Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5ca328-f114-4b3f-b8ba-50d7d94e2b9f/1/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.mft
File: z1jLxKrj-AxJs3KRGo1Ehhzf7ss.mft (raw, json)
Hash identifier: n90+Z9u6pi9XSGyx8sDaLQHkdK9wPM2Vj3aaddhI52c=
Subject key identifier: F4:06:B3:67:CB:7B:29:C0:79:7D:4E:0B:B6:EB:E6:3C:3D:0C:A0:29
Authority key identifier: CF:58:CB:C4:AA:E3:F8:0C:49:B3:72:91:1A:8D:44:86:1C:DF:EE:CB
Certificate issuer: /CN=cf58cbc4aae3f80c49b372911a8d44861cdfeecb
Certificate serial: 019E31177BB7FDAF539133C08157B6CF3955
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/5ca328-f114-4b3f-b8ba-50d7d94e2b9f/1/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.mft
Manifest number: 1916
Signing time: Sat 16 May 2026 14:01:22 +0000
Manifest this update: Sat 16 May 2026 14:01:22 +0000
Manifest next update: Sun 17 May 2026 14:01:22 +0000
Files and hashes: 1: D4uyY53Lmy1XuEBR8gb-mU5orsY.roa (hash: 8oSSSK/7hQ8ikVIjak5cGWlYgkzTSsHj01P8F5aOk0c=)
2: _-wZGwfKC4JuWvajehhHWsCMKV0.roa (hash: d+1R/IWP3rQJYixIA4F2RI4IuR3jIDKC1rUEN0I2u8s=)
3: z1jLxKrj-AxJs3KRGo1Ehhzf7ss.crl (hash: 9p9z3HSxvW5c3mHZoqiykV+D2ALQdH1tW0673Q1jz14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/5ca328-f114-4b3f-b8ba-50d7d94e2b9f/1/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/5ca328-f114-4b3f-b8ba-50d7d94e2b9f/1/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.mft
rsync://rpki.ripe.net/repository/DEFAULT/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:17:7b:b7:fd:af:53:91:33:c0:81:57:b6:cf:39:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf58cbc4aae3f80c49b372911a8d44861cdfeecb
Validity
Not Before: May 16 14:01:22 2026 GMT
Not After : May 17 14:01:22 2026 GMT
Subject: CN=f406b367cb7b29c0797d4e0bb6ebe63c3d0ca029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:05:08:5a:11:6f:a6:08:0d:f3:73:b7:be:86:
27:d1:d2:b8:5e:26:56:98:1c:d7:d2:20:6b:40:20:
57:b4:92:16:cb:5c:d3:79:4f:95:59:9e:01:f6:23:
30:98:69:6b:81:21:c5:cb:6b:6d:5d:82:4f:b3:6f:
2f:8e:b8:95:93:44:71:7d:a6:b2:06:5d:26:de:53:
e8:1c:34:cc:48:64:dd:e7:03:f9:14:3c:6a:fd:c4:
b2:1a:c1:bd:34:41:6d:63:0e:77:95:33:2f:ee:a7:
52:ce:78:8f:b8:ce:75:99:51:49:e1:73:34:e0:c1:
69:7d:eb:52:c0:0d:47:0c:4c:57:d3:e4:16:04:12:
2d:5a:9b:8e:6b:49:11:ba:9d:6a:d7:d8:d5:7c:b2:
cd:52:8d:a6:ba:19:39:92:9c:6e:0c:c1:fb:0b:50:
de:29:7a:ef:23:64:5d:78:46:46:c6:be:cb:db:d4:
9c:61:25:93:b8:17:0a:c5:16:4b:4c:21:b2:c7:d1:
72:ba:fa:85:c1:51:7b:1b:19:18:0d:df:10:69:00:
cc:f9:69:9c:15:9d:8b:29:c8:d5:99:93:09:77:37:
81:1c:de:71:6e:d9:dd:5d:ae:76:b7:c7:74:a7:a7:
c3:a2:17:cd:d7:46:4f:a0:3c:f4:ba:53:33:41:9a:
44:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:06:B3:67:CB:7B:29:C0:79:7D:4E:0B:B6:EB:E6:3C:3D:0C:A0:29
X509v3 Authority Key Identifier:
keyid:CF:58:CB:C4:AA:E3:F8:0C:49:B3:72:91:1A:8D:44:86:1C:DF:EE:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5ca328-f114-4b3f-b8ba-50d7d94e2b9f/1/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5ca328-f114-4b3f-b8ba-50d7d94e2b9f/1/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:a1:dd:6f:a5:a3:9e:cc:5c:1a:e1:5c:12:e7:9a:57:9e:6e:
01:c9:30:d9:34:4b:12:72:87:84:7e:a5:07:3a:e6:96:84:14:
38:53:f3:27:1d:ab:e5:c7:45:43:0e:1d:35:03:dc:cf:f7:93:
e7:c2:cc:60:df:be:23:f9:37:85:c9:32:c2:55:b7:8c:49:ec:
05:5f:22:1d:9e:a7:04:a9:58:0a:9c:59:49:25:bc:c9:3c:6c:
9c:83:7a:96:02:27:b4:b4:94:aa:ef:53:27:89:91:43:93:e5:
9a:73:ed:da:11:39:0b:c2:5a:27:66:ab:c9:11:4e:92:98:c8:
b7:76:bb:af:7f:ea:31:ff:68:1f:ee:b1:28:28:3b:a9:98:72:
b5:df:1b:f9:3c:33:c7:65:8c:33:16:9d:c9:1a:1f:95:7c:44:
01:0f:8f:a0:5b:18:39:5f:79:c0:81:8f:4b:ca:82:a8:af:2f:
60:1d:47:33:e7:58:20:2f:3f:87:ab:48:f1:b7:52:f6:08:77:
2a:b2:e7:bc:e0:f5:3d:c3:16:10:2c:04:c7:8f:8e:19:a4:0a:
b9:06:25:d7:a6:2d:bc:48:dc:c0:b1:65:99:f3:13:84:37:c9:
40:25:a5:c0:9b:47:64:63:6d:20:b7:2e:12:6c:9c:3c:bc:1d:
4c:26:d7:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 20:23:12 2026 by rpki-client