Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft
File: ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft (raw, json)
Hash identifier: Rt717WdRazpVHY7Htqw3Tja9Q++vxfOWw9gNXJ6pazE=
Subject key identifier: F1:99:04:50:98:74:E6:7F:77:D1:C0:E6:B7:1A:27:98:44:13:34:9A
Authority key identifier: 65:A4:24:CE:E2:FD:B0:07:2B:54:14:38:D9:13:D2:66:36:A9:B8:8B
Certificate issuer: /CN=65a424cee2fdb0072b541438d913d26636a9b88b
Certificate serial: 019E284ABF235B4F67D64F59F251FEAADC90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZaQkzuL9sAcrVBQ42RPSZjapuIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft
Manifest number: 191B
Signing time: Thu 14 May 2026 21:00:47 +0000
Manifest this update: Thu 14 May 2026 21:00:47 +0000
Manifest next update: Fri 15 May 2026 21:00:47 +0000
Files and hashes: 1: DKRX12LW62Pwhd7lkkBTAIcEFmg.roa (hash: JQDtg/PbgFXKpQJ1cWIs8ZbTBrSDwWrj/eo/b+RXeDU=)
2: ZaQkzuL9sAcrVBQ42RPSZjapuIs.crl (hash: j0lNttdw9ZHNpmuo9GhHFBK710J4HvaAaTgt12SiFEc=)
3: f56SXyzVaFxPipkSbWjQspBnG6k.asa (hash: kTkK/KuPdlPU1v4Iqn9nm0PLfpF6FLDnJnaGt4nEmLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZaQkzuL9sAcrVBQ42RPSZjapuIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 15 May 2026 21:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:28:4a:bf:23:5b:4f:67:d6:4f:59:f2:51:fe:aa:dc:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65a424cee2fdb0072b541438d913d26636a9b88b
Validity
Not Before: May 14 21:00:47 2026 GMT
Not After : May 15 21:00:47 2026 GMT
Subject: CN=f19904509874e67f77d1c0e6b71a27984413349a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:00:b3:dd:5a:9d:39:91:61:f4:24:c0:08:98:
e7:a7:26:42:44:77:d6:00:5d:6a:33:a9:07:2c:2f:
1f:a2:51:86:ed:76:46:71:e3:58:0a:f8:50:a5:c8:
0e:bc:a2:4e:0e:43:54:8e:03:e7:72:61:98:cc:a1:
02:9f:4a:b9:9f:08:d3:2c:26:29:3e:b0:2e:79:8d:
28:22:32:25:cc:00:dd:31:7a:94:6f:6b:d9:9b:f5:
d7:f1:df:51:be:f3:61:87:b6:a4:96:24:50:6d:63:
19:be:1d:dc:e6:39:81:13:95:74:1c:10:83:58:76:
b4:20:32:b9:ad:de:bc:43:e2:aa:9d:22:65:e4:53:
64:2e:1e:b3:84:0c:b7:07:9f:72:78:93:60:a6:46:
a5:cc:4c:c1:99:fa:5a:41:b0:77:08:92:e8:9b:d6:
34:a8:ec:39:2e:40:ab:be:62:82:cd:54:a7:47:81:
fb:78:d1:68:2b:ba:b1:c1:87:cc:ce:ac:ee:92:70:
4e:54:0d:b2:2f:37:e2:61:3d:7c:3d:f7:5c:b0:36:
e9:28:e5:b8:27:40:5f:00:fa:e0:ee:62:c8:32:e5:
5f:5d:17:e6:5b:1a:58:82:9a:ca:97:60:ec:f9:ed:
85:5a:b5:de:71:54:52:05:d6:97:b0:49:a2:89:3e:
46:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:99:04:50:98:74:E6:7F:77:D1:C0:E6:B7:1A:27:98:44:13:34:9A
X509v3 Authority Key Identifier:
keyid:65:A4:24:CE:E2:FD:B0:07:2B:54:14:38:D9:13:D2:66:36:A9:B8:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZaQkzuL9sAcrVBQ42RPSZjapuIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e2:bf:a2:01:b1:7e:b9:0c:4c:c6:71:9f:14:ba:69:4d:8b:c4:
02:aa:d3:86:7f:8d:a8:50:ef:66:d7:93:a2:4b:02:69:13:a2:
66:b7:68:b3:8f:cc:c4:e7:a2:dc:2a:8e:83:e8:9a:65:5f:f5:
67:d0:ef:c9:d1:d1:e4:7e:d1:3f:1c:0c:fa:f2:b2:17:b1:82:
42:68:4c:4c:97:c9:80:37:37:3e:8b:c2:3d:df:5d:b7:13:a9:
ce:59:98:7c:6f:4f:71:32:34:1c:6f:e1:a7:35:a7:f9:4e:70:
f6:e6:d7:c6:4b:46:db:a6:69:3f:34:82:14:f1:3f:20:71:b6:
53:fd:ec:1f:b8:0e:70:03:00:ff:ca:53:00:ed:c7:a6:ab:a3:
ab:ac:81:ff:ef:45:f4:45:cf:c4:9e:d4:00:76:14:cd:3c:c6:
5a:78:e6:3c:7f:a7:b2:4b:6f:3e:e9:47:07:83:0c:d9:93:eb:
65:2d:d5:db:a6:02:85:18:25:5b:43:cd:95:52:61:f4:57:1f:
f6:4f:36:de:3f:9d:71:47:59:3e:d8:4f:6c:ca:c6:ea:f5:09:
7a:d9:9f:bf:3d:c5:fd:3c:c4:12:cb:64:4c:d8:cd:69:a6:f4:
3f:68:a9:00:49:a7:8b:de:1f:9a:32:fb:fc:7e:ed:fe:22:93:
a9:b3:df:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:58:38 2026 by rpki-client