Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.mft
File: zO__wVqDo4vdqM_hIMM1Jn3OUPM.mft (raw, json)
Hash identifier: ZBWG+xexWD9G7/qk8jzkR11blfQCM5QAo9vAJC1YSAM=
Subject key identifier: A1:7F:33:C5:02:54:35:6E:79:EA:1D:9B:8A:0D:F5:A9:8C:D5:81:63
Authority key identifier: CC:EF:FF:C1:5A:83:A3:8B:DD:A8:CF:E1:20:C3:35:26:7D:CE:50:F3
Certificate issuer: /CN=ccefffc15a83a38bdda8cfe120c335267dce50f3
Certificate serial: 019DECA44F931B77D3A98799272988FE250D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zO__wVqDo4vdqM_hIMM1Jn3OUPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.mft
Manifest number: 0925
Signing time: Sun 03 May 2026 07:01:24 +0000
Manifest this update: Sun 03 May 2026 07:01:24 +0000
Manifest next update: Mon 04 May 2026 07:01:24 +0000
Files and hashes: 1: aESuuALkp9R98yDiNUY5nveL4-o.roa (hash: o135yeh0bwtH5IHdNJMNH9c/+RcrghX/j14puM1j2sk=)
2: zO__wVqDo4vdqM_hIMM1Jn3OUPM.crl (hash: +JyDHYSxDO9uhrsMUV/PO2XTPKQKbwL9l0r16nN6i5s=)
3: zp6kT4fjph_A7Z-y494w10c-4u0.roa (hash: WOnZMPb4q3t7/YEohAO+g25GuBKKPvaAblQVDeWj5K0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zO__wVqDo4vdqM_hIMM1Jn3OUPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 May 2026 05:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ec:a4:4f:93:1b:77:d3:a9:87:99:27:29:88:fe:25:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccefffc15a83a38bdda8cfe120c335267dce50f3
Validity
Not Before: May 3 07:01:24 2026 GMT
Not After : May 4 07:01:24 2026 GMT
Subject: CN=a17f33c50254356e79ea1d9b8a0df5a98cd58163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6a:41:36:e7:18:ae:bb:3d:0d:6f:28:93:21:
dc:82:d3:7f:d2:5d:83:a7:63:9b:0d:af:9a:56:4f:
07:d8:d6:bc:26:8e:dd:d1:70:02:3a:2d:94:17:8d:
87:d6:8d:ad:39:b4:a9:29:f0:25:fa:fa:25:83:67:
d5:ea:2d:d6:f7:41:1f:8e:79:31:a0:1c:d4:85:9b:
7d:f0:e7:cd:79:3d:a0:68:2a:7e:b4:cb:6d:fb:33:
6d:ee:bb:d5:80:f8:42:75:5e:82:33:76:79:d7:b2:
88:c0:d9:89:38:e4:2a:21:6e:b5:46:6d:95:80:9e:
ae:aa:8e:84:2b:08:88:82:ec:32:92:f0:66:69:d2:
f3:d8:b1:7c:59:a3:56:6c:09:fe:a1:56:b8:ce:1b:
a1:bf:60:d7:c0:7f:00:79:f4:38:7e:bd:46:ef:98:
8f:e7:f8:08:03:0f:fc:6c:e1:52:7b:38:89:45:ca:
a7:f4:59:88:66:31:2b:7f:4b:87:6e:de:be:7d:98:
8a:4f:13:e2:71:54:15:43:4a:69:4c:ba:79:e0:d6:
8f:84:61:2e:c0:1b:0e:fc:a0:8f:51:ea:b9:6e:30:
bd:11:d5:ed:65:f8:ca:fc:3c:3c:01:fd:5c:17:ce:
6f:2e:b5:60:34:15:c1:a2:67:12:ae:60:e6:32:30:
b4:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:7F:33:C5:02:54:35:6E:79:EA:1D:9B:8A:0D:F5:A9:8C:D5:81:63
X509v3 Authority Key Identifier:
keyid:CC:EF:FF:C1:5A:83:A3:8B:DD:A8:CF:E1:20:C3:35:26:7D:CE:50:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zO__wVqDo4vdqM_hIMM1Jn3OUPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:57:3b:d7:a6:ba:0d:16:f1:df:39:4b:16:cb:52:52:04:07:
cc:81:0b:9a:bc:26:c2:7f:32:73:3f:c2:10:18:d9:53:4f:47:
a7:17:46:fe:46:57:46:9b:ab:34:81:a2:ab:c7:62:14:8f:eb:
c9:55:59:58:95:08:8a:17:f1:ab:67:15:3f:5b:fd:5e:08:1b:
b8:f8:12:03:30:e1:4d:45:86:a4:71:8e:0b:91:3e:cc:50:13:
06:ab:1d:70:68:e6:49:70:1e:75:53:7c:06:ff:0b:67:d7:a0:
38:1d:37:24:84:64:5d:77:31:b1:84:f4:de:89:09:6b:c2:ec:
f4:7e:20:87:61:ea:7b:8f:5a:a2:7e:a6:b9:f7:b2:a7:78:d7:
80:07:e8:00:09:05:6e:61:26:b1:a1:c2:3c:bf:c3:27:4c:1a:
86:88:0a:f0:44:4f:f9:80:4e:27:3d:7f:65:08:ea:bb:14:2f:
5c:b6:96:d5:ae:05:c0:48:7a:2a:25:48:88:31:cd:5d:c7:36:
6d:bc:e2:e0:66:2c:1d:13:56:cf:a5:2f:a7:a8:06:94:4c:09:
f0:a9:60:14:24:20:eb:9a:8c:f0:c7:79:e0:22:90:15:84:1f:
7f:be:10:3d:5b:7a:c6:84:14:7b:68:db:fe:ee:7f:a3:ab:5f:
5f:ed:a4:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 16:15:01 2026 by rpki-client