Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.mft
File: zxT86bGaXupTLhfYPajB3NHeGMA.mft (raw, json)
Hash identifier: evMriIxFSEsYtykJNgeHJFcMbF+lLmy1g5mEjfMjHjo=
Subject key identifier: A6:93:E4:58:A8:81:68:B4:EB:D5:97:7A:77:C8:CB:F0:6C:80:5E:72
Authority key identifier: CF:14:FC:E9:B1:9A:5E:EA:53:2E:17:D8:3D:A8:C1:DC:D1:DE:18:C0
Certificate issuer: /CN=cf14fce9b19a5eea532e17d83da8c1dcd1de18c0
Certificate serial: 019E1DFEB95169A8BB70A2C40A1C8BF387D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zxT86bGaXupTLhfYPajB3NHeGMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.mft
Manifest number: 0728
Signing time: Tue 12 May 2026 21:01:33 +0000
Manifest this update: Tue 12 May 2026 21:01:33 +0000
Manifest next update: Wed 13 May 2026 21:01:33 +0000
Files and hashes: 1: DQ01J-Cq4hUemzI_hsxFb8NofP8.asa (hash: fcPlXypjGU8YaSASqBijwf7gz4frCYBc1/uFvytFDWw=)
2: sQDcvzwfINZL1YKhOjuNrTumwws.roa (hash: 1SADRpnWZPKf4KWSJGPvG1rU1NGMXTSVZgSGEdq16/Q=)
3: zxT86bGaXupTLhfYPajB3NHeGMA.crl (hash: gAzurmVDpU5FknYlTiKUcpRAFOYKe6jxoot7Fb6AEO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zxT86bGaXupTLhfYPajB3NHeGMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:b9:51:69:a8:bb:70:a2:c4:0a:1c:8b:f3:87:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf14fce9b19a5eea532e17d83da8c1dcd1de18c0
Validity
Not Before: May 12 21:01:33 2026 GMT
Not After : May 13 21:01:33 2026 GMT
Subject: CN=a693e458a88168b4ebd5977a77c8cbf06c805e72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:61:98:44:26:65:3b:21:04:6e:2a:3e:1f:5a:
64:a9:d8:0b:f8:6a:ae:36:29:77:4d:24:0a:cf:23:
6b:be:08:b0:6a:37:0a:d8:9d:ed:c3:53:5e:84:09:
9d:37:2b:45:f6:ca:99:1c:c8:87:f3:30:33:fb:7b:
a4:10:9a:ec:1b:b5:34:4d:ef:5b:6e:80:8d:d7:ef:
a3:47:c8:ac:8d:50:32:39:9a:29:7e:9d:80:2f:92:
33:e3:ad:f7:e4:77:19:19:7b:3a:85:1f:d7:ca:2c:
05:64:d6:ba:9b:7a:4b:72:a3:b4:f4:5f:83:bb:cd:
c8:7c:d3:c9:26:f3:72:d8:f9:47:b8:5d:9c:96:c8:
54:6a:3a:78:73:b2:06:2b:c5:ca:29:e8:d3:17:b3:
3b:a6:ff:20:c7:59:33:61:f9:89:41:c8:d3:c7:af:
2c:6e:35:a3:e8:a5:9f:ee:01:1f:28:fe:ba:78:a5:
fa:f7:fd:05:62:e7:83:a5:d5:78:3f:0a:40:eb:40:
b8:a5:63:65:55:04:d6:76:d1:22:7c:94:37:1b:54:
3e:42:48:e0:0f:78:d1:7f:bc:46:24:b8:19:60:a4:
84:56:49:1e:fc:e2:5f:bc:b3:7b:51:60:eb:eb:cc:
ea:18:f1:1f:9e:82:2f:47:80:d1:ee:b2:75:54:0b:
a1:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:93:E4:58:A8:81:68:B4:EB:D5:97:7A:77:C8:CB:F0:6C:80:5E:72
X509v3 Authority Key Identifier:
keyid:CF:14:FC:E9:B1:9A:5E:EA:53:2E:17:D8:3D:A8:C1:DC:D1:DE:18:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxT86bGaXupTLhfYPajB3NHeGMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:79:04:b3:1c:ef:b2:5a:73:75:6e:36:e5:c0:6c:c8:57:a2:
d1:1d:67:60:6f:35:c6:c4:d6:21:b8:75:a9:ca:ce:e4:1f:02:
be:18:ad:63:1e:6c:0a:a7:23:46:e7:56:6c:56:37:41:bc:82:
97:6b:f8:72:ba:e0:e3:82:e7:1b:e9:8d:7e:ed:0e:0c:13:1b:
e0:5c:61:f4:e8:96:ea:02:8e:b8:68:74:5c:de:6f:cf:75:ab:
1d:ee:35:80:20:56:c3:ff:36:c2:d8:79:ba:9a:5f:8e:bb:1a:
01:a8:ff:b2:b8:af:dd:5e:af:61:9c:d8:d5:5c:92:0a:cb:ce:
3b:d2:23:7a:d7:69:94:8c:50:e0:ed:2e:96:a0:0e:67:fa:6a:
3e:95:98:94:20:5c:22:dc:09:c0:eb:2e:6c:36:0b:ce:ac:16:
ca:e0:af:d0:1b:6d:ba:90:12:8b:4e:0a:ca:f4:26:ed:e8:cd:
da:d8:3f:82:11:6b:b6:92:ee:46:cc:c0:7e:09:de:64:00:c1:
ae:e1:7e:5c:df:fa:e2:a2:44:df:e9:85:f3:40:94:19:33:e1:
0b:b6:fb:7a:3f:b2:ff:3a:e2:7a:9b:16:44:c2:b0:71:d5:a4:
22:74:88:19:dd:20:d8:ec:f9:fe:10:38:71:5a:f1:2e:7f:40:
8c:41:09:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:53:01 2026 by rpki-client