Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.mft
File: 0Zk_eMrkRZqbniaJrTDwvETMZyQ.mft (raw, json)
Hash identifier: 9VIeBa0b5/eWxHraZX/k+YKahLyWPRPrBmmyDwaffMw=
Subject key identifier: 81:52:AD:FB:43:E2:BB:7D:8C:24:F1:F2:82:F1:AF:C1:5F:08:B3:3B
Authority key identifier: D1:99:3F:78:CA:E4:45:9A:9B:9E:26:89:AD:30:F0:BC:44:CC:67:24
Certificate issuer: /CN=d1993f78cae4459a9b9e2689ad30f0bc44cc6724
Certificate serial: 019E28EF9384E59EE0185C7AD7D3299F0401
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Zk_eMrkRZqbniaJrTDwvETMZyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.mft
Manifest number: 0660
Signing time: Fri 15 May 2026 00:00:49 +0000
Manifest this update: Fri 15 May 2026 00:00:49 +0000
Manifest next update: Sat 16 May 2026 00:00:49 +0000
Files and hashes: 1: 0Zk_eMrkRZqbniaJrTDwvETMZyQ.crl (hash: mt3alH55Iii97R92aPrl5kowIwQeQY5VDRezAfjATxQ=)
2: qo4K2MxKuprqgn2JH-P6sbefGGQ.roa (hash: 5nQ7RiiW8bFTZTK/XJeOeCamYJvNUIxvBcEODwO0sgE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Zk_eMrkRZqbniaJrTDwvETMZyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:28:ef:93:84:e5:9e:e0:18:5c:7a:d7:d3:29:9f:04:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1993f78cae4459a9b9e2689ad30f0bc44cc6724
Validity
Not Before: May 15 00:00:49 2026 GMT
Not After : May 16 00:00:49 2026 GMT
Subject: CN=8152adfb43e2bb7d8c24f1f282f1afc15f08b33b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1d:f7:62:e9:90:cf:97:97:34:01:d7:07:ec:
a0:2d:6f:01:6b:37:0a:e4:b5:74:59:23:d5:f6:14:
a6:f1:0f:fe:5d:78:e2:e8:3e:ff:1e:93:51:b1:61:
b2:9e:e9:a5:e2:47:7a:fc:48:38:a7:db:1e:1a:0b:
6b:f7:c8:92:45:4f:e0:da:78:67:ea:23:4e:09:fb:
8d:63:9e:2f:80:b3:f0:be:81:07:55:b1:ea:f8:c1:
4b:65:be:ea:07:b3:96:90:8f:81:4e:24:b5:19:32:
95:05:1c:43:3a:4d:4a:87:c2:11:33:68:89:d1:59:
ee:c2:b6:86:bc:0c:10:66:ab:35:1b:b7:7f:8e:90:
e6:a2:c6:6f:3b:25:03:5a:26:e4:cc:eb:71:07:23:
38:b5:f0:4d:65:87:fc:75:c6:ea:c7:5a:8a:66:9a:
98:9d:bd:25:3a:07:78:a8:9a:1c:5a:51:f2:26:88:
1f:ab:0e:09:f1:c4:33:dc:8a:dc:dc:e9:cd:af:23:
a0:77:c5:cd:f4:2d:6e:49:76:66:a6:63:a2:eb:f1:
59:2f:8d:8a:1d:db:47:a1:8a:ea:a8:c8:24:43:bb:
98:6b:10:3d:aa:79:e9:b5:99:26:e7:1f:02:31:ec:
ce:d1:52:ec:8a:27:01:40:07:19:24:87:45:98:08:
e1:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:52:AD:FB:43:E2:BB:7D:8C:24:F1:F2:82:F1:AF:C1:5F:08:B3:3B
X509v3 Authority Key Identifier:
keyid:D1:99:3F:78:CA:E4:45:9A:9B:9E:26:89:AD:30:F0:BC:44:CC:67:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Zk_eMrkRZqbniaJrTDwvETMZyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:27:3e:ff:c6:3a:48:fb:e5:57:38:f7:36:47:c8:42:54:41:
18:60:20:31:8b:74:37:73:0f:01:e1:b4:e1:b9:d6:6f:ed:6c:
af:70:5b:ab:fb:e4:90:bd:f4:8a:59:c4:c2:be:39:b4:81:65:
59:71:f9:ae:3c:bc:64:69:b1:5b:74:dd:9b:d2:73:bb:09:1c:
9c:24:c5:c6:59:82:62:ca:13:94:ca:eb:13:8d:c7:56:51:17:
39:e2:4c:d4:ca:02:1f:26:38:78:0a:a2:58:2b:8e:86:3d:7e:
88:33:5d:06:a3:52:69:7a:a2:03:57:aa:07:6e:19:6e:03:14:
e6:50:e1:7a:7d:7a:c4:f2:d8:72:23:a0:5c:cf:de:c7:09:bd:
93:74:8f:9c:fe:b7:17:9b:83:b3:5a:3d:79:bf:24:77:31:c1:
ee:9b:8f:74:aa:d6:95:87:88:b2:8e:f0:11:77:28:b7:ed:95:
46:81:d6:11:b1:1f:db:49:c6:ea:6f:b9:ab:95:b7:32:9b:75:
cc:b4:0d:75:2d:13:e7:12:13:31:78:53:06:97:fe:2e:74:10:
5f:3a:57:a9:16:6b:ee:31:df:2c:7a:b5:04:b5:94:d9:67:77:
00:20:29:2b:9d:82:1c:22:eb:80:81:b8:f4:61:45:08:c2:f7:
9a:03:26:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 10:35:52 2026 by rpki-client