Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.mft
File: Zi9V03cSfyjOJreP2Dvs9BvsrUs.mft (raw, json)
Hash identifier: bCTSrmcPQNwrXrCkbD6DGL/Umqt4HohvdJ5R7y532g4=
Subject key identifier: 30:4D:32:3B:F2:9F:B4:72:EA:46:F2:3F:85:24:D7:4B:89:62:29:57
Authority key identifier: 66:2F:55:D3:77:12:7F:28:CE:26:B7:8F:D8:3B:EC:F4:1B:EC:AD:4B
Certificate issuer: /CN=662f55d377127f28ce26b78fd83becf41becad4b
Certificate serial: 019E6315FD5270FBBB26522B7AB677A15440
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zi9V03cSfyjOJreP2Dvs9BvsrUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.mft
Manifest number: 1671
Signing time: Tue 26 May 2026 07:00:45 +0000
Manifest this update: Tue 26 May 2026 07:00:45 +0000
Manifest next update: Wed 27 May 2026 07:00:45 +0000
Files and hashes: 1: 4Vb2Z58skB5iaPHsQ2kB44NxzFQ.roa (hash: 5A5FJnxgAX+cotWcxBj+MU91tiU2mlONPgMHabpzNSY=)
2: Zi9V03cSfyjOJreP2Dvs9BvsrUs.crl (hash: Zl7YVbn/OQjx3CupPVPobXkT6zlbnc0bePHgiPZdE+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zi9V03cSfyjOJreP2Dvs9BvsrUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 May 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:63:15:fd:52:70:fb:bb:26:52:2b:7a:b6:77:a1:54:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=662f55d377127f28ce26b78fd83becf41becad4b
Validity
Not Before: May 26 07:00:45 2026 GMT
Not After : May 27 07:00:45 2026 GMT
Subject: CN=304d323bf29fb472ea46f23f8524d74b89622957
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:83:1d:0d:7d:1b:ac:38:58:ed:ee:61:b5:3d:
3e:55:9f:60:db:fc:58:f6:12:3a:a5:16:9e:08:a5:
4b:be:64:f1:f1:96:d9:6c:26:50:b3:28:f7:1e:86:
35:10:dd:c9:36:21:96:d7:9d:c6:4b:e2:bb:95:5d:
20:bd:3c:ea:e7:05:6c:cc:c1:43:54:2e:c0:eb:ea:
d0:4b:8b:73:c9:f9:d5:f7:49:60:2a:b1:a4:68:11:
fd:e8:ac:42:05:fd:1a:50:1c:c0:20:77:e8:3d:ab:
f7:63:87:66:79:cc:33:51:95:3a:fd:31:89:2e:a9:
27:9b:ff:ab:c3:ac:51:ec:2f:f9:39:bc:b1:d6:3e:
e8:d5:86:46:8b:3d:ff:bf:c4:65:ec:40:34:93:a9:
70:8b:e4:ce:0d:82:fb:62:e3:14:0b:24:6f:c0:13:
6e:1d:4f:41:46:8c:4f:4a:60:95:22:e9:5b:9e:3b:
5e:0f:1e:43:64:49:2a:c2:e7:2f:b1:9a:22:71:c8:
68:f9:8f:f7:ef:c8:2d:43:28:c6:b7:6f:d2:84:46:
11:61:12:d2:c6:2b:05:1c:27:fc:4f:76:a6:7a:33:
26:0c:43:f5:fb:6d:3c:3c:0b:a7:48:e2:0b:6c:27:
f6:1c:26:9e:d6:1d:bc:80:2d:74:86:2f:9a:1b:df:
98:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:4D:32:3B:F2:9F:B4:72:EA:46:F2:3F:85:24:D7:4B:89:62:29:57
X509v3 Authority Key Identifier:
keyid:66:2F:55:D3:77:12:7F:28:CE:26:B7:8F:D8:3B:EC:F4:1B:EC:AD:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zi9V03cSfyjOJreP2Dvs9BvsrUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:a2:65:7f:35:81:8f:c5:53:9b:05:96:84:10:1e:b0:57:1d:
ef:95:54:9a:1a:b2:85:8c:bc:44:a8:77:b1:4a:83:62:cc:63:
ba:da:07:1f:ca:7b:15:8b:81:d1:00:8c:0d:d2:0c:66:15:30:
aa:04:85:a9:b4:a0:02:38:c1:c3:66:02:65:88:c9:14:5a:8d:
9a:1f:e8:74:3b:1d:94:4a:b3:87:24:9a:35:ee:1e:ed:b3:8d:
96:0f:16:bf:5f:2c:5f:fb:1e:a1:32:ca:05:6e:3a:1d:48:eb:
93:a0:e2:57:43:cf:a8:cc:8e:26:72:ed:a1:a9:57:55:dc:6d:
35:a5:cf:38:e9:5d:e4:06:e6:1f:78:20:30:83:d8:38:fc:93:
e3:9a:16:1c:94:f1:10:52:cc:d4:6a:ad:8f:f9:6d:5c:a0:a4:
f3:53:a9:a8:55:db:20:cc:a2:e4:19:e1:cf:d4:3e:c9:98:06:
af:05:77:b3:eb:1b:a3:47:4d:64:33:ab:a2:7c:a4:af:91:e9:
cd:e4:18:4c:a8:a3:70:0d:6b:83:f3:d9:e8:f0:f3:41:21:47:
2f:7f:69:c1:ea:8a:91:fc:6d:a8:50:11:8b:4f:25:f4:b4:d3:
ec:6a:15:c6:e3:b7:ad:66:be:71:89:13:23:a6:75:2d:73:25:
be:f4:c6:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 26 13:39:52 2026 by rpki-client