Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft
File: ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft (raw, json)
Hash identifier: DG5/FYsoDqP2XfAeEORASAmiDfy4jTJ6LYt2pAiBgQU=
Subject key identifier: BB:31:B6:15:7D:2C:0A:B5:73:A2:4F:38:1F:C4:8D:3D:6E:13:1D:83
Authority key identifier: 65:4D:96:67:2A:59:EC:38:95:FC:15:84:7A:CA:1B:29:DB:79:12:44
Certificate issuer: /CN=654d96672a59ec3895fc15847aca1b29db791244
Certificate serial: 019E7B8C69DD9B05AB64D6A1E171E0AEC6DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZU2WZypZ7DiV_BWEesobKdt5EkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft
Manifest number: 08B9
Signing time: Sun 31 May 2026 01:01:00 +0000
Manifest this update: Sun 31 May 2026 01:01:00 +0000
Manifest next update: Mon 01 Jun 2026 01:01:00 +0000
Files and hashes: 1: Utc_slWR8yHDk290AryGYchTlYA.roa (hash: NUCfh9s0WjqwyOFskJUWEakWr/HjDtF3kDLbwsne7Ro=)
2: ZU2WZypZ7DiV_BWEesobKdt5EkQ.crl (hash: yDyGEeBm2k1P51Etz4HfqJrv4pPZSFiTxNQ/nv/9O0Y=)
3: zynEh3pPdQY3KJQVgvhOsaYxciw.roa (hash: rOMrg3wVXzNicfVb9K/t1LGxhcGrIWejZTOsjk80vqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZU2WZypZ7DiV_BWEesobKdt5EkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 01 Jun 2026 01:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:7b:8c:69:dd:9b:05:ab:64:d6:a1:e1:71:e0:ae:c6:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=654d96672a59ec3895fc15847aca1b29db791244
Validity
Not Before: May 31 01:01:00 2026 GMT
Not After : Jun 1 01:01:00 2026 GMT
Subject: CN=bb31b6157d2c0ab573a24f381fc48d3d6e131d83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9a:33:a8:9b:31:15:d4:9e:8a:bc:b3:7c:36:
55:33:c6:8c:8b:05:86:a2:e7:4c:a1:5c:e6:27:b9:
ce:01:f3:16:9a:f7:7c:83:c9:cd:cb:2c:67:8e:fa:
7b:df:a9:52:5d:80:ac:01:91:98:f1:2e:d5:84:2a:
9c:96:ee:a4:aa:8a:8f:43:15:04:7d:19:9d:fe:fc:
e6:03:87:fe:9c:4f:33:3c:f7:56:a1:ae:41:fc:6a:
12:70:6c:c6:9f:ab:06:74:f3:b9:5e:ea:9d:3f:49:
ff:e7:4d:a9:5e:08:91:90:b5:8f:f4:db:19:77:ec:
c8:31:6f:96:97:db:9b:f7:a8:55:4e:7e:e1:6f:da:
93:16:92:d1:31:d7:0f:e0:eb:98:89:c5:fe:a4:50:
7f:f9:15:b2:37:d5:06:87:4e:67:7b:82:70:a1:ff:
50:df:ef:9e:fd:05:81:84:6a:6e:b8:87:03:ba:94:
98:6e:8a:09:3a:2c:cb:21:d1:e7:9e:d9:f4:92:d1:
7f:5f:f5:46:46:34:05:47:89:ca:b9:6b:09:f5:63:
0e:0d:1f:26:79:5d:88:4a:0c:35:43:48:90:f7:3a:
fe:bf:b9:58:55:f9:ab:50:06:a7:14:da:9c:58:fb:
93:1d:92:7c:1f:8e:53:5a:57:b7:bb:3e:cd:cf:49:
cb:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:31:B6:15:7D:2C:0A:B5:73:A2:4F:38:1F:C4:8D:3D:6E:13:1D:83
X509v3 Authority Key Identifier:
keyid:65:4D:96:67:2A:59:EC:38:95:FC:15:84:7A:CA:1B:29:DB:79:12:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZU2WZypZ7DiV_BWEesobKdt5EkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:16:86:a3:1a:a1:ed:e6:da:86:a3:6b:c1:c4:51:a0:82:fe:
d8:a0:ce:53:68:56:56:d6:d2:ac:61:f2:66:46:74:69:59:b9:
b3:12:9e:91:ed:11:0a:1d:36:95:fc:44:ea:1a:76:ca:9e:68:
7b:04:9e:74:9e:d3:c1:76:cb:75:c2:9a:5d:a2:77:ae:47:8f:
62:af:1a:4d:ba:e3:63:42:49:21:cc:7b:41:f7:9c:46:66:74:
3d:96:48:51:e3:66:9e:63:ac:5f:53:f9:6e:4a:73:79:08:ea:
85:e7:d8:f7:53:52:dd:42:4e:e8:d9:8e:86:95:25:67:02:3c:
7f:89:85:42:c2:07:15:11:4c:3f:7b:44:18:4c:0b:fc:11:c1:
57:30:d8:26:73:38:19:65:1d:01:e7:35:dd:af:df:ec:f8:8a:
da:ff:ba:35:7a:04:1b:ed:c8:68:5e:26:43:b9:f6:17:16:61:
b1:45:f2:4f:ff:f0:b8:c4:83:fa:0e:3c:25:8a:ff:8a:51:c7:
17:92:67:76:95:a3:59:6c:3c:85:43:3e:3d:b6:c4:c3:1f:97:
2f:14:e4:35:40:18:af:8c:cd:0d:20:f8:e7:ac:ee:bb:a2:82:
9c:8c:7e:fa:67:30:83:80:2e:4a:35:a1:52:e8:a4:09:3c:36:
e3:ac:2b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 31 08:01:27 2026 by rpki-client