Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/zepK3ugLBlGc5A3T0T8oup9XWVc.mft
File: zepK3ugLBlGc5A3T0T8oup9XWVc.mft (raw, json)
Hash identifier: BLDOL4jQueHkOyUYiwzBhSPtBG7yosq2xaj75WP6wKQ=
Subject key identifier: D3:F8:E3:89:D1:54:98:3E:FB:AD:6F:C0:35:47:91:0C:36:7C:06:9B
Authority key identifier: CD:EA:4A:DE:E8:0B:06:51:9C:E4:0D:D3:D1:3F:28:BA:9F:57:59:57
Certificate issuer: /CN=cdea4adee80b06519ce40dd3d13f28ba9f575957
Certificate serial: 019E4EEB5CF3E9B741EBEF64A3DBBC1FD657
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zepK3ugLBlGc5A3T0T8oup9XWVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/zepK3ugLBlGc5A3T0T8oup9XWVc.mft
Manifest number: 1630
Signing time: Fri 22 May 2026 09:01:48 +0000
Manifest this update: Fri 22 May 2026 09:01:48 +0000
Manifest next update: Sat 23 May 2026 09:01:48 +0000
Files and hashes: 1: q_Sdx_pDux5HG_B-3KML3ZxV1Q4.roa (hash: ht/8yca5f/4MvUCuC03a4MjP5eq5Ql1KG2x7zVYULEQ=)
2: v8cGXi_NSEn4R2Pj8ik0gEWzS6g.roa (hash: Tc7POOVIwZMXLz0qNFWoVFFcyKsqMyAM9BmZSJShLfc=)
3: zepK3ugLBlGc5A3T0T8oup9XWVc.crl (hash: QzE0q4RZ4Ip2RvWk/vM7Wi/iWEzE491/Lh5gRFhmHNA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/zepK3ugLBlGc5A3T0T8oup9XWVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/zepK3ugLBlGc5A3T0T8oup9XWVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zepK3ugLBlGc5A3T0T8oup9XWVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 May 2026 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4e:eb:5c:f3:e9:b7:41:eb:ef:64:a3:db:bc:1f:d6:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdea4adee80b06519ce40dd3d13f28ba9f575957
Validity
Not Before: May 22 09:01:48 2026 GMT
Not After : May 23 09:01:48 2026 GMT
Subject: CN=d3f8e389d154983efbad6fc03547910c367c069b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:16:34:3a:c7:a5:a6:04:d5:b4:01:1f:60:76:
02:5f:ea:01:aa:14:04:ff:f5:2e:4c:06:a2:1e:05:
ba:d7:eb:63:e2:ef:8e:44:ba:9a:2f:a0:df:b5:1d:
d2:63:81:e0:12:f8:17:ce:87:7d:21:b3:3f:c2:3b:
d6:97:86:d2:1e:47:dc:f5:af:55:68:b9:08:2e:4e:
ec:7f:8d:3e:2b:7d:3b:a8:c3:6a:df:21:7e:49:88:
31:ff:e1:e9:33:31:d9:0f:e6:85:b9:8f:b8:59:cf:
eb:87:f8:f7:26:2b:6f:bd:7f:4b:83:00:95:93:a2:
c5:e8:61:1e:77:56:78:7b:66:a0:63:7d:4d:23:ea:
a5:f4:76:d9:c9:b6:bb:da:ab:8d:1a:a8:34:84:f5:
06:1a:14:39:3a:ca:27:2c:07:a0:e2:41:c2:49:81:
de:02:72:f5:02:59:28:73:71:6f:4f:75:a8:bd:63:
cd:b6:45:37:78:4a:71:e1:98:db:bb:7f:ad:83:a1:
64:e7:68:a4:24:be:dd:36:c3:3f:45:06:e8:38:57:
5c:68:39:db:5a:dc:54:33:2b:72:2f:08:3e:5d:98:
a7:a0:7c:7d:c0:a6:b9:08:a7:7b:4b:59:52:b5:cf:
70:02:2a:83:46:fb:c3:03:9e:97:b9:6a:84:6f:b9:
be:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:F8:E3:89:D1:54:98:3E:FB:AD:6F:C0:35:47:91:0C:36:7C:06:9B
X509v3 Authority Key Identifier:
keyid:CD:EA:4A:DE:E8:0B:06:51:9C:E4:0D:D3:D1:3F:28:BA:9F:57:59:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zepK3ugLBlGc5A3T0T8oup9XWVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/zepK3ugLBlGc5A3T0T8oup9XWVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/zepK3ugLBlGc5A3T0T8oup9XWVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:39:08:84:39:09:37:e7:85:c9:c4:9a:01:c4:f2:15:34:26:
c0:ea:0c:c2:3a:b2:9c:f4:dc:3c:5b:db:56:e9:e8:d1:42:60:
52:8c:05:ea:b7:f6:17:25:85:56:34:55:65:48:39:2c:ad:17:
67:f3:ae:65:3b:8c:e1:92:5d:6d:80:a8:cb:f6:e6:67:27:6e:
67:9a:1d:40:cc:93:d0:d9:f5:7c:e2:26:43:0e:0c:de:37:39:
b0:d8:91:a5:f9:e8:48:4c:a7:5c:8f:c3:ed:09:69:40:12:0e:
c7:31:bf:18:ca:51:57:24:96:32:1a:1f:c4:e0:ca:5a:bb:4f:
81:b6:e9:41:1f:d6:94:9b:26:7b:68:3f:e5:f8:1e:80:59:c3:
25:9b:39:22:15:43:42:d0:f8:b9:d0:d5:f3:b5:6b:56:24:0c:
61:7a:80:b4:e7:6b:c1:79:24:d2:f2:29:39:8c:ea:59:e7:09:
a6:1d:78:55:07:86:c9:18:d3:53:00:ea:f8:6a:38:cc:bb:2f:
61:dd:7b:7c:21:25:d5:2d:88:e7:ed:f2:78:e2:1e:6f:c6:c8:
f5:d1:0a:1d:27:ff:2a:ad:19:ab:96:3f:f6:4d:f0:f6:cb:3a:
d4:ea:c5:31:32:07:19:79:c9:db:42:ce:f7:f3:4f:de:b4:f1:
5c:07:02:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 15:07:31 2026 by rpki-client