Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/761b48-69ea-40e4-8d7c-64cd194f7f4f/1/z2hDzhUimoAj2X-iejflkniyv9c.mft
File: z2hDzhUimoAj2X-iejflkniyv9c.mft (raw, json)
Hash identifier: MSL+7A6jk80aT5aWtIQbVlG26O1enf6pCTvFGbwAjHI=
Subject key identifier: D7:51:18:36:08:05:9E:B9:55:9B:CA:F2:1D:1E:7E:A4:A1:32:54:36
Authority key identifier: CF:68:43:CE:15:22:9A:80:23:D9:7F:A2:7A:37:E5:92:78:B2:BF:D7
Certificate issuer: /CN=cf6843ce15229a8023d97fa27a37e59278b2bfd7
Certificate serial: 019E281450A08574764FFBE556859893BCE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z2hDzhUimoAj2X-iejflkniyv9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/761b48-69ea-40e4-8d7c-64cd194f7f4f/1/z2hDzhUimoAj2X-iejflkniyv9c.mft
Manifest number: 0EF9
Signing time: Thu 14 May 2026 20:01:20 +0000
Manifest this update: Thu 14 May 2026 20:01:20 +0000
Manifest next update: Fri 15 May 2026 20:01:20 +0000
Files and hashes: 1: dXjAuEZ8xG_k8lwu6Hj_xZmUk9A.asa (hash: znE+Vn5w5mJLLUAxXFcPNeMUExg32SuqaPEhMXXfl3w=)
2: pKievJotd0Vwu1YJE0cQcf-DltY.roa (hash: h+T203a1jd44mMy05CeC2wpUpgb3MOkiNaLP9bVt08U=)
3: z2hDzhUimoAj2X-iejflkniyv9c.crl (hash: V9ykMPCneOIfmvSmpjC0SaX3de2G6trtlivtP6hfYvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/761b48-69ea-40e4-8d7c-64cd194f7f4f/1/z2hDzhUimoAj2X-iejflkniyv9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/761b48-69ea-40e4-8d7c-64cd194f7f4f/1/z2hDzhUimoAj2X-iejflkniyv9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/z2hDzhUimoAj2X-iejflkniyv9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 15 May 2026 20:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:28:14:50:a0:85:74:76:4f:fb:e5:56:85:98:93:bc:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf6843ce15229a8023d97fa27a37e59278b2bfd7
Validity
Not Before: May 14 20:01:20 2026 GMT
Not After : May 15 20:01:20 2026 GMT
Subject: CN=d751183608059eb9559bcaf21d1e7ea4a1325436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c1:f8:fa:f5:d1:51:f9:4c:29:c9:62:37:19:
65:e3:af:71:1a:9f:2c:2c:24:9a:43:dd:b8:f5:89:
60:50:88:bc:6d:d9:6e:f3:75:b0:cd:6d:e8:25:00:
83:43:f0:c0:39:5b:3b:3f:29:b9:fe:72:b4:0f:bd:
4d:94:1e:7b:02:ba:de:4c:a3:11:5a:c9:1f:c8:c0:
a3:3e:95:5c:4f:75:f9:88:7f:82:52:c9:7d:be:1b:
b0:90:98:9c:ac:b6:da:8e:0c:60:aa:80:27:3d:7a:
c1:40:b0:63:ca:8e:35:fb:57:91:5a:45:be:1e:46:
3d:58:0d:3c:0a:89:df:26:85:43:c4:50:7b:67:54:
e6:99:b5:31:80:44:de:af:5c:dd:02:20:cc:25:43:
77:d3:ad:f0:dd:56:c9:b1:3b:9b:b5:dd:de:d3:d9:
af:04:2c:aa:0e:89:94:66:c2:e7:c9:b7:1a:8e:fb:
f5:8c:34:60:b5:3d:9c:3b:f5:f0:aa:16:ca:fe:06:
66:f1:0a:03:92:a2:f2:a2:49:e9:40:e6:d9:e8:c4:
62:d0:ff:0d:5e:e0:14:a6:17:49:01:b7:d3:50:05:
22:b9:b3:23:9b:fe:87:d1:62:5d:5e:d9:5f:3d:e5:
2e:ec:e0:89:52:87:d5:33:29:d7:1d:6e:e5:4b:6d:
24:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:51:18:36:08:05:9E:B9:55:9B:CA:F2:1D:1E:7E:A4:A1:32:54:36
X509v3 Authority Key Identifier:
keyid:CF:68:43:CE:15:22:9A:80:23:D9:7F:A2:7A:37:E5:92:78:B2:BF:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z2hDzhUimoAj2X-iejflkniyv9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/761b48-69ea-40e4-8d7c-64cd194f7f4f/1/z2hDzhUimoAj2X-iejflkniyv9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/761b48-69ea-40e4-8d7c-64cd194f7f4f/1/z2hDzhUimoAj2X-iejflkniyv9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:41:57:02:f8:10:51:f8:d6:b7:d4:ee:06:30:98:4e:8d:c7:
2a:1c:ec:f0:d3:cc:75:fa:d0:19:9c:1e:3b:e6:29:d2:95:6d:
8d:9e:53:f1:b3:22:cf:47:e9:bf:ae:dc:dd:29:82:a0:85:1b:
43:d8:d9:22:22:08:c6:57:2f:dd:1c:91:88:1c:de:89:3c:8f:
e1:7c:10:98:3d:04:17:e9:4b:8b:f3:69:40:0a:22:73:5f:70:
5c:5b:0b:bb:15:95:f3:1d:f9:ee:cf:18:bf:d2:f5:0a:bc:b4:
14:0c:c8:38:71:65:93:09:cf:90:e1:fc:bb:b1:a7:4f:5e:90:
09:fc:ea:9c:55:cb:09:df:3b:87:66:66:15:da:14:f9:4c:0c:
96:09:ee:43:bf:9d:04:d6:51:b8:96:51:ec:c4:79:a2:ed:de:
38:79:27:b3:a6:6b:64:ae:6a:76:b2:80:f3:2e:bf:af:f0:5f:
c5:19:5e:6a:85:f3:f5:c9:75:77:42:d6:6c:9d:16:36:14:78:
37:50:a7:60:a5:fd:08:b7:00:24:d3:d0:93:74:3a:b1:f6:dd:
40:96:9d:54:e6:8d:fe:e4:56:e0:cb:73:59:4b:e0:15:07:15:
ca:e2:88:d2:04:81:d9:83:5b:58:1c:2c:e7:06:b5:8f:4b:8b:
54:32:ce:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:20:17 2026 by rpki-client