Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.mft
File: 0Zk_eMrkRZqbniaJrTDwvETMZyQ.mft (raw, json)
Hash identifier: /HvZk40z3VDpCVYD+q/T+1bb+ZXkeOXOUYlR/u/J8gw=
Subject key identifier: E1:19:1A:7F:56:8C:AD:75:BC:CD:19:81:04:F2:37:78:94:B8:1E:5A
Authority key identifier: D1:99:3F:78:CA:E4:45:9A:9B:9E:26:89:AD:30:F0:BC:44:CC:67:24
Certificate issuer: /CN=d1993f78cae4459a9b9e2689ad30f0bc44cc6724
Certificate serial: 019E1F478E25FC9A79C6CF1320BBE2CC805D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Zk_eMrkRZqbniaJrTDwvETMZyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.mft
Manifest number: 065B
Signing time: Wed 13 May 2026 03:00:43 +0000
Manifest this update: Wed 13 May 2026 03:00:43 +0000
Manifest next update: Thu 14 May 2026 03:00:43 +0000
Files and hashes: 1: 0Zk_eMrkRZqbniaJrTDwvETMZyQ.crl (hash: afEeO88vP9or1w2NzgHGe93K0lQraBBEnmvtwjYHU3s=)
2: qo4K2MxKuprqgn2JH-P6sbefGGQ.roa (hash: 5nQ7RiiW8bFTZTK/XJeOeCamYJvNUIxvBcEODwO0sgE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Zk_eMrkRZqbniaJrTDwvETMZyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:47:8e:25:fc:9a:79:c6:cf:13:20:bb:e2:cc:80:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1993f78cae4459a9b9e2689ad30f0bc44cc6724
Validity
Not Before: May 13 03:00:43 2026 GMT
Not After : May 14 03:00:43 2026 GMT
Subject: CN=e1191a7f568cad75bccd198104f2377894b81e5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0a:d1:b0:8c:5f:39:5a:10:a9:0f:27:71:66:
e6:4d:4e:c2:c9:61:1f:03:00:17:25:dc:dd:90:82:
18:f6:8e:98:f5:7b:d5:99:83:d9:67:c2:ec:7e:42:
b6:83:61:44:bf:4b:63:9b:76:49:c5:fc:66:8e:90:
34:b3:2b:44:98:c3:7a:5a:f2:5b:1e:83:16:77:60:
75:8f:60:b0:41:ad:37:8a:6e:c0:cc:92:2e:57:28:
43:df:7e:5a:de:d2:83:52:57:60:5a:23:94:22:d1:
ca:e6:10:4a:bf:ac:8d:dc:b7:0d:6b:d3:2f:06:12:
2b:58:6b:34:41:94:45:a3:28:93:1d:71:4a:d0:2f:
ef:78:82:05:34:71:e3:4a:66:5a:8f:16:05:f7:68:
d7:fa:ec:62:c3:3c:5a:19:8c:72:1c:d1:fe:43:ba:
3e:07:a0:57:26:ef:12:ad:3d:3b:8b:9f:46:f5:9f:
0b:43:7e:9a:6a:d4:11:8c:95:a8:d6:6d:97:61:c3:
ed:fd:94:b0:e8:c7:4c:05:41:9c:b9:8f:68:01:4f:
04:62:00:b2:5d:80:dd:12:ee:f1:4b:81:98:ce:26:
19:00:73:cf:25:05:1a:c6:f1:e7:b7:66:49:e9:4d:
f9:50:21:39:39:32:79:d2:93:9b:d0:2c:42:63:ec:
bd:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:19:1A:7F:56:8C:AD:75:BC:CD:19:81:04:F2:37:78:94:B8:1E:5A
X509v3 Authority Key Identifier:
keyid:D1:99:3F:78:CA:E4:45:9A:9B:9E:26:89:AD:30:F0:BC:44:CC:67:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Zk_eMrkRZqbniaJrTDwvETMZyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:70:d6:e0:09:d3:98:e0:40:06:a3:c4:e2:e4:67:29:fe:1f:
40:af:dd:2d:b3:82:b3:ed:63:14:de:74:9c:87:85:a4:76:6e:
e6:1d:70:39:b8:16:aa:cb:8b:9f:17:99:44:d5:7f:d2:60:99:
2a:a5:12:51:5d:b3:07:a5:42:70:a2:ee:93:d9:59:54:fa:47:
90:b8:5c:87:d0:c0:2d:ba:9b:91:cc:1b:2d:5e:b6:72:4b:7b:
94:fa:44:61:f9:69:42:5c:c5:c5:f9:fa:24:4a:05:10:41:c0:
db:2e:56:ce:b2:09:d7:1e:73:b6:fa:82:4c:c1:90:80:6a:11:
72:d8:b2:52:32:82:0f:0d:46:b7:af:b9:de:8c:da:11:bf:30:
51:79:e5:66:e0:63:f0:28:c3:f0:7e:d4:8f:fc:e1:45:74:0b:
d8:e0:6b:40:17:44:e0:82:63:51:d9:e4:08:77:e6:a9:80:a9:
d3:84:d2:04:71:05:d0:81:a3:ac:eb:f1:54:f9:0c:ad:7c:ce:
9b:cb:d9:3c:ff:64:b7:2a:a6:e8:f7:eb:80:5b:b7:46:6e:82:
f9:9c:41:42:cc:c7:b3:5b:b1:99:0b:08:07:28:56:fd:9e:37:
e0:3d:c7:c8:34:14:18:9e:6a:cb:f1:39:ed:ce:c8:87:5c:f4:
42:4a:8d:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:22:17 2026 by rpki-client