Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.mft
File: zr9l4AadvMdre1VujB1wWInfJ-k.mft (raw, json)
Hash identifier: ju41mafAci9mIsYSUXKTp3BhoZkFT/ryHL4WQoodgFw=
Subject key identifier: C1:04:50:69:8A:32:36:55:5C:16:99:39:E5:0E:45:59:64:13:83:30
Authority key identifier: CE:BF:65:E0:06:9D:BC:C7:6B:7B:55:6E:8C:1D:70:58:89:DF:27:E9
Certificate issuer: /CN=cebf65e0069dbcc76b7b556e8c1d705889df27e9
Certificate serial: 019E2927A99DD98A8F7A5F14ABCC02BB09D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zr9l4AadvMdre1VujB1wWInfJ-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.mft
Manifest number: 191B
Signing time: Fri 15 May 2026 01:02:05 +0000
Manifest this update: Fri 15 May 2026 01:02:05 +0000
Manifest next update: Sat 16 May 2026 01:02:05 +0000
Files and hashes: 1: kLUG7I7zaleUboTqrqB19XXsTkQ.roa (hash: cKKeB+BIlOYQDOr355c8ocGK4xiw2EqpjCd7kzeueqs=)
2: ku0WTxDvPv2BRSWmhVXxJBzi0EM.roa (hash: gVb5IHgLpvS8ffqO/hNhQNz/nK0f5pvRNLYLZEY7RQs=)
3: zr9l4AadvMdre1VujB1wWInfJ-k.crl (hash: Vd+pOXxTotArDZmCzVCaImDQmhONWNuRNHg3uFTgLiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/zr9l4AadvMdre1VujB1wWInfJ-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 01:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:29:27:a9:9d:d9:8a:8f:7a:5f:14:ab:cc:02:bb:09:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cebf65e0069dbcc76b7b556e8c1d705889df27e9
Validity
Not Before: May 15 01:02:05 2026 GMT
Not After : May 16 01:02:05 2026 GMT
Subject: CN=c10450698a3236555c169939e50e455964138330
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:11:b3:5d:6d:15:38:a8:ae:d0:ff:7b:1d:d0:
8d:e0:4b:a2:4f:a5:50:4f:ba:a5:22:b4:d1:b5:89:
a0:8e:45:83:03:2f:3f:aa:44:f7:6e:e6:b4:96:0f:
9b:e7:ae:4b:02:31:d5:2a:a7:07:ed:9b:31:23:61:
6f:27:8d:65:22:e0:d3:00:ca:c5:88:c7:5a:82:94:
0d:67:2b:5d:94:a1:0c:20:68:cf:42:33:11:3c:4f:
31:66:57:15:83:b1:4c:c2:83:57:31:16:51:5e:14:
fe:bf:3b:e2:f9:56:b0:8b:18:44:e3:f2:e6:ee:2b:
65:51:da:96:43:cc:68:6b:66:cd:6b:71:60:85:56:
15:41:0b:21:9e:a2:ea:0e:8c:bd:4b:da:73:18:d5:
4e:08:8b:4c:f9:6e:69:1e:8b:c1:17:74:e4:16:c2:
8f:77:58:42:48:bc:c0:80:ed:6c:4c:98:f5:1f:4d:
6a:35:33:a7:e0:e7:f3:e7:58:a7:41:8b:40:62:fd:
9e:8f:e9:06:a6:93:3f:33:f7:28:34:2d:e7:e4:e2:
94:74:7b:77:42:11:43:46:a3:ec:96:a1:25:f6:db:
4d:bd:9c:65:ab:a4:b2:22:a2:b1:1b:75:da:6c:34:
dc:02:4d:b5:88:ca:ee:46:fd:35:a0:15:c0:0d:66:
c2:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:04:50:69:8A:32:36:55:5C:16:99:39:E5:0E:45:59:64:13:83:30
X509v3 Authority Key Identifier:
keyid:CE:BF:65:E0:06:9D:BC:C7:6B:7B:55:6E:8C:1D:70:58:89:DF:27:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zr9l4AadvMdre1VujB1wWInfJ-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:d1:5e:b4:8e:d9:a4:cd:7d:f5:42:ca:21:b6:e5:35:0e:a1:
1f:ae:11:09:33:b2:1d:c8:a0:f4:fd:bb:08:4d:c3:3c:c5:e9:
24:52:dc:18:29:7e:d0:0d:83:92:0b:b8:23:dd:dc:61:88:6e:
79:50:2a:4e:9a:9f:37:ff:31:0a:57:03:41:94:57:96:5b:df:
ad:f8:70:a3:be:46:60:90:92:2f:b9:6e:52:42:97:1c:41:cd:
c7:33:34:1d:a9:4f:ea:b7:ea:be:49:b8:30:36:31:8c:93:15:
6e:41:7d:e4:2f:18:fe:28:fe:4b:1b:01:f7:de:d9:a6:b7:0f:
cb:1b:e7:78:82:2b:d5:7d:86:f5:b5:a2:23:8c:b5:00:d4:e3:
ba:2c:ef:b2:15:56:4b:ba:ad:cc:b5:5f:dd:a8:af:42:16:38:
82:84:5a:5f:25:4c:e2:32:8a:ce:a4:3a:3e:ac:8f:2d:55:f3:
e7:75:43:bb:fa:d9:3c:94:b9:df:31:e1:3c:5d:b2:87:a3:b4:
55:7d:21:1e:bf:b2:33:ec:e4:c2:3d:1e:33:5c:ae:c5:b1:c3:
f2:9b:31:a7:0c:bc:cb:4c:dc:56:14:a4:30:e5:82:da:9f:f9:
ae:d2:ce:a0:6b:4f:6c:25:e4:b3:41:f8:97:62:2a:ee:5d:58:
41:95:79:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 11:15:39 2026 by rpki-client