Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/550bb2-5a50-4784-8dab-3d0e9fe01bd8/1/_zVCuU4Ii793ruGzOUIxUtrvXg0.mft
File: _zVCuU4Ii793ruGzOUIxUtrvXg0.mft (raw, json)
Hash identifier: evT8tCnWSPFaDQgXor6i3yjp2YiIif6iw+1hLNcNlMw=
Subject key identifier: 38:98:FC:1C:E6:B6:43:21:2C:53:B2:18:44:31:A4:F1:BD:1D:80:DF
Authority key identifier: FF:35:42:B9:4E:08:8B:BF:77:AE:E1:B3:39:42:31:52:DA:EF:5E:0D
Certificate issuer: /CN=ff3542b94e088bbf77aee1b339423152daef5e0d
Certificate serial: 019E2813F66E62ABC61C3B94E3B4B111D3F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zVCuU4Ii793ruGzOUIxUtrvXg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/550bb2-5a50-4784-8dab-3d0e9fe01bd8/1/_zVCuU4Ii793ruGzOUIxUtrvXg0.mft
Manifest number: 17
Signing time: Thu 14 May 2026 20:00:57 +0000
Manifest this update: Thu 14 May 2026 20:00:57 +0000
Manifest next update: Fri 15 May 2026 20:00:57 +0000
Files and hashes: 1: LXC_nzvi4Cb7lHD4Py9XKzLtC38.roa (hash: M58JQtuK6LdfZlu8eoP3dvPBwwWOzHNzghjNI4pN5m4=)
2: _zVCuU4Ii793ruGzOUIxUtrvXg0.crl (hash: ThOVz9BRRDayWkrWzMWKOI4g4+773a+Rq78TM9r7NcU=)
3: sFMMKvCe9CZKKs8XoYoiEAVRrxY.asa (hash: WxXfQ6M/fqCNSHpmJqIR75Y3bQRv0KhOqG6hp5lzbHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/550bb2-5a50-4784-8dab-3d0e9fe01bd8/1/_zVCuU4Ii793ruGzOUIxUtrvXg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/550bb2-5a50-4784-8dab-3d0e9fe01bd8/1/_zVCuU4Ii793ruGzOUIxUtrvXg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_zVCuU4Ii793ruGzOUIxUtrvXg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 15 May 2026 20:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:28:13:f6:6e:62:ab:c6:1c:3b:94:e3:b4:b1:11:d3:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff3542b94e088bbf77aee1b339423152daef5e0d
Validity
Not Before: May 14 20:00:57 2026 GMT
Not After : May 15 20:00:57 2026 GMT
Subject: CN=3898fc1ce6b643212c53b2184431a4f1bd1d80df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ec:09:79:2b:a4:42:f5:68:68:62:91:00:2b:
cc:f1:d7:69:2e:e7:c0:53:f6:a8:62:07:a8:a7:99:
f4:24:9e:4f:b4:93:e9:ee:c0:10:06:5a:5d:c9:00:
d2:30:66:c3:b6:88:4e:38:67:5f:ee:aa:03:2a:74:
88:01:be:f9:7c:29:31:93:60:61:1e:fb:8b:3d:b2:
e4:fe:47:36:c7:68:92:72:e2:15:c8:b7:90:32:f4:
1a:b3:a6:3d:86:20:1c:b4:3b:69:89:88:37:94:4f:
a9:43:ca:3d:9a:60:3f:14:24:57:1b:aa:26:b6:5b:
67:42:92:45:02:fa:90:11:25:b7:74:7c:a7:62:4f:
00:19:d7:2f:da:21:70:0f:23:96:8d:f9:40:e1:1d:
af:11:6b:67:52:35:69:1a:01:ac:07:84:dd:55:9e:
8c:d0:db:18:45:0a:91:6f:c8:8b:8a:a8:1c:cb:b1:
b7:23:41:d1:94:40:da:58:5e:0b:82:66:7d:89:e1:
bd:87:ef:f9:a4:d0:5e:64:9b:cb:1f:a9:8a:3a:60:
23:7a:1a:f6:3b:53:60:82:dd:ee:20:d3:c6:bc:1b:
c2:7f:c3:38:19:f5:08:96:50:bf:ec:f5:80:13:75:
e5:da:74:bd:bc:fc:a9:98:0b:e4:a6:21:77:db:01:
b3:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:98:FC:1C:E6:B6:43:21:2C:53:B2:18:44:31:A4:F1:BD:1D:80:DF
X509v3 Authority Key Identifier:
keyid:FF:35:42:B9:4E:08:8B:BF:77:AE:E1:B3:39:42:31:52:DA:EF:5E:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zVCuU4Ii793ruGzOUIxUtrvXg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/550bb2-5a50-4784-8dab-3d0e9fe01bd8/1/_zVCuU4Ii793ruGzOUIxUtrvXg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/550bb2-5a50-4784-8dab-3d0e9fe01bd8/1/_zVCuU4Ii793ruGzOUIxUtrvXg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:61:2d:42:1c:df:17:c0:16:ab:23:32:ca:fe:5c:0e:dd:45:
99:7e:fb:ae:35:9a:27:01:6d:95:af:57:73:8b:d9:b8:8b:f7:
c9:39:a0:2f:7a:ed:c2:31:63:6b:7c:8e:51:c0:6c:c9:9f:b1:
7b:62:2a:75:3f:4a:fa:37:e2:b5:36:12:58:3e:f1:29:90:9c:
a8:90:05:8b:23:08:29:94:44:0e:bc:ce:96:2d:11:41:14:6f:
c8:ac:08:e1:af:19:8b:49:30:ab:02:44:ef:dc:c5:a8:40:65:
60:74:0c:29:e0:bd:e2:48:f8:d2:ea:a1:dc:41:36:69:06:10:
e5:54:21:69:9c:33:a6:b7:fc:86:18:ff:19:a5:06:cc:13:22:
ed:20:c6:6f:bd:33:37:49:ee:45:d7:fc:e7:15:77:9d:6d:e7:
ad:9f:eb:d8:2d:9f:11:c7:5d:e0:69:c7:12:19:6b:d3:48:0c:
b7:46:c7:4c:df:a7:38:f8:ca:22:e6:77:79:63:3b:c8:c6:7a:
cb:d7:46:25:08:b0:03:69:8b:ae:55:62:d4:39:09:c0:c6:52:
8e:39:a4:8b:0d:4e:29:29:d3:fc:ad:41:96:da:9e:e0:27:d9:
22:91:ee:95:d5:e0:3c:bf:29:d5:40:2e:b1:12:76:1f:a6:f4:
87:1a:96:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:14:11 2026 by rpki-client