Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.mft
File: zlv1IB8YtAK45ii8d_IlL3aecPI.mft (raw, json)
Hash identifier: OTjSxJhslWcNJgvOkp0hxCYJ16DMbHDt9xjcKgtLlzw=
Subject key identifier: C9:36:CB:07:4F:0D:E3:CC:A0:26:5A:FB:CD:6A:6B:94:40:EA:C7:B5
Authority key identifier: CE:5B:F5:20:1F:18:B4:02:B8:E6:28:BC:77:F2:25:2F:76:9E:70:F2
Certificate issuer: /CN=ce5bf5201f18b402b8e628bc77f2252f769e70f2
Certificate serial: 019E8CEDB056CE255AF4DDBBC201E2352E12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zlv1IB8YtAK45ii8d_IlL3aecPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.mft
Manifest number: 0591
Signing time: Wed 03 Jun 2026 10:00:47 +0000
Manifest this update: Wed 03 Jun 2026 10:00:47 +0000
Manifest next update: Thu 04 Jun 2026 10:00:47 +0000
Files and hashes: 1: XO6sev2FSqLYRr5iJTi7ipxkMsw.roa (hash: elcbj3ZPXUwSlQ0W1VHvrn7ftkq6V4JJB3c4lvRA2B0=)
2: hjWKjeV-jJppeG0fD1H6zmH-Ykw.roa (hash: OeUU/W5Kc0WkJxZpiZAujOCtL2D7yZcVNpe7fsq3VBQ=)
3: zlv1IB8YtAK45ii8d_IlL3aecPI.crl (hash: CroUgFEX62CaD6tuvvQSNUXop52F0dPxjHxrO+H0UhQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zlv1IB8YtAK45ii8d_IlL3aecPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 10:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8c:ed:b0:56:ce:25:5a:f4:dd:bb:c2:01:e2:35:2e:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce5bf5201f18b402b8e628bc77f2252f769e70f2
Validity
Not Before: Jun 3 10:00:47 2026 GMT
Not After : Jun 4 10:00:47 2026 GMT
Subject: CN=c936cb074f0de3cca0265afbcd6a6b9440eac7b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9f:98:cd:f3:12:5b:5f:7a:6d:b8:b6:b4:85:
34:7e:5c:32:eb:70:f7:1e:33:4b:cb:b7:c8:94:1f:
a2:f2:3f:0f:a3:42:cf:2b:e8:ff:3d:8a:85:5c:7c:
bd:43:67:83:2e:0e:b2:a1:e8:d9:16:ca:58:0d:31:
d8:c1:da:54:51:5d:48:93:f8:8d:d3:49:4a:89:3d:
34:29:9e:29:f1:6c:e0:28:de:c6:95:f3:23:41:7d:
39:a5:a1:34:bb:4a:22:9c:b7:89:65:ed:b0:33:04:
41:80:91:55:ec:87:61:e0:2f:34:ce:d8:0b:4c:bc:
b6:e0:20:be:6b:90:99:c2:04:2c:63:95:cf:a9:20:
ff:ab:f1:04:24:0b:f5:94:ef:56:60:77:ec:37:54:
1b:d8:37:d4:b4:9e:6d:87:89:92:c3:7d:82:0c:30:
d6:a7:cc:e8:8f:b5:e2:9a:c6:d8:bc:94:1a:50:7f:
47:1c:a7:0e:a9:ad:f2:97:bb:2a:14:72:71:2c:7c:
53:39:54:67:de:34:df:92:5b:22:b2:bb:0c:df:d0:
1f:71:ef:5e:83:68:b1:bc:71:d4:67:bf:a0:d0:97:
9e:5a:ff:07:6a:72:42:c1:56:d4:68:1b:b0:d2:c9:
6c:58:bf:10:5c:0d:41:bd:9d:f7:92:73:ee:92:3b:
53:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:36:CB:07:4F:0D:E3:CC:A0:26:5A:FB:CD:6A:6B:94:40:EA:C7:B5
X509v3 Authority Key Identifier:
keyid:CE:5B:F5:20:1F:18:B4:02:B8:E6:28:BC:77:F2:25:2F:76:9E:70:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zlv1IB8YtAK45ii8d_IlL3aecPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:26:01:2d:2b:a7:0a:58:06:cf:30:bb:51:de:d4:b0:b8:11:
0a:23:d6:e7:c4:2a:e8:03:6b:cd:47:d1:64:a9:cf:4d:ac:25:
79:b2:60:be:1e:6b:e8:1c:5f:b4:d5:7f:2b:04:3f:6f:ef:82:
63:a1:1a:57:27:41:ce:98:42:c0:e2:35:11:78:e7:df:f9:5d:
7c:fb:94:22:14:4b:25:67:12:48:d0:bc:4b:4e:e1:44:19:7a:
d8:e0:2a:58:fa:34:9b:7f:86:d3:c5:6a:79:f8:1e:ed:af:45:
35:89:37:da:20:81:c6:99:f1:d0:4f:a0:63:29:a2:d1:60:28:
24:c1:6d:5e:5a:0b:42:16:4c:ab:93:49:db:96:cc:5d:27:0f:
a4:82:d2:6b:62:c2:ea:57:95:78:62:35:a5:4a:de:89:6d:9b:
d9:37:3d:2d:fd:f5:9c:7e:27:b1:c0:d2:e3:13:d5:5c:0f:43:
37:7c:72:d2:bb:fe:b7:4b:3f:f6:3f:ac:65:0a:06:44:fa:1b:
8d:32:db:2c:5b:bf:c1:5f:31:8c:43:94:a0:78:4a:1f:d9:ec:
ca:a6:66:6f:48:77:ad:56:46:83:78:31:80:38:f9:f3:f8:40:
8b:0c:62:58:0b:29:5f:5e:49:e7:7f:f5:80:8c:ae:ec:6c:c4:
95:55:57:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 20:00:06 2026 by rpki-client