Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.mft
File: z9s9kEs0RAVGtiQdeJTZMwC8vSg.mft (raw, json)
Hash identifier: 5nVG4c4YNkxLZxc+EOjUIHeoYlAnI76VNve2BEzuwqQ=
Subject key identifier: 01:E5:0A:DA:6F:0B:33:BC:25:A9:30:1E:4B:0D:72:7C:8B:C0:53:BF
Authority key identifier: CF:DB:3D:90:4B:34:44:05:46:B6:24:1D:78:94:D9:33:00:BC:BD:28
Certificate issuer: /CN=cfdb3d904b34440546b6241d7894d93300bcbd28
Certificate serial: 019E3184FF9B94142999B1F27A5077AEDFD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z9s9kEs0RAVGtiQdeJTZMwC8vSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.mft
Manifest number: 0FAD
Signing time: Sat 16 May 2026 16:01:00 +0000
Manifest this update: Sat 16 May 2026 16:01:00 +0000
Manifest next update: Sun 17 May 2026 16:01:00 +0000
Files and hashes: 1: BcIjFBUMP6CBeWgUBi0kiP8mMD4.roa (hash: AnrLYQrWg/R3TPt/tXnLy7bKSyCDh8qfOknLsoHKVr0=)
2: tt8_4epx4fUU-t0TnlM9j9Sy8Gc.roa (hash: LFx80Ot89ti4/nAcgN280XkSiewCdAO+iihbkS/s85Y=)
3: z9s9kEs0RAVGtiQdeJTZMwC8vSg.crl (hash: lHVQpm2tLf50FsVrAvd/FSGNVLOl+WupddM6dnm2wGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/z9s9kEs0RAVGtiQdeJTZMwC8vSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:84:ff:9b:94:14:29:99:b1:f2:7a:50:77:ae:df:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfdb3d904b34440546b6241d7894d93300bcbd28
Validity
Not Before: May 16 16:01:00 2026 GMT
Not After : May 17 16:01:00 2026 GMT
Subject: CN=01e50ada6f0b33bc25a9301e4b0d727c8bc053bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ce:fd:ad:3d:b9:e5:c2:54:c5:f4:da:53:d5:
05:a7:ce:7e:67:7d:10:51:a3:18:34:d5:07:35:50:
e9:4f:31:97:53:77:21:61:5c:c2:03:76:13:7c:fe:
bf:30:e7:7c:cb:35:17:47:1b:7f:d0:48:83:df:c7:
b1:2f:42:e4:27:95:ff:76:1d:db:f2:e2:5c:8b:3d:
79:17:23:a6:41:60:ae:a7:80:c5:08:3a:d2:5e:3b:
b8:74:7d:ec:8e:d6:d3:ae:f7:69:f9:6a:4c:a7:db:
0e:60:66:37:3f:da:85:d7:76:82:2e:99:37:51:52:
c3:ee:aa:54:dc:59:26:c4:01:59:43:b1:b7:a1:3e:
49:d5:d0:1b:01:cf:b4:46:94:cd:a5:14:6b:f6:e2:
6d:f1:e3:77:3f:92:a1:98:3d:d0:78:e7:d9:dd:89:
2e:e7:83:6d:2d:18:d7:23:b0:6a:85:56:42:93:85:
95:4d:86:33:78:e1:26:58:f7:02:a9:d2:ee:89:b2:
a3:c8:52:6d:72:cc:c4:79:64:f5:5b:85:ce:01:e9:
02:86:93:3f:68:2d:43:fb:fc:45:13:33:0b:0f:74:
36:64:21:99:2a:34:84:a2:c6:d6:58:05:81:0e:9f:
d1:d5:1f:7d:d8:9d:ea:25:9c:1d:c5:36:12:c5:30:
b7:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:E5:0A:DA:6F:0B:33:BC:25:A9:30:1E:4B:0D:72:7C:8B:C0:53:BF
X509v3 Authority Key Identifier:
keyid:CF:DB:3D:90:4B:34:44:05:46:B6:24:1D:78:94:D9:33:00:BC:BD:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9s9kEs0RAVGtiQdeJTZMwC8vSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:d4:4a:f5:92:e5:c9:65:dd:e4:17:11:f8:28:b7:77:e3:bd:
32:aa:78:63:9c:b6:90:68:6c:95:ec:1e:1d:8e:3b:2b:ce:cd:
0c:dd:77:e1:98:b9:3f:d1:d8:5c:f5:41:5e:c8:84:37:03:aa:
98:3e:45:45:48:f0:cf:9e:b4:0b:6d:b1:b9:13:c7:92:5b:ae:
14:b9:3b:e3:cc:d8:5e:03:48:e9:7e:b7:0b:d1:ce:2a:53:4b:
d2:fa:fc:40:f5:f2:46:e5:0e:14:de:ae:c4:38:30:03:07:25:
40:13:5c:30:cf:5e:67:ae:c4:ee:30:aa:65:c1:b1:12:6d:58:
27:3f:42:3b:d1:bf:9e:f7:b6:d1:c9:f0:f0:5e:d9:0f:d0:45:
04:ed:71:0b:d9:c1:65:1a:dd:67:19:95:9f:b7:ae:af:85:ad:
32:6d:67:3f:3b:e1:50:b6:d4:2a:85:0e:4d:0e:eb:75:3a:13:
0f:0b:d5:22:c3:12:14:e7:fc:54:5b:5a:d5:c6:51:8f:15:f6:
c3:60:5a:75:ec:79:90:17:bd:ac:8c:7c:b1:dd:20:25:56:6f:
61:29:5e:9b:61:e6:5b:4d:6e:6c:af:8d:54:0a:e7:e4:1b:8d:
65:19:2a:36:9b:f1:7e:1d:b0:64:e8:29:2c:2e:ba:11:52:d4:
2f:62:86:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 23:29:30 2026 by rpki-client