Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/c1a46a-a79d-4595-bb39-e291a52a9d15/1/ZHZkuldzYUo8RPkMEq5yVUinXNQ.mft
File: ZHZkuldzYUo8RPkMEq5yVUinXNQ.mft (raw, json)
Hash identifier: SBISTkByfOnAWlNtW5u13bzpCfqQEBKHMoAwd16ShRg=
Subject key identifier: 05:38:41:65:13:6A:91:03:18:D5:5A:EF:29:1F:7E:F4:ED:B4:8D:BE
Authority key identifier: 64:76:64:BA:57:73:61:4A:3C:44:F9:0C:12:AE:72:55:48:A7:5C:D4
Certificate issuer: /CN=647664ba5773614a3c44f90c12ae725548a75cd4
Certificate serial: 019E213660FC7431A70CA8909BA800E44986
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZHZkuldzYUo8RPkMEq5yVUinXNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/c1a46a-a79d-4595-bb39-e291a52a9d15/1/ZHZkuldzYUo8RPkMEq5yVUinXNQ.mft
Manifest number: 01CF
Signing time: Wed 13 May 2026 12:01:12 +0000
Manifest this update: Wed 13 May 2026 12:01:12 +0000
Manifest next update: Thu 14 May 2026 12:01:12 +0000
Files and hashes: 1: UdVugfsn-jbvcmbV5Jcfgl859_Q.asa (hash: Gfx7SJwlbKwzjES0mva5QhtlHSSpQonUDCYASrpk2W0=)
2: ZHZkuldzYUo8RPkMEq5yVUinXNQ.crl (hash: 4b9pv5F5gPzzGcauEq1DCXK9pv3mLzbVMS0Oz9cB2cg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/c1a46a-a79d-4595-bb39-e291a52a9d15/1/ZHZkuldzYUo8RPkMEq5yVUinXNQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/c1a46a-a79d-4595-bb39-e291a52a9d15/1/ZHZkuldzYUo8RPkMEq5yVUinXNQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZHZkuldzYUo8RPkMEq5yVUinXNQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 12:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:21:36:60:fc:74:31:a7:0c:a8:90:9b:a8:00:e4:49:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=647664ba5773614a3c44f90c12ae725548a75cd4
Validity
Not Before: May 13 12:01:12 2026 GMT
Not After : May 14 12:01:12 2026 GMT
Subject: CN=05384165136a910318d55aef291f7ef4edb48dbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:1a:d1:f7:43:c9:34:8e:42:ed:90:dd:48:f6:
c2:f3:23:57:2e:8d:72:ee:a9:e9:c5:e1:e3:e7:3b:
bf:89:ab:99:9b:58:8f:7e:4d:18:96:c0:1a:4b:44:
cd:47:60:05:c0:c5:3b:48:cd:4c:62:43:99:0f:0e:
5e:1b:75:f3:56:a5:90:42:d1:42:8f:80:73:d9:b8:
37:fe:c7:c2:6b:ee:99:33:e3:bc:5c:a3:38:c7:be:
07:2c:7d:7f:27:ec:ea:36:89:d7:9c:46:91:44:4f:
5b:49:15:54:07:65:b8:25:5a:ff:13:2f:fc:c0:8f:
19:c9:5e:f3:06:42:4d:8f:04:40:42:98:86:80:14:
f2:79:cd:49:76:ab:23:09:2a:25:de:a6:fd:a2:15:
94:ec:c4:22:4c:f9:23:b4:dc:e4:c7:96:83:98:a8:
52:75:1e:8b:a2:64:16:ad:18:aa:72:81:05:3a:5a:
ca:8c:ef:0c:ef:d5:b3:12:e9:19:58:17:27:b8:53:
dd:18:de:0b:db:4e:41:a6:ab:66:e4:52:fe:9b:81:
1a:78:50:4f:b6:05:b7:72:7d:62:cd:47:36:07:c2:
a4:50:e2:f5:cf:8a:6a:28:be:2e:7c:50:5a:6e:fc:
44:41:64:a0:66:17:e6:c4:b5:1d:24:99:f6:98:2f:
d9:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:38:41:65:13:6A:91:03:18:D5:5A:EF:29:1F:7E:F4:ED:B4:8D:BE
X509v3 Authority Key Identifier:
keyid:64:76:64:BA:57:73:61:4A:3C:44:F9:0C:12:AE:72:55:48:A7:5C:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZHZkuldzYUo8RPkMEq5yVUinXNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c1a46a-a79d-4595-bb39-e291a52a9d15/1/ZHZkuldzYUo8RPkMEq5yVUinXNQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c1a46a-a79d-4595-bb39-e291a52a9d15/1/ZHZkuldzYUo8RPkMEq5yVUinXNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:da:ab:8c:d5:d8:df:13:80:79:e9:ce:8f:f5:05:24:e3:84:
56:eb:0a:f3:29:a1:a1:48:e7:55:40:b8:93:06:ec:e9:08:33:
90:10:04:98:00:bd:29:0e:15:7d:42:59:fa:80:36:ee:79:a9:
ec:c8:12:e2:f9:5e:5a:37:5c:a3:4a:33:dd:4f:cf:e4:44:fc:
d0:da:6f:41:71:d9:53:13:f4:cf:cb:af:c5:c5:a1:08:35:48:
19:1f:e7:17:68:0e:1d:e1:c8:e6:ec:36:05:8f:99:78:bc:b3:
b0:03:ed:dc:dc:86:20:b2:80:32:5f:7d:ba:a8:9c:bc:38:29:
85:bb:6a:e3:ea:c5:18:d7:01:27:33:7b:ad:fe:ad:50:fc:a7:
2a:36:e1:23:0c:bd:b3:8e:df:1a:ed:5c:5c:d2:11:ca:b1:16:
9b:6f:e5:59:34:27:81:af:42:99:d0:0b:b1:1a:42:cd:bb:f9:
3b:54:db:e6:7c:a5:57:5d:05:a5:79:da:5e:7e:81:03:9c:48:
80:e4:d7:60:c0:aa:d2:23:4b:fd:71:71:ce:75:cd:59:51:20:
30:5a:a2:f9:1f:62:a0:8a:29:34:4a:fa:fc:b4:c8:b0:28:72:
44:33:bd:6b:d4:43:90:04:dc:2a:c5:60:7a:16:6b:ab:36:1a:
2e:16:55:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:53:49 2026 by rpki-client