Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/8e23e5-db28-45ed-b67f-2add5e797c75/1/zdpbTOlfoL32BUFp53rvyCZd28Q.mft
File: zdpbTOlfoL32BUFp53rvyCZd28Q.mft (raw, json)
Hash identifier: GNaiUio2hyUfD9V5aDBzfbT0vcIl8XtC6ZzzA2gdfBQ=
Subject key identifier: 95:6F:7D:87:74:C0:59:70:F7:54:1C:B9:CB:D7:2B:D6:EF:7E:FE:0E
Authority key identifier: CD:DA:5B:4C:E9:5F:A0:BD:F6:05:41:69:E7:7A:EF:C8:26:5D:DB:C4
Certificate issuer: /CN=cdda5b4ce95fa0bdf6054169e77aefc8265ddbc4
Certificate serial: 019DFBA96584BDF6302094BA1A0DEF6DB15C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zdpbTOlfoL32BUFp53rvyCZd28Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/8e23e5-db28-45ed-b67f-2add5e797c75/1/zdpbTOlfoL32BUFp53rvyCZd28Q.mft
Manifest number: 1887
Signing time: Wed 06 May 2026 05:01:15 +0000
Manifest this update: Wed 06 May 2026 05:01:15 +0000
Manifest next update: Thu 07 May 2026 05:01:15 +0000
Files and hashes: 1: _8ZFO9ocBpb_Ph-40yN6ACd4c-s.roa (hash: nv3UD4Bh28t9KPR31Vxom/hj2bFKQ3slvDA/BYva5PI=)
2: zdpbTOlfoL32BUFp53rvyCZd28Q.crl (hash: S1Xw5cJ5xA+7C87FR50yq/9OyzFgUoaclRf7ipZVnyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/8e23e5-db28-45ed-b67f-2add5e797c75/1/zdpbTOlfoL32BUFp53rvyCZd28Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/8e23e5-db28-45ed-b67f-2add5e797c75/1/zdpbTOlfoL32BUFp53rvyCZd28Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/zdpbTOlfoL32BUFp53rvyCZd28Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 May 2026 05:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:fb:a9:65:84:bd:f6:30:20:94:ba:1a:0d:ef:6d:b1:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdda5b4ce95fa0bdf6054169e77aefc8265ddbc4
Validity
Not Before: May 6 05:01:15 2026 GMT
Not After : May 7 05:01:15 2026 GMT
Subject: CN=956f7d8774c05970f7541cb9cbd72bd6ef7efe0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:3f:78:5c:1a:cd:5c:d8:e1:6f:23:c1:c6:27:
be:0a:96:da:ac:f5:09:d3:f9:7f:7e:1b:54:15:e6:
35:13:6a:dc:3a:c1:dc:b6:bc:ba:70:ba:fb:db:90:
d7:48:3f:de:8e:e0:e3:90:44:ab:e2:7c:41:c1:28:
df:d5:da:bb:26:7b:fe:8a:d8:6f:67:29:6a:77:22:
57:90:90:6e:77:0b:fb:3d:01:66:97:fd:55:d6:ca:
cf:2b:37:ec:52:a6:97:6c:8e:ef:70:df:a1:ce:82:
12:90:27:0f:ca:d4:e8:55:31:b0:2d:9e:0f:1c:21:
6e:60:04:68:fd:0b:5b:91:86:1c:f7:f0:e5:a9:80:
55:d4:07:41:b4:b8:3f:52:b6:4e:ec:a7:e7:8e:eb:
f1:7b:bd:a5:fb:4d:06:b4:bc:50:20:5b:c9:98:a4:
f1:9e:de:dd:dc:19:20:9a:ac:4a:3b:a0:cd:98:6e:
0a:6c:d6:96:95:ed:65:8c:54:19:c9:c8:97:5a:38:
57:a8:fe:b4:4f:90:41:e9:39:c6:f7:e0:63:65:97:
61:f1:22:45:52:6d:a6:03:65:04:b6:b0:7c:9d:8c:
7f:4b:8d:b5:06:7e:1c:10:2d:db:aa:8d:b0:45:bd:
2d:19:90:93:a1:89:ae:23:d9:51:51:fa:e3:9c:6e:
13:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:6F:7D:87:74:C0:59:70:F7:54:1C:B9:CB:D7:2B:D6:EF:7E:FE:0E
X509v3 Authority Key Identifier:
keyid:CD:DA:5B:4C:E9:5F:A0:BD:F6:05:41:69:E7:7A:EF:C8:26:5D:DB:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zdpbTOlfoL32BUFp53rvyCZd28Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/8e23e5-db28-45ed-b67f-2add5e797c75/1/zdpbTOlfoL32BUFp53rvyCZd28Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/8e23e5-db28-45ed-b67f-2add5e797c75/1/zdpbTOlfoL32BUFp53rvyCZd28Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:e3:2e:5d:9a:54:06:e0:af:ba:31:69:2d:0c:6c:78:63:68:
6f:0f:0e:ce:1f:e6:7c:56:a7:fe:ab:94:ca:96:f6:ca:45:2e:
b0:a8:bd:71:de:ef:ff:93:f8:49:1c:50:5c:e5:6b:0b:97:2e:
5f:22:38:d2:ae:d7:cb:73:36:b4:bd:bd:be:96:68:98:37:a1:
a3:f0:08:20:43:34:ee:9b:ca:af:50:75:7e:27:a0:06:27:38:
9f:10:de:64:e7:3c:21:b8:11:c8:47:a8:29:08:0c:a2:dd:69:
87:34:69:7c:10:63:e3:2b:50:1b:17:25:6e:fd:33:7d:fd:f8:
f6:c1:27:8d:eb:54:07:e9:2b:c5:ae:85:98:b6:6a:86:e4:13:
8a:20:98:1e:f8:3a:61:5d:50:60:f5:5a:17:bc:c9:aa:5a:53:
ee:c7:c3:ff:eb:c2:1e:5b:25:91:40:85:b3:26:d7:97:52:8f:
29:3c:de:9c:b9:5a:c4:c6:d7:01:5e:d3:82:7e:69:16:c1:4f:
a1:42:e5:6b:b3:31:41:58:eb:22:1f:02:0d:dc:8f:9d:bb:6a:
d2:57:4f:a2:3f:4c:e9:e1:b0:1b:b8:0c:fc:c8:5a:cb:9b:9d:
a9:26:76:a6:15:e9:03:40:84:7a:20:4c:b1:93:6c:37:20:52:
99:1e:c5:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 15:03:50 2026 by rpki-client