Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft
File: z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft (raw, json)
Hash identifier: tcth/xgHGkmlDRJfyHYv+uzlxUdbabCFesPLXx9Qkrs=
Subject key identifier: 04:68:11:ED:EF:AB:28:02:96:97:D0:94:D9:3B:7A:87:70:27:4B:53
Authority key identifier: CF:5B:F0:F1:9A:99:4C:7F:68:6D:55:AB:FC:16:87:5D:39:E5:D4:E2
Certificate issuer: /CN=cf5bf0f19a994c7f686d55abfc16875d39e5d4e2
Certificate serial: 019E2AA72E850D936E738F4CECA9DE739383
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z1vw8ZqZTH9obVWr_BaHXTnl1OI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft
Manifest number: 062E
Signing time: Fri 15 May 2026 08:00:59 +0000
Manifest this update: Fri 15 May 2026 08:00:59 +0000
Manifest next update: Sat 16 May 2026 08:00:59 +0000
Files and hashes: 1: VBl0vhkZ0p5h13VJMHzt2wrsQ7A.roa (hash: VVaZ8MZsUSIufXGhoXhGO0V1DGyl/LodpDCAxeW4mZ0=)
2: voKmqzxnpt1_Etyi16YW_6f_LiA.roa (hash: FSyRyjfIYpd8tAuhdZ0kMGNXftsQsnkKkGGZLUK2+XE=)
3: z1vw8ZqZTH9obVWr_BaHXTnl1OI.crl (hash: eOsxsMWphtfv1O2SV3Tln1NagTuSjP/df/cODVWTBwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft
rsync://rpki.ripe.net/repository/DEFAULT/z1vw8ZqZTH9obVWr_BaHXTnl1OI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2a:a7:2e:85:0d:93:6e:73:8f:4c:ec:a9:de:73:93:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf5bf0f19a994c7f686d55abfc16875d39e5d4e2
Validity
Not Before: May 15 08:00:59 2026 GMT
Not After : May 16 08:00:59 2026 GMT
Subject: CN=046811edefab28029697d094d93b7a8770274b53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ba:96:76:6e:c2:87:d1:f7:cb:07:2f:4a:e7:
25:ee:12:42:28:bf:d2:8d:ba:ab:ad:7f:c4:10:d5:
73:e1:d6:40:e5:c5:05:9e:a2:ae:a8:03:07:69:d4:
9e:f8:e5:85:a8:ac:4c:77:d1:17:a0:6f:6b:7b:9b:
ab:54:85:5d:58:5e:5f:61:21:4d:e3:9d:b1:3b:18:
09:ff:b2:77:ab:d2:8a:8a:65:44:58:10:9a:22:6c:
76:58:29:2a:26:28:a9:4d:fa:db:56:1d:05:cf:93:
5e:fd:5d:8d:ad:35:05:60:5d:d9:fe:3a:a8:a8:5b:
24:fb:55:52:cc:ad:d2:40:45:d9:e6:5d:bc:bc:82:
63:50:40:bb:98:50:7c:99:60:22:69:fa:e4:50:9e:
e7:55:ed:30:90:8f:fc:ab:93:43:a8:f8:47:58:61:
c2:51:c1:35:d0:25:ba:79:0c:90:05:d7:10:34:f0:
e1:ed:63:fe:9b:81:0e:a4:9e:c1:60:84:0b:94:71:
de:0c:07:e1:4d:8d:10:44:65:67:ce:13:b2:14:c7:
2e:4a:16:71:bc:9f:3f:f4:62:1a:c3:2e:45:ac:5f:
50:ae:eb:a2:80:d1:de:1c:69:a5:12:22:94:11:f7:
89:6f:8d:63:d6:12:e0:4b:83:28:71:8e:fa:d9:9a:
d2:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:68:11:ED:EF:AB:28:02:96:97:D0:94:D9:3B:7A:87:70:27:4B:53
X509v3 Authority Key Identifier:
keyid:CF:5B:F0:F1:9A:99:4C:7F:68:6D:55:AB:FC:16:87:5D:39:E5:D4:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z1vw8ZqZTH9obVWr_BaHXTnl1OI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:77:cc:2a:1d:ce:7c:71:a5:0e:8b:cf:f9:68:3d:72:8a:27:
d3:56:79:4a:7f:05:31:7e:7a:57:fe:29:85:ab:3c:46:37:a2:
dc:68:e4:da:35:38:bc:7f:6b:58:ff:d2:ae:39:b1:ac:05:3a:
21:ac:3c:9d:01:b3:c0:f2:50:02:c5:0d:f6:18:23:16:e7:cb:
15:f0:73:63:dd:76:dd:0f:c2:98:83:a9:ff:b9:47:ee:e1:bb:
33:1a:90:7d:b2:9a:6b:eb:93:7b:26:4c:ec:57:d0:f5:13:8a:
a4:ed:58:cc:03:2e:90:e4:44:8a:f7:17:5b:af:17:0b:27:82:
5f:b5:b5:11:67:53:0d:78:90:1c:a2:ac:f3:20:46:64:e6:f0:
3a:ba:8f:3e:f6:97:c8:10:bb:de:e9:90:ab:f6:59:4d:fc:fe:
f4:13:42:9f:1c:52:bb:71:a4:6b:7a:14:52:f0:04:e9:29:21:
9e:f1:b7:58:8b:20:ed:f1:09:b3:4b:b9:67:9a:a9:32:59:a7:
2f:b5:95:d0:51:09:40:38:96:58:dc:49:af:fa:c8:70:90:e9:
78:07:0a:b2:67:cd:6b:80:2a:06:7a:80:d0:de:3e:02:4e:8e:
49:8a:a1:c9:32:4f:c3:bc:2e:83:b5:42:fc:8d:47:ea:fd:79:
0b:2b:ba:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 16:05:14 2026 by rpki-client