Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/zsOzR6IWvEN7C9TPC8jNpl6MLTs.mft
File: zsOzR6IWvEN7C9TPC8jNpl6MLTs.mft (raw, json)
Hash identifier: +0aPHtRQDSFlho5tFBI3VZ4jZRjBWrZ+XD0VBMXU6v4=
Subject key identifier: AF:61:48:52:DF:CC:9D:F2:8D:12:82:05:0B:BF:AB:9C:6D:90:3E:A4
Authority key identifier: CE:C3:B3:47:A2:16:BC:43:7B:0B:D4:CF:0B:C8:CD:A6:5E:8C:2D:3B
Certificate issuer: /CN=cec3b347a216bc437b0bd4cf0bc8cda65e8c2d3b
Certificate serial: 019E4E0EB33A278BCABBF5ACBD0D0A33F643
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsOzR6IWvEN7C9TPC8jNpl6MLTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/zsOzR6IWvEN7C9TPC8jNpl6MLTs.mft
Manifest number: 1922
Signing time: Fri 22 May 2026 05:00:46 +0000
Manifest this update: Fri 22 May 2026 05:00:46 +0000
Manifest next update: Sat 23 May 2026 05:00:46 +0000
Files and hashes: 1: 1-MPmKwveaNevahCbJELRJOmxcEw.roa (hash: SJAbLycNC0JaVjQXy09rkhGA2yxjxemr+0WDUIZ9wv4=)
2: gOiN6DluQXSd3jleMbJxQUVj3SI.roa (hash: GYaC97wnCi+3xBKerwHYFT87pRuyzEPoseArfTTU9ys=)
3: rmssw7RMnHd1ZqcXua4Brefm154.roa (hash: fNpjAb4SqWl1UnQLJ2UF8i8M94XY4XErflTP+LbF0cQ=)
4: t6Cqn8bbFUBARYys1rSXQI-Qv_k.roa (hash: Qp3ObnIfU6K60CvbQfGVhKkJzOZmcYgVUzn5j0R02Vw=)
5: zsOzR6IWvEN7C9TPC8jNpl6MLTs.crl (hash: 5SKSD6plYeR6dvPwWUH+MEthhUtWzwg+HvHlNdlJONU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/zsOzR6IWvEN7C9TPC8jNpl6MLTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/zsOzR6IWvEN7C9TPC8jNpl6MLTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/zsOzR6IWvEN7C9TPC8jNpl6MLTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 May 2026 05:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4e:0e:b3:3a:27:8b:ca:bb:f5:ac:bd:0d:0a:33:f6:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec3b347a216bc437b0bd4cf0bc8cda65e8c2d3b
Validity
Not Before: May 22 05:00:46 2026 GMT
Not After : May 23 05:00:46 2026 GMT
Subject: CN=af614852dfcc9df28d1282050bbfab9c6d903ea4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c4:55:24:93:f7:7c:19:00:51:bc:25:35:d8:
13:78:47:18:78:9c:3c:1d:22:1a:48:32:48:ca:3d:
1f:f5:bd:ef:97:94:47:da:db:22:1d:2e:c2:d1:3e:
93:a1:7f:5c:47:f1:9e:26:d5:62:1c:a6:06:42:20:
91:79:da:f2:59:88:61:fe:b4:d7:87:2e:c0:b9:50:
f0:07:e8:4c:63:9e:05:97:b9:dd:88:0b:75:41:48:
c7:65:1e:05:b9:ad:0d:b9:ab:df:f2:93:d7:5b:ba:
55:f8:1e:9b:1f:6b:a3:14:08:70:dc:da:f2:66:07:
f1:34:e0:6e:d7:8b:56:fe:23:7d:bc:86:73:43:d1:
ef:f0:dd:46:a5:8b:b7:87:62:02:6e:71:85:82:ed:
37:bc:f6:5f:18:93:cf:b4:76:8d:54:35:57:ae:d0:
8f:aa:d4:83:6f:0b:d6:0c:58:c7:d5:e9:12:25:c3:
7a:94:76:25:63:f3:cf:4c:bf:e0:78:a3:61:c6:c1:
e4:4c:fd:1d:de:c5:b5:61:33:52:e8:56:ae:25:37:
73:56:be:1d:cc:d7:8a:fb:5a:dd:65:5f:96:90:1e:
cc:a0:e4:af:62:b7:ec:fe:f7:d6:e1:a9:87:b2:af:
ce:2a:77:ff:ec:59:8e:86:17:1d:87:9b:d2:94:76:
9a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:61:48:52:DF:CC:9D:F2:8D:12:82:05:0B:BF:AB:9C:6D:90:3E:A4
X509v3 Authority Key Identifier:
keyid:CE:C3:B3:47:A2:16:BC:43:7B:0B:D4:CF:0B:C8:CD:A6:5E:8C:2D:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsOzR6IWvEN7C9TPC8jNpl6MLTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/zsOzR6IWvEN7C9TPC8jNpl6MLTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/zsOzR6IWvEN7C9TPC8jNpl6MLTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:86:31:ac:76:d2:0e:16:f4:f4:d2:2f:ba:72:a1:a9:9d:e9:
9b:5b:71:b3:c3:a1:43:ae:05:0e:0a:97:79:5b:61:3d:8e:ef:
a0:32:81:1f:af:fd:d2:7f:7d:e1:d0:bb:91:0a:6c:d5:d9:30:
1e:93:43:c6:e1:33:7c:ef:ac:c4:89:1b:2e:cd:dc:df:c8:0f:
ab:3d:3b:3e:3f:65:07:a1:b8:c7:67:07:82:c2:1a:1b:ed:fc:
f9:96:d4:a9:96:08:23:3c:74:ef:d0:d5:63:4b:b8:b1:35:69:
48:02:47:83:c5:93:3e:28:c1:3d:f5:6f:2d:d2:e8:40:6b:13:
f0:36:6a:d7:27:85:69:ca:0f:b5:d2:3e:2c:89:fc:39:84:fe:
64:2a:45:1e:71:d4:90:c1:92:4a:ab:21:8b:be:11:5b:70:8d:
30:b7:fb:f3:91:d1:92:aa:36:b6:d2:33:fa:0d:92:e5:5d:4f:
d1:f0:ca:28:d2:2c:28:09:d4:71:9a:c8:7a:44:87:81:cc:ca:
cf:27:f6:db:2e:a8:2f:d6:dd:1c:65:c1:d5:aa:7a:a2:cf:05:
82:17:04:57:bc:fd:d5:f1:a4:b8:bc:c8:bf:0a:cb:26:e3:51:
60:cf:19:ab:e9:69:8f:0d:dc:5b:42:b8:dc:76:bb:8a:ee:25:
96:c9:32:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 15:07:31 2026 by rpki-client