Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/1cfceb-b409-4e89-bcb0-2fe14dd38d5d/1/zBlkheZzlI1VUF23UQ87lXfNOts.mft
File: zBlkheZzlI1VUF23UQ87lXfNOts.mft (raw, json)
Hash identifier: Af4HqDmHQYILs6UX1Nulzvx3E75lekLW0Tjaosn54Oc=
Subject key identifier: B5:BA:FF:23:D5:76:B0:EC:D1:8D:66:CD:58:5A:5E:46:72:87:17:45
Authority key identifier: CC:19:64:85:E6:73:94:8D:55:50:5D:B7:51:0F:3B:95:77:CD:3A:DB
Certificate issuer: /CN=cc196485e673948d55505db7510f3b9577cd3adb
Certificate serial: 019E7AE7213559FFDB73293B1B5F3233F110
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zBlkheZzlI1VUF23UQ87lXfNOts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/1cfceb-b409-4e89-bcb0-2fe14dd38d5d/1/zBlkheZzlI1VUF23UQ87lXfNOts.mft
Manifest number: B3
Signing time: Sat 30 May 2026 22:00:28 +0000
Manifest this update: Sat 30 May 2026 22:00:28 +0000
Manifest next update: Sun 31 May 2026 22:00:28 +0000
Files and hashes: 1: X2BbHndtPwpXSs2sGEdVgFLq9BU.roa (hash: emzj289yDYGpibBHeVzv0i5u6U+HSsPi/OSfpVmeMAM=)
2: zBlkheZzlI1VUF23UQ87lXfNOts.crl (hash: bHuhh61CwPGSdIME302OIEPMm8h4S/rvrlC5yrpNpyY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/1cfceb-b409-4e89-bcb0-2fe14dd38d5d/1/zBlkheZzlI1VUF23UQ87lXfNOts.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/1cfceb-b409-4e89-bcb0-2fe14dd38d5d/1/zBlkheZzlI1VUF23UQ87lXfNOts.mft
rsync://rpki.ripe.net/repository/DEFAULT/zBlkheZzlI1VUF23UQ87lXfNOts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 31 May 2026 22:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:7a:e7:21:35:59:ff:db:73:29:3b:1b:5f:32:33:f1:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc196485e673948d55505db7510f3b9577cd3adb
Validity
Not Before: May 30 22:00:28 2026 GMT
Not After : May 31 22:00:28 2026 GMT
Subject: CN=b5baff23d576b0ecd18d66cd585a5e4672871745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:4c:e3:30:ef:15:1b:b7:40:c9:cd:f8:2f:00:
d2:7a:e9:37:fb:cc:62:01:ff:27:2a:ba:75:8f:25:
e7:0e:eb:65:ff:e6:c4:56:9f:86:c2:7e:78:5e:0e:
a1:1e:c6:ba:8f:ed:fb:07:50:02:e3:66:9a:f4:82:
cd:66:88:3a:ff:80:d9:96:e2:13:42:b3:55:9a:a5:
2e:99:6a:6c:6f:1b:27:89:a4:1b:c4:6e:a5:8a:18:
d7:f4:b3:ff:78:dd:66:db:bf:8f:ff:8d:44:e5:43:
13:ba:9f:82:48:ad:8b:a7:30:72:98:74:4e:6f:a5:
2f:60:4a:8c:25:3c:7f:42:0c:8a:39:c9:98:96:00:
cb:78:c5:cc:d1:5a:1a:2c:f7:60:f5:ce:81:ce:92:
ba:85:7a:7a:8f:e8:1c:22:8c:c6:40:a7:16:bc:fc:
e1:1c:7d:98:16:8c:8d:f4:55:e5:16:b6:a9:ce:14:
0d:83:aa:2d:ab:73:1e:db:81:73:a8:3b:4e:1f:f3:
37:c6:15:af:fa:eb:4b:13:3d:ca:d1:9a:f7:7e:43:
c0:ae:9c:5f:d2:e1:a4:01:6d:e2:cf:9e:24:16:d4:
7f:dd:c7:b0:66:38:de:d3:6e:63:80:36:98:fd:c7:
c2:ea:3e:74:21:3a:b5:8a:1e:83:17:10:b2:79:f5:
b5:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:BA:FF:23:D5:76:B0:EC:D1:8D:66:CD:58:5A:5E:46:72:87:17:45
X509v3 Authority Key Identifier:
keyid:CC:19:64:85:E6:73:94:8D:55:50:5D:B7:51:0F:3B:95:77:CD:3A:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zBlkheZzlI1VUF23UQ87lXfNOts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1cfceb-b409-4e89-bcb0-2fe14dd38d5d/1/zBlkheZzlI1VUF23UQ87lXfNOts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1cfceb-b409-4e89-bcb0-2fe14dd38d5d/1/zBlkheZzlI1VUF23UQ87lXfNOts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:e3:4a:04:b6:9c:c1:be:58:fa:9a:9a:8f:d8:27:60:06:a0:
6f:b9:7b:74:ff:49:40:1b:39:1a:fa:b6:f3:8a:bf:7a:d5:7a:
4f:79:50:71:64:46:1e:2f:ce:75:cb:9b:18:13:ea:c4:50:51:
b4:f9:ce:4e:ab:b3:e6:65:e2:e0:46:cc:80:e9:76:3c:1e:47:
a7:d7:52:26:3a:49:3c:85:83:ee:0f:57:d8:60:b2:7c:59:c8:
b6:5c:a3:91:8c:96:76:9c:47:5e:fc:d1:5a:f1:a1:af:22:b7:
ce:79:f0:f0:a8:68:16:f8:a7:9a:1c:1a:04:78:d5:86:73:28:
fe:99:ab:22:01:30:bb:8c:74:94:6d:a9:e6:be:eb:67:4f:46:
db:cb:41:95:22:90:c8:c3:ce:4b:c9:e8:5c:cf:75:08:03:69:
f1:66:17:67:8e:74:7d:a6:11:82:90:ee:72:eb:e7:37:60:14:
ce:90:da:cb:91:e3:5b:6c:4f:fb:48:30:0d:4b:18:c3:25:b0:
3a:c9:52:7b:31:a9:8f:fc:2e:de:4f:93:cb:d5:48:58:bc:15:
45:4f:a9:d7:08:46:32:d5:5b:92:6f:bf:58:b0:9c:24:7d:d1:
11:9c:11:4d:d8:33:cb:1f:39:fa:a8:2b:ef:e7:84:94:22:74:
3a:54:05:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 31 06:33:49 2026 by rpki-client