Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.mft
File: Zu8xraxmOFWz3dGTHETPgGTWpus.mft (raw, json)
Hash identifier: 4nnHpaT61YSN5GXa1b5z6C20M6QAtLs4LP4AlWASFLE=
Subject key identifier: D5:D8:81:6C:74:2B:CF:F5:92:16:BE:9C:D5:E4:1E:D0:DC:7E:4D:B2
Authority key identifier: 66:EF:31:AD:AC:66:38:55:B3:DD:D1:93:1C:44:CF:80:64:D6:A6:EB
Certificate issuer: /CN=66ef31adac663855b3ddd1931c44cf8064d6a6eb
Certificate serial: 019E4E4589210BECF1DB834BD6CC16454814
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zu8xraxmOFWz3dGTHETPgGTWpus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.mft
Manifest number: 191F
Signing time: Fri 22 May 2026 06:00:40 +0000
Manifest this update: Fri 22 May 2026 06:00:40 +0000
Manifest next update: Sat 23 May 2026 06:00:40 +0000
Files and hashes: 1: Y9ARVG_hAm4nIrCTT5R9mNE2Ai8.roa (hash: MI2P4v9i+kU4F9eDStIUnkN/VYUaWV71u0evfwMIhOU=)
2: Zu8xraxmOFWz3dGTHETPgGTWpus.crl (hash: 9xvRe67apqS6GzjCC7G5xJwOyzYYnCruBWpwUoQG1+4=)
3: fzcY56XdnFZoFNt0HXida4aSHGU.roa (hash: MqoKni1V8waFiRzOClIF15P78qFKBD2MS62bZfGpfEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zu8xraxmOFWz3dGTHETPgGTWpus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 May 2026 06:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4e:45:89:21:0b:ec:f1:db:83:4b:d6:cc:16:45:48:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66ef31adac663855b3ddd1931c44cf8064d6a6eb
Validity
Not Before: May 22 06:00:40 2026 GMT
Not After : May 23 06:00:40 2026 GMT
Subject: CN=d5d8816c742bcff59216be9cd5e41ed0dc7e4db2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:17:9a:b2:ef:4e:08:44:ff:73:a7:44:5f:a6:
03:bf:57:63:40:ab:67:be:b4:b1:73:53:0a:2e:b0:
aa:e8:95:44:9b:dc:11:99:7f:ba:4b:bc:1c:74:f4:
c6:1b:6c:32:2b:3b:28:46:36:63:35:48:e1:69:0e:
7e:91:11:65:39:02:ee:9b:21:31:9b:4b:43:51:48:
0d:1d:8a:9d:8f:fe:52:0a:12:96:19:c4:2d:64:a3:
8d:e0:f9:2a:c5:5f:3f:1f:03:b7:88:dc:c4:0d:26:
3d:40:46:a3:9a:2b:ad:0f:06:22:16:3d:9e:40:83:
0d:f1:fe:28:6f:f3:9f:d7:fa:bf:33:a7:20:b9:9b:
34:78:42:a5:47:fb:5f:27:8f:8f:56:a6:80:e1:86:
51:02:6d:a3:a6:e2:60:45:38:e8:8b:1f:29:48:47:
1b:f8:58:49:04:55:3b:f6:80:c8:d9:fc:a4:07:e1:
0f:31:09:17:c9:8f:8e:e6:84:eb:45:e1:33:61:ca:
b6:17:99:24:25:e2:74:ac:eb:d3:01:9e:62:ff:a4:
92:52:f4:f2:15:5a:e5:e5:c6:36:ab:5c:a6:30:ce:
6f:72:9c:57:e3:a7:c6:23:88:4c:99:f2:13:4c:e0:
3f:02:f9:1e:73:0c:16:41:b5:e2:da:2a:5f:03:34:
1f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:D8:81:6C:74:2B:CF:F5:92:16:BE:9C:D5:E4:1E:D0:DC:7E:4D:B2
X509v3 Authority Key Identifier:
keyid:66:EF:31:AD:AC:66:38:55:B3:DD:D1:93:1C:44:CF:80:64:D6:A6:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zu8xraxmOFWz3dGTHETPgGTWpus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:83:40:92:2a:1a:08:62:5e:e6:0f:2a:3f:00:63:97:27:87:
79:40:f9:8d:db:b1:1e:f1:7b:66:9d:90:4e:04:ba:4b:13:74:
d6:ed:05:f5:ac:82:b6:b1:e1:e2:bb:de:53:e7:5f:52:2b:e4:
7b:a5:c5:e7:05:9c:ce:74:05:5e:a7:7c:b3:e1:c0:0c:b9:f5:
95:4c:6e:74:ff:ec:77:b4:a0:bd:4c:b4:6c:45:12:1b:5f:6d:
60:e0:71:90:f8:3b:fe:49:1d:df:d1:02:3f:21:b8:5f:ed:ad:
d4:5d:e9:83:62:cb:fa:a6:53:90:1c:58:d2:5d:45:41:3d:ed:
bf:8f:6f:49:36:f7:19:de:4d:bc:ad:de:06:53:a6:81:f6:de:
d1:90:d8:82:a3:f4:f1:a8:db:87:88:97:3c:de:ae:1a:de:ce:
34:3c:05:32:a2:45:0b:0f:32:9d:17:a6:15:96:d4:9c:e2:5c:
11:6e:1d:a3:b4:30:df:ef:7a:14:b2:1f:b9:22:ae:c8:38:cb:
17:64:ac:21:16:19:a0:61:c7:42:ae:64:2c:7d:c2:0a:49:80:
fe:c3:39:c8:e2:21:61:7b:a1:11:de:5b:af:87:6e:9a:02:c0:
32:58:9c:e0:bf:a1:76:32:c9:e5:3b:e0:2d:39:c1:84:81:d4:
ee:3e:86:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 15:07:31 2026 by rpki-client