Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/ZnKfnQeG9ooezVxakrw5LYaRl14.mft
File: ZnKfnQeG9ooezVxakrw5LYaRl14.mft (raw, json)
Hash identifier: v11B2PRbWHDl4j2YEmEJuBvhRo0XQ5r3sQ8yYk19uMo=
Subject key identifier: 9B:2E:6F:2F:C2:74:D5:62:C0:D6:60:B8:F1:8C:4D:B2:AC:03:14:72
Authority key identifier: 66:72:9F:9D:07:86:F6:8A:1E:CD:5C:5A:92:BC:39:2D:86:91:97:5E
Certificate issuer: /CN=66729f9d0786f68a1ecd5c5a92bc392d8691975e
Certificate serial: 019E30A8EAF797750F8103ED1A47C659FB5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZnKfnQeG9ooezVxakrw5LYaRl14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/ZnKfnQeG9ooezVxakrw5LYaRl14.mft
Manifest number: 14F3
Signing time: Sat 16 May 2026 12:00:37 +0000
Manifest this update: Sat 16 May 2026 12:00:37 +0000
Manifest next update: Sun 17 May 2026 12:00:37 +0000
Files and hashes: 1: ZnKfnQeG9ooezVxakrw5LYaRl14.crl (hash: X4hzIc9ogBb3cWC9sUlQpNvrE/F5OIWhcQxxE4kSook=)
2: uoe5Gtg5RLHmca7orVX_kgMJ6LA.roa (hash: fAkGAUFUUGm9PtxJMnL3fGCs6QplpIcm9Vtk+9FgVDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/ZnKfnQeG9ooezVxakrw5LYaRl14.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/ZnKfnQeG9ooezVxakrw5LYaRl14.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZnKfnQeG9ooezVxakrw5LYaRl14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:a8:ea:f7:97:75:0f:81:03:ed:1a:47:c6:59:fb:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66729f9d0786f68a1ecd5c5a92bc392d8691975e
Validity
Not Before: May 16 12:00:37 2026 GMT
Not After : May 17 12:00:37 2026 GMT
Subject: CN=9b2e6f2fc274d562c0d660b8f18c4db2ac031472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:32:19:b7:cc:12:ba:81:e3:13:5d:3e:74:be:
94:16:62:77:45:ff:55:0c:11:c6:2f:98:34:af:5a:
02:ba:e4:1f:e1:ec:e2:45:57:24:f1:82:32:2e:14:
16:9a:4d:51:09:7b:30:49:8a:ca:23:59:55:9e:2a:
b8:98:04:c9:37:aa:e3:59:6a:13:53:7a:04:e5:4f:
79:63:31:b1:23:ca:7e:ee:89:0e:78:80:56:17:fd:
b2:ba:03:00:d8:14:a6:24:85:f6:b1:8a:0b:6d:dc:
23:3c:39:ba:64:8d:91:aa:96:0a:59:98:85:58:ad:
a4:8f:9c:25:11:8d:a8:5b:51:d8:f5:0e:65:8d:6f:
44:0d:de:98:14:2a:9b:a6:2a:ad:81:69:4b:4d:e5:
6f:07:4c:67:de:45:ac:73:25:42:95:5c:a2:b7:ea:
99:46:4c:f3:2d:14:d4:25:f5:7b:fe:b3:31:6f:32:
1b:cf:58:8f:2b:27:d3:5a:f0:da:11:e7:9e:88:c3:
a4:a4:e8:db:68:95:60:d0:93:ee:37:74:5b:1c:57:
57:ab:7b:35:c1:93:c3:3e:6b:a9:89:6d:8d:b6:cb:
70:9a:c7:f4:73:b9:12:57:fa:06:11:ec:3c:dd:da:
31:8c:c8:dd:b8:ea:99:07:3a:7c:63:09:c6:e4:d4:
57:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:2E:6F:2F:C2:74:D5:62:C0:D6:60:B8:F1:8C:4D:B2:AC:03:14:72
X509v3 Authority Key Identifier:
keyid:66:72:9F:9D:07:86:F6:8A:1E:CD:5C:5A:92:BC:39:2D:86:91:97:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZnKfnQeG9ooezVxakrw5LYaRl14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/ZnKfnQeG9ooezVxakrw5LYaRl14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/ZnKfnQeG9ooezVxakrw5LYaRl14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:7e:a2:39:f0:e7:e5:f2:03:c3:37:60:3e:52:f1:f6:b6:19:
50:1c:e2:a1:42:26:14:95:a6:cf:ab:ce:6a:e3:88:52:b1:f8:
82:8f:1f:3b:cc:c0:64:12:31:d9:bc:66:20:ce:c7:46:08:5a:
cb:7c:33:d4:25:2e:29:77:81:a5:78:93:08:e9:25:64:5e:78:
bb:93:1f:43:07:20:65:3f:05:eb:68:81:2d:e3:ef:b0:f5:60:
76:55:ac:41:c7:86:c1:8f:0c:ee:f2:01:88:31:5d:f9:e0:6d:
0b:5b:ac:98:ef:4f:9e:b6:6e:ad:f0:2b:0f:9d:63:64:00:d5:
89:81:cd:db:24:2e:f4:21:79:0c:f7:82:a8:5a:52:ef:c4:25:
24:25:f6:dd:47:96:09:2e:52:21:8e:27:d9:c6:52:9e:20:72:
d9:92:be:01:54:a5:d4:34:d8:f2:ae:cf:79:88:97:9a:db:28:
00:18:65:31:84:73:0d:2e:67:b7:04:ff:bb:1e:5f:12:a6:52:
1b:5c:a1:39:3d:59:b2:3d:f0:e0:63:b2:56:27:5e:f9:85:9d:
37:e3:9f:1c:ca:dd:5b:3c:e0:8d:a2:43:0d:80:e2:98:81:ad:
bf:71:7b:5e:88:7d:62:d5:99:0a:6f:65:f5:c0:fe:08:bb:90:
b4:18:85:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 18:47:47 2026 by rpki-client