Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/zB58Rrgd2rJ0QnDFutmGr4bfT2A.mft
File: zB58Rrgd2rJ0QnDFutmGr4bfT2A.mft (raw, json)
Hash identifier: hoZWxJ9pWseOGDeeWxvrtY8PXhgYFDappexZNZrsC4c=
Subject key identifier: A5:D9:00:7C:72:F0:C9:71:71:7A:6B:01:D0:E4:5C:CB:AF:FB:95:3B
Authority key identifier: CC:1E:7C:46:B8:1D:DA:B2:74:42:70:C5:BA:D9:86:AF:86:DF:4F:60
Certificate issuer: /CN=cc1e7c46b81ddab2744270c5bad986af86df4f60
Certificate serial: 019DED122EA0D39D571256D678523C0252A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zB58Rrgd2rJ0QnDFutmGr4bfT2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/zB58Rrgd2rJ0QnDFutmGr4bfT2A.mft
Manifest number: 0D52
Signing time: Sun 03 May 2026 09:01:24 +0000
Manifest this update: Sun 03 May 2026 09:01:24 +0000
Manifest next update: Mon 04 May 2026 09:01:24 +0000
Files and hashes: 1: aE-igOYVXwkygfdsftmlck44E1U.roa (hash: Zm5SKhsISbz1FGue4q9TwJE5ZIQbj5Gs5h02565RFb0=)
2: tsSIuAhpfPkyoEWlotiPKzX6w8I.roa (hash: DsopP3SuV9qAYq1FNnHh/jlHBAIogzYm66PAey2rdvM=)
3: zB58Rrgd2rJ0QnDFutmGr4bfT2A.crl (hash: N6cOIPYWjR1EGk7dsb0ScaHwxGFXuqSZq97i19wP538=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/zB58Rrgd2rJ0QnDFutmGr4bfT2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/zB58Rrgd2rJ0QnDFutmGr4bfT2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/zB58Rrgd2rJ0QnDFutmGr4bfT2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 May 2026 09:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ed:12:2e:a0:d3:9d:57:12:56:d6:78:52:3c:02:52:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc1e7c46b81ddab2744270c5bad986af86df4f60
Validity
Not Before: May 3 09:01:24 2026 GMT
Not After : May 4 09:01:24 2026 GMT
Subject: CN=a5d9007c72f0c971717a6b01d0e45ccbaffb953b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3c:32:b4:18:a1:7d:ea:a1:e8:55:9d:29:c3:
f6:fa:0e:b5:76:44:91:75:19:a4:a9:8c:b0:b8:90:
ce:96:00:00:54:01:06:96:82:0d:23:bb:93:c1:04:
cd:0c:6d:a6:95:01:42:95:34:61:01:bb:15:18:0d:
38:e7:a3:66:26:5a:93:ca:6d:4a:52:e0:87:76:36:
78:c7:d0:d8:e8:ab:e2:1e:90:6b:8c:08:d0:98:88:
75:47:77:0b:3e:41:d0:0b:a9:12:d0:89:fd:61:b7:
cf:f1:63:e4:0d:13:d4:55:bd:00:95:b1:b1:da:4d:
6d:06:ce:a9:dd:7a:1a:81:87:c0:ac:e4:8c:22:2a:
df:48:58:b9:07:27:d1:61:86:47:b6:3d:25:21:5c:
0b:d8:5d:86:7c:b5:3e:36:18:82:21:c3:b5:88:91:
13:93:52:b6:4d:d1:b4:1d:2e:1a:b2:9a:25:ee:27:
41:7a:78:df:94:8a:1c:ca:76:ee:4e:a2:a4:1d:8e:
29:40:57:8b:67:d8:3c:be:2a:66:10:fa:ab:24:43:
7a:79:fa:40:fe:61:8e:74:9c:4f:d2:79:f9:83:d4:
2d:22:df:9c:b9:51:04:e0:09:f1:3e:f1:be:31:08:
b3:33:d9:36:88:fd:3b:7d:ba:2c:ae:ec:99:76:f1:
b3:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:D9:00:7C:72:F0:C9:71:71:7A:6B:01:D0:E4:5C:CB:AF:FB:95:3B
X509v3 Authority Key Identifier:
keyid:CC:1E:7C:46:B8:1D:DA:B2:74:42:70:C5:BA:D9:86:AF:86:DF:4F:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zB58Rrgd2rJ0QnDFutmGr4bfT2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/zB58Rrgd2rJ0QnDFutmGr4bfT2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/zB58Rrgd2rJ0QnDFutmGr4bfT2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:ea:77:6c:ce:1f:48:18:3a:5a:94:06:dc:43:61:89:f3:6b:
ce:82:95:d7:0a:c4:cd:01:4e:66:07:24:14:25:5c:c3:ed:3c:
70:39:61:5f:7d:96:da:3c:6d:f2:f0:c6:6f:03:a6:af:eb:c7:
ef:a2:e9:57:98:d4:a6:9b:55:d1:8c:a7:bb:5c:97:87:9e:ff:
29:e0:3d:5b:5a:cf:57:35:d8:ce:72:f0:a4:b7:8a:86:27:4b:
60:42:5f:de:30:85:57:ef:fa:cd:73:d4:09:ba:23:88:d4:c4:
f0:ec:5a:f6:89:b2:32:0e:1a:eb:b3:bf:c9:55:38:79:ab:9a:
3b:97:e6:5a:1a:7e:03:51:7d:a7:64:86:bc:0f:42:72:6c:21:
19:fd:01:86:2a:38:4f:bd:c9:ae:e0:d7:26:e5:fa:45:63:a2:
6b:4b:f8:34:7d:c2:55:f0:d6:a7:7d:d1:03:0e:d5:50:76:42:
51:44:56:91:14:ec:b7:35:20:00:c2:9b:22:45:14:6a:4c:81:
c8:ae:c0:e7:d9:ed:0f:de:b6:dc:28:06:36:78:9f:85:cb:cd:
fe:2e:6f:9d:56:b6:6a:62:5e:a2:2b:ca:01:77:eb:48:40:c5:
95:9d:90:81:c9:c2:df:d7:b4:ec:12:b9:6c:27:b3:2e:41:8a:
4f:c7:bb:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 17:08:02 2026 by rpki-client