:61:ec:53:67:07:a9:75:34:8f:4c:30:cd:04:
61:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:DD:87:F7:A7:52:BB:0B:80:FF:D8:55:A0:DB:F7:8D:0A:7A:71:4D
X509v3 Authority Key Identifier:
keyid:65:4D:96:67:2A:59:EC:38:95:FC:15:84:7A:CA:1B:29:DB:79:12:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZU2WZypZ7DiV_BWEesobKdt5EkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:7a:ba:a6:b8:eb:d4:34:9a:29:11:ba:f5:50:b3:6e:35:73:
32:bc:58:ff:65:bc:a7:83:e2:0a:99:18:81:73:37:a9:4e:75:
d4:6b:be:0e:93:5a:a4:46:e1:e1:3b:9d:33:83:98:12:6e:97:
25:8f:59:f5:00:5b:7c:62:b2:d6:53:00:d9:8f:aa:0b:03:ff:
b6:38:0f:c7:d9:87:f8:59:be:83:9d:68:39:fe:d5:67:e6:e4:
be:0b:f7:e1:c2:41:00:0b:c1:e3:57:0f:a8:81:df:b9:a5:d6:
f6:0e:82:1a:5d:09:5a:e4:cf:a3:9f:fd:7b:2c:5a:e0:e3:3e:
ae:97:72:93:c5:2c:01:85:eb:16:87:3a:f6:40:7e:c9:d8:14:
6e:15:b3:6a:a4:5b:1e:a2:06:3b:67:b8:55:3c:53:2f:fd:60:
a7:f1:2e:00:1b:64:a8:fb:d0:4c:a5:b4:8a:b4:c3:a6:1d:e9:
d3:ac:e2:db:0f:89:50:ff:0a:46:2b:c1:7d:d7:35:77:ec:73:
e6:b5:bc:bb:1d:7b:fa:cb:78:29:30:ba:d4:8e:7e:43:e8:d0:
e0:3a:9b:9e:76:72:18:06:3c:c0:7d:ff:77:3b:cc:82:77:cf:
da:fc:17:3c:72:f5:8b:f5:ed:5a:4e:18:50:fa:49:fe:d8:7e:
a6:58:2f:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:57:38 2026 by rpki-client