Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/178b02-948c-4624-97b8-e4e17e4b5180/1/ZnWfeo-QZy6oNTr00R1qxen9ggY.mft
File: ZnWfeo-QZy6oNTr00R1qxen9ggY.mft (raw, json)
Hash identifier: w7eUgM76CRJbT0ti/hyuqzJlVcHSxP+iWOFzvs04vXM=
Subject key identifier: F9:B8:AB:DA:A9:F4:54:C2:27:C5:A2:D8:D7:FC:3D:6B:3E:0F:1A:5A
Authority key identifier: 66:75:9F:7A:8F:90:67:2E:A8:35:3A:F4:D1:1D:6A:C5:E9:FD:82:06
Certificate issuer: /CN=66759f7a8f90672ea8353af4d11d6ac5e9fd8206
Certificate serial: 019DFA6020F208AA1B1D8B3708A2B1D3ED54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZnWfeo-QZy6oNTr00R1qxen9ggY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/178b02-948c-4624-97b8-e4e17e4b5180/1/ZnWfeo-QZy6oNTr00R1qxen9ggY.mft
Manifest number: 086D
Signing time: Tue 05 May 2026 23:01:37 +0000
Manifest this update: Tue 05 May 2026 23:01:37 +0000
Manifest next update: Wed 06 May 2026 23:01:37 +0000
Files and hashes: 1: X6aOcNp7OaJ0X_ZT-du_LuU0TCE.roa (hash: r5fWgTPjjmB31St0AmzLTssy0JP6/zDB0uGldcQoQt0=)
2: ZnWfeo-QZy6oNTr00R1qxen9ggY.crl (hash: 8LJAuQDg+uCFXI+T7+eu5hbmrHlDLtcGLbWdLkchEXU=)
3: tU70CLv_FnaoDz0xj6FPiJvGn-k.roa (hash: G4YFrMOaB3YYQfWSQNKXIK2SLKAYNELC+w3hU94N7bI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/178b02-948c-4624-97b8-e4e17e4b5180/1/ZnWfeo-QZy6oNTr00R1qxen9ggY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/178b02-948c-4624-97b8-e4e17e4b5180/1/ZnWfeo-QZy6oNTr00R1qxen9ggY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZnWfeo-QZy6oNTr00R1qxen9ggY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 22:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:fa:60:20:f2:08:aa:1b:1d:8b:37:08:a2:b1:d3:ed:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66759f7a8f90672ea8353af4d11d6ac5e9fd8206
Validity
Not Before: May 5 23:01:37 2026 GMT
Not After : May 6 23:01:37 2026 GMT
Subject: CN=f9b8abdaa9f454c227c5a2d8d7fc3d6b3e0f1a5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7e:93:d3:57:af:13:45:79:c5:6e:17:ff:d8:
03:5d:71:eb:b8:36:bb:9a:ab:67:b9:06:8f:2e:9d:
93:17:ff:19:2f:51:61:90:3b:d4:cb:f8:0d:c2:df:
d9:f2:e6:85:ee:90:3c:2c:44:40:0b:ab:15:f0:17:
e8:54:1b:48:24:88:f0:74:a4:9c:c2:92:3e:ad:16:
ed:fd:73:d2:4b:c3:37:25:4b:dd:be:87:4c:c4:54:
a5:62:9b:70:ce:f6:a2:2a:ed:20:c2:db:2c:89:89:
96:71:75:b4:04:ab:8a:6f:a3:14:b2:00:8c:dd:a9:
50:a7:3c:ba:33:88:df:3f:25:83:d1:7a:3d:d4:7c:
74:a2:78:8c:5b:62:dd:b7:8b:3e:cf:6d:e7:7c:a2:
c8:ca:95:95:d6:dd:a3:b1:40:d0:4f:93:3d:0f:b2:
6a:de:ad:43:b9:c6:ad:cc:78:29:6c:32:a0:42:49:
97:a9:ac:45:41:71:aa:26:7a:84:36:95:f9:32:26:
75:cb:6b:17:d1:d0:75:37:1b:84:b5:72:cd:6c:89:
ab:5c:94:00:76:69:39:c3:ef:6f:c7:c2:ed:e2:d7:
46:3a:b0:3d:4a:aa:f8:43:bc:cc:42:90:c4:66:44:
30:6f:4e:33:c1:00:92:b5:90:2f:33:64:bd:7f:c9:
0d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:B8:AB:DA:A9:F4:54:C2:27:C5:A2:D8:D7:FC:3D:6B:3E:0F:1A:5A
X509v3 Authority Key Identifier:
keyid:66:75:9F:7A:8F:90:67:2E:A8:35:3A:F4:D1:1D:6A:C5:E9:FD:82:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZnWfeo-QZy6oNTr00R1qxen9ggY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/178b02-948c-4624-97b8-e4e17e4b5180/1/ZnWfeo-QZy6oNTr00R1qxen9ggY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/178b02-948c-4624-97b8-e4e17e4b5180/1/ZnWfeo-QZy6oNTr00R1qxen9ggY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:42:68:66:d5:57:32:be:97:be:65:43:bf:61:28:51:a8:e6:
00:39:b1:57:c6:32:7a:b9:05:15:7c:c0:7a:37:06:b1:4c:48:
ef:2c:00:76:a5:e9:65:43:37:91:bd:ae:64:56:4d:8c:f9:2f:
c4:c3:10:8e:18:24:43:a4:06:b7:c7:82:71:0a:87:93:86:15:
f1:7a:6a:78:6d:0a:15:34:1c:ca:46:a3:9f:e0:bd:21:e4:27:
c3:5d:c5:33:d0:14:b8:be:7d:49:c3:e1:6b:3e:8a:58:71:58:
f0:bd:a9:a6:19:3f:10:48:99:17:2b:ed:fd:50:18:4a:db:f0:
2f:ab:d0:c6:0c:dd:fb:5d:19:7f:a0:2c:94:0e:f6:0a:ce:64:
fd:80:ce:20:5c:33:f9:65:35:7b:b5:ff:ab:10:e4:be:cd:33:
23:de:08:27:53:21:ea:d0:42:3a:8e:b8:92:0a:7c:77:8d:b8:
ee:b1:e6:99:d2:6f:93:ca:4d:91:6d:3c:77:a4:05:09:5e:03:
ce:e4:5c:f9:45:cf:af:41:5e:aa:fe:c9:68:63:af:26:92:9c:
b5:91:42:75:32:16:fa:bb:0c:2e:cd:56:c3:e1:d4:77:a8:e5:
74:f2:e4:b1:3f:da:2f:23:57:92:5c:37:1a:46:06:b2:02:fc:
6f:6e:cb:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 06:27:31 2026 by rpki-client