Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/d527f8-e5af-4820-a248-1e66505131ca/1/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.mft
File: ZdZjKVdsnAGzzYKF9LVLAXDYw5o.mft (raw, json)
Hash identifier: k2ihkEbhRxIaFfxAnqvCLlqQYWPjJDlqhF3Ng0V16vs=
Subject key identifier: 19:7A:ED:E4:BE:A0:C5:AA:0E:C8:F1:C3:BB:03:9E:DA:B5:41:CD:90
Authority key identifier: 65:D6:63:29:57:6C:9C:01:B3:CD:82:85:F4:B5:4B:01:70:D8:C3:9A
Certificate issuer: /CN=65d66329576c9c01b3cd8285f4b54b0170d8c39a
Certificate serial: 019E314E1AA998698C23C995090FBC683D0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/d527f8-e5af-4820-a248-1e66505131ca/1/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.mft
Manifest number: 15CF
Signing time: Sat 16 May 2026 15:01:02 +0000
Manifest this update: Sat 16 May 2026 15:01:02 +0000
Manifest next update: Sun 17 May 2026 15:01:02 +0000
Files and hashes: 1: GZsPzmbA--FYrc4SNgLcVzZUS58.roa (hash: gCmBdutjh3s8CjQ+XZ5HjES4JuiIxCATlIX/+TCZL7A=)
2: ZdZjKVdsnAGzzYKF9LVLAXDYw5o.crl (hash: Dc5FV5jhJeJQ5aaYNzqrXm44DcXs3WXgHbZ4ABS/o5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/d527f8-e5af-4820-a248-1e66505131ca/1/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/d527f8-e5af-4820-a248-1e66505131ca/1/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:4e:1a:a9:98:69:8c:23:c9:95:09:0f:bc:68:3d:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65d66329576c9c01b3cd8285f4b54b0170d8c39a
Validity
Not Before: May 16 15:01:02 2026 GMT
Not After : May 17 15:01:02 2026 GMT
Subject: CN=197aede4bea0c5aa0ec8f1c3bb039edab541cd90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:8d:a6:e4:c3:4f:37:b4:28:90:f6:e6:7a:b2:
27:a1:22:26:08:27:04:a3:f0:d2:9c:ef:86:2e:bd:
01:65:b2:88:e8:e8:ea:d8:e6:a5:04:08:fd:45:99:
ca:f6:b3:10:49:46:ad:3b:41:39:09:52:c4:fa:10:
20:53:0b:3a:d3:95:df:19:e2:37:f3:6d:67:1c:30:
51:4c:33:74:8d:36:ec:71:c8:58:67:ed:6e:cc:8b:
7e:c9:a7:49:9d:24:a2:11:79:00:27:80:74:a1:82:
15:f1:57:8e:8e:03:20:52:dd:5c:80:07:ef:21:46:
26:15:b0:9d:d5:b3:8f:09:2a:c1:d6:fd:1c:a9:06:
39:48:70:ef:17:bd:0c:b2:10:cd:66:a9:23:50:40:
6b:ca:f7:4a:01:42:76:76:6e:6a:cd:dc:ed:98:5d:
b9:07:54:cd:b0:ba:b3:09:70:5a:4a:44:14:8e:69:
3f:56:09:72:28:73:6b:2c:81:fb:63:8d:f5:3c:d8:
95:52:26:2c:02:96:29:21:a7:51:1c:fc:5e:3e:86:
1b:e2:a4:71:0d:a1:73:06:70:59:03:0d:b9:ef:f5:
a2:c9:86:22:2b:0d:05:02:88:70:7b:7e:0e:e8:d3:
60:14:4f:64:1d:52:c0:aa:c2:a3:47:f0:cb:8e:06:
3b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:7A:ED:E4:BE:A0:C5:AA:0E:C8:F1:C3:BB:03:9E:DA:B5:41:CD:90
X509v3 Authority Key Identifier:
keyid:65:D6:63:29:57:6C:9C:01:B3:CD:82:85:F4:B5:4B:01:70:D8:C3:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d527f8-e5af-4820-a248-1e66505131ca/1/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d527f8-e5af-4820-a248-1e66505131ca/1/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:b8:19:24:32:67:d7:7e:4a:71:b4:fb:2a:34:70:ef:d7:7c:
1e:dd:25:cc:10:84:d3:5e:c9:fd:2f:70:b6:28:46:6c:94:ff:
65:36:b6:7a:d4:0b:82:27:57:4c:8f:f6:4d:98:22:7d:1c:1b:
84:ba:c0:68:bc:aa:3a:c1:4a:16:f4:09:6a:2e:5b:e2:b3:d3:
23:15:a4:e4:00:fb:7e:45:f7:d2:9a:4d:02:98:37:30:a2:42:
6f:11:5d:87:3f:cf:ee:13:7e:bd:b9:04:3a:c9:33:e3:9a:49:
a0:1d:8a:e3:8c:30:e9:65:ca:f9:37:cd:90:de:62:7d:3d:08:
c9:82:41:1d:e7:05:84:9a:84:b5:80:b5:f6:c3:43:0a:6e:05:
10:44:5a:73:a5:1a:2d:ea:d6:f8:9f:8c:e1:7e:23:31:44:aa:
4b:e1:52:de:ac:09:ee:cc:5a:d8:14:80:45:23:a9:36:fb:2a:
a3:04:eb:9a:e8:e0:8c:ba:c2:1a:9e:47:74:1a:92:21:41:8b:
f8:c0:87:cb:67:ff:81:19:76:2b:d1:89:0a:9b:6b:06:6e:df:
f2:97:a9:d1:b3:ee:8d:9c:aa:b0:15:f9:46:9b:12:f2:56:33:
07:d4:c0:72:98:38:33:7d:9d:f0:f0:d6:79:96:5a:4f:ed:c9:
e6:65:e0:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 00:29:44 2026 by rpki-client