Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.mft
File: zRJC5sfr2Coj-hoI85br5as0z2s.mft (raw, json)
Hash identifier: ubcvOnV72LOLyeS0D7xTvDNqk0jKv6lNgcGUIj5V+MM=
Subject key identifier: DA:EF:51:0C:E8:1B:3C:E1:00:BC:C5:06:37:12:CF:3E:35:DA:C9:68
Authority key identifier: CD:12:42:E6:C7:EB:D8:2A:23:FA:1A:08:F3:96:EB:E5:AB:34:CF:6B
Certificate issuer: /CN=cd1242e6c7ebd82a23fa1a08f396ebe5ab34cf6b
Certificate serial: 019E31F2F801DC11AF4F89C4B4CA167BC908
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRJC5sfr2Coj-hoI85br5as0z2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.mft
Manifest number: 1910
Signing time: Sat 16 May 2026 18:01:07 +0000
Manifest this update: Sat 16 May 2026 18:01:07 +0000
Manifest next update: Sun 17 May 2026 18:01:07 +0000
Files and hashes: 1: nOWsqCuFuUl88d8fe68oh7ATL8Y.roa (hash: 3ZcPCRJToIBazA6ZM2eZ5k1Cl21KURsg9GhtHBDZCsw=)
2: vyrrFLAQmM4kpL-C4kzXL9B0pEk.roa (hash: uDR2ErZozryJ4og8nKltQlCSGLY9GDhP6CrAdfmEEk8=)
3: zRJC5sfr2Coj-hoI85br5as0z2s.crl (hash: IKrtucS2DGPKCEemLHTMlTFxw2HfZehV15yEVNIiD8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/zRJC5sfr2Coj-hoI85br5as0z2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:f2:f8:01:dc:11:af:4f:89:c4:b4:ca:16:7b:c9:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd1242e6c7ebd82a23fa1a08f396ebe5ab34cf6b
Validity
Not Before: May 16 18:01:07 2026 GMT
Not After : May 17 18:01:07 2026 GMT
Subject: CN=daef510ce81b3ce100bcc5063712cf3e35dac968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:83:11:00:0a:c8:9c:ce:f9:7c:b9:0a:fa:7f:
60:e3:2c:0c:91:7e:56:2b:1b:bf:1c:6f:45:3e:c6:
e9:3e:30:86:39:72:76:b3:64:01:d1:3e:8e:f6:c5:
b6:81:43:82:0d:a6:e7:01:bf:04:6b:f2:3f:1d:20:
d5:f2:d7:48:e9:b2:ed:71:d2:66:0f:f9:3f:ab:13:
8c:38:f9:95:71:84:79:5d:54:90:4e:55:42:ae:c7:
f8:35:96:69:40:61:b9:1f:23:ab:a6:27:e8:c7:3d:
1d:6a:1f:95:af:61:79:3c:ab:16:83:5f:a8:72:26:
74:19:cb:32:5e:d0:8e:5d:dd:9e:ea:0a:0e:95:41:
b9:6a:0e:bb:f6:d8:86:e6:21:3f:5d:aa:34:3c:60:
36:3e:59:48:97:6e:e5:74:9f:f4:eb:9f:9d:91:a7:
1a:5f:75:11:54:04:20:c3:d2:64:98:8e:39:16:7d:
15:2b:fd:c4:5b:6b:c3:4a:83:50:42:ff:03:ef:62:
0e:ce:db:db:e5:7a:76:e6:21:54:62:c5:bd:5c:d3:
fd:e0:03:22:0e:9c:7e:67:fa:5b:82:3c:ff:37:86:
e7:66:fb:a1:f1:a0:80:fe:77:18:b2:fe:d9:f9:e4:
f3:14:81:38:55:c6:34:3c:fc:24:11:67:d8:54:6f:
7c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:EF:51:0C:E8:1B:3C:E1:00:BC:C5:06:37:12:CF:3E:35:DA:C9:68
X509v3 Authority Key Identifier:
keyid:CD:12:42:E6:C7:EB:D8:2A:23:FA:1A:08:F3:96:EB:E5:AB:34:CF:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRJC5sfr2Coj-hoI85br5as0z2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:27:67:8e:16:da:97:ff:00:d9:c2:97:04:4e:e8:4f:93:04:
fb:10:1a:a2:fa:9a:79:97:68:ba:c8:23:95:87:cf:56:b0:a8:
64:cb:68:41:9f:39:ed:f9:c2:a9:a7:22:46:15:df:2f:14:34:
bc:b5:36:5f:cc:3e:6e:08:ed:de:dc:0e:02:bb:31:e1:dc:61:
78:0f:21:43:86:f2:4a:18:1e:7a:f9:92:b7:65:9d:b2:6a:31:
bc:a3:d6:6a:c3:d3:00:5f:04:fa:8b:d1:b8:39:f1:6b:a0:57:
70:9c:ca:55:55:f6:e9:44:7f:c8:d7:7e:28:c2:1a:c0:71:fa:
52:e3:ee:21:5e:e5:e0:c1:05:92:b2:41:6e:16:27:81:9e:03:
73:fb:8d:51:7f:7f:e1:3b:ee:b3:87:a6:93:df:13:3d:5a:8d:
8a:d3:9f:2a:e3:53:35:e1:79:fa:86:ea:7e:9f:dd:6c:03:a8:
bc:56:68:e2:7e:9b:c3:c7:e4:23:f2:c2:cb:1d:fb:be:aa:91:
f2:3a:91:bc:34:8a:64:37:1d:de:d6:ef:95:e3:d7:93:33:fb:
64:4d:29:9a:45:08:08:e5:17:bd:2d:80:f8:54:d8:b0:8d:31:
48:10:17:6d:44:0d:aa:2b:04:1d:3b:8b:d0:44:b5:96:10:da:
5c:d7:71:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 21:14:30 2026 by rpki-client