Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.mft
File: zJd-nVKvvEd5nTl1_O6KxRygz2o.mft (raw, json)
Hash identifier: ddg50UJRqEVvYqyRS6rxxim8/wtVd/iaI63ewrC3Rao=
Subject key identifier: C2:07:49:17:17:7D:0F:19:C7:75:78:79:40:A9:34:31:F5:0B:EC:36
Authority key identifier: CC:97:7E:9D:52:AF:BC:47:79:9D:39:75:FC:EE:8A:C5:1C:A0:CF:6A
Certificate issuer: /CN=cc977e9d52afbc47799d3975fcee8ac51ca0cf6a
Certificate serial: 019E57B6D3BE61E097F2DF0E2A78CB305A9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zJd-nVKvvEd5nTl1_O6KxRygz2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.mft
Manifest number: 17F7
Signing time: Sun 24 May 2026 02:00:59 +0000
Manifest this update: Sun 24 May 2026 02:00:59 +0000
Manifest next update: Mon 25 May 2026 02:00:59 +0000
Files and hashes: 1: Sq1CvQy8o0B9tgh2Xu1eMwRJZtk.roa (hash: HdfFsuae+bs6Px2O/nXidzw9nHeIbmVY360ACfcO/uA=)
2: apKWJZAqjwjRd0dehHbbTa9ZY3A.roa (hash: nVaIovGi66UncedynfpwyGBTPpXsXon+jV7FMQbYQEg=)
3: zJd-nVKvvEd5nTl1_O6KxRygz2o.crl (hash: vvkBFo0/lfzM1o5DlkiDbS1KMcGeG/RLPCYqZPW6d/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/zJd-nVKvvEd5nTl1_O6KxRygz2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 May 2026 20:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:57:b6:d3:be:61:e0:97:f2:df:0e:2a:78:cb:30:5a:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc977e9d52afbc47799d3975fcee8ac51ca0cf6a
Validity
Not Before: May 24 02:00:59 2026 GMT
Not After : May 25 02:00:59 2026 GMT
Subject: CN=c2074917177d0f19c775787940a93431f50bec36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:24:b4:0d:0f:6f:9b:22:ea:ba:69:a8:4c:e9:
87:93:8b:41:f6:e8:55:29:45:85:ec:d5:37:55:17:
dd:e7:69:98:f6:5d:4a:be:fe:98:52:71:b6:fe:e3:
9e:da:29:54:6a:92:f9:ce:34:9b:5c:8a:21:f9:9d:
35:b1:ee:60:9c:51:bd:bb:43:0e:8b:52:05:47:58:
b7:e0:c5:86:c0:12:85:41:7d:fb:84:66:5b:23:1c:
8d:60:af:cf:f6:85:10:c5:52:98:c6:09:ec:0a:7d:
df:7d:e9:ee:4e:9e:80:8c:98:a9:de:f3:2a:5f:e3:
e1:b3:bb:74:e4:ce:1b:4c:a1:e4:c1:9b:fd:99:b3:
3e:6a:27:87:f6:c2:fe:c1:f6:e7:09:7d:20:55:4c:
34:bb:0c:52:83:87:b2:65:81:29:44:db:a8:95:87:
28:c9:9b:56:42:7d:0e:10:ff:e4:63:87:7b:d2:69:
59:45:5c:aa:ca:2c:5b:a1:f8:46:44:10:be:95:88:
74:52:cc:d8:39:b2:e6:cf:f8:08:7a:d5:f9:28:fc:
31:a4:f9:7a:97:b7:b7:22:2a:52:fb:cb:3b:62:36:
4f:1c:15:f0:16:84:00:da:46:64:1f:8a:80:a0:a9:
16:a4:32:a3:34:c2:dc:ee:33:e0:ab:7b:20:58:f0:
0a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:07:49:17:17:7D:0F:19:C7:75:78:79:40:A9:34:31:F5:0B:EC:36
X509v3 Authority Key Identifier:
keyid:CC:97:7E:9D:52:AF:BC:47:79:9D:39:75:FC:EE:8A:C5:1C:A0:CF:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zJd-nVKvvEd5nTl1_O6KxRygz2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:9d:8a:7b:d6:76:51:c5:cc:57:7b:a9:b0:39:b3:be:24:23:
53:83:01:6d:79:6a:21:e6:d8:0f:a0:e5:7f:7b:44:e0:e5:d7:
97:9b:3f:43:33:ad:0f:44:eb:c2:9c:47:ff:c7:34:5e:79:e5:
52:1b:0c:8f:70:af:47:b4:90:63:d4:1a:82:f4:a1:af:1e:05:
f5:22:c7:be:0d:dc:77:02:73:1a:32:d5:9f:e3:d8:47:4e:37:
6e:a2:81:8c:d8:a8:27:be:a6:58:ae:72:cf:79:4e:5d:0f:53:
c6:b1:10:96:dc:c6:08:89:9c:14:74:7c:76:09:2b:b7:ad:12:
a8:e1:ba:0e:e7:a4:76:32:c9:70:95:9d:cc:83:10:15:d2:22:
73:73:3a:24:74:10:59:e5:a2:62:6e:53:b6:23:69:01:5e:55:
41:30:14:e8:6a:c2:50:35:32:e7:15:fd:4c:c0:ec:1b:43:29:
fd:a2:69:8e:1e:d1:02:cb:0f:2d:af:ab:1f:e9:33:3d:ec:52:
db:d3:f3:24:90:e4:9d:55:cf:76:d3:af:e1:9c:5c:95:85:4d:
fa:05:1f:0d:26:d6:34:b9:c2:eb:6e:23:78:ff:13:0a:fd:a2:
2b:7a:62:bd:51:2c:1e:6e:65:23:54:35:94:3f:60:dd:54:13:
a5:ad:5b:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 04:37:51 2026 by rpki-client