Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.mft
File: 0Zk_eMrkRZqbniaJrTDwvETMZyQ.mft (raw, json)
Hash identifier: 3vNYUlmd/49SL1XOtWWoQb8e7brVulVQN0sJU5iP7as=
Subject key identifier: B6:88:B2:DC:91:A2:BD:A1:1D:3C:28:E3:1A:64:C9:94:30:6D:36:7D
Authority key identifier: D1:99:3F:78:CA:E4:45:9A:9B:9E:26:89:AD:30:F0:BC:44:CC:67:24
Certificate issuer: /CN=d1993f78cae4459a9b9e2689ad30f0bc44cc6724
Certificate serial: 019E2ADDF4548EBC1211DFD4A43A796570E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Zk_eMrkRZqbniaJrTDwvETMZyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.mft
Manifest number: 0661
Signing time: Fri 15 May 2026 09:00:49 +0000
Manifest this update: Fri 15 May 2026 09:00:49 +0000
Manifest next update: Sat 16 May 2026 09:00:49 +0000
Files and hashes: 1: 0Zk_eMrkRZqbniaJrTDwvETMZyQ.crl (hash: UQ+DDMpZ1shtjgmCCvMEQEJ7nOw9+wlpcktBRWHb9vE=)
2: qo4K2MxKuprqgn2JH-P6sbefGGQ.roa (hash: 5nQ7RiiW8bFTZTK/XJeOeCamYJvNUIxvBcEODwO0sgE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Zk_eMrkRZqbniaJrTDwvETMZyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2a:dd:f4:54:8e:bc:12:11:df:d4:a4:3a:79:65:70:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1993f78cae4459a9b9e2689ad30f0bc44cc6724
Validity
Not Before: May 15 09:00:49 2026 GMT
Not After : May 16 09:00:49 2026 GMT
Subject: CN=b688b2dc91a2bda11d3c28e31a64c994306d367d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4b:53:09:cd:45:ef:48:b6:49:df:d2:14:92:
a6:4a:88:28:4a:c9:12:32:22:b6:0c:e7:a8:74:01:
9f:33:a9:63:cf:36:2f:a0:44:48:ec:08:7b:2a:b8:
ca:d6:0b:e2:3f:5a:eb:e8:02:8b:00:03:db:97:1e:
0a:53:d2:bb:06:a5:73:6f:db:fd:e2:f3:7d:53:05:
a8:f5:cb:fb:24:56:df:34:4e:20:27:8b:d3:44:74:
15:49:1f:6e:0a:2c:6a:b6:0c:a4:d5:cb:61:40:2a:
78:38:80:52:ed:1e:5c:75:bd:4a:75:7b:df:83:86:
e4:e8:5c:cc:f4:bf:57:7a:62:05:e1:32:0e:e6:4e:
6c:22:ed:72:46:29:ad:0a:51:55:ca:e1:26:dd:82:
20:17:3a:e0:33:b9:83:11:a3:ec:ec:a9:83:57:16:
3b:e4:34:d6:d4:24:79:d7:44:af:da:f0:12:8c:4e:
57:3e:7c:12:ca:bb:7b:c1:18:71:c1:53:65:9f:46:
f6:91:5c:b4:fe:33:67:39:77:f1:b1:08:f6:5a:77:
42:8f:88:b6:6e:75:64:0a:a7:86:8b:31:11:65:7e:
ec:6f:6d:43:9a:87:63:9c:b9:68:dc:30:7c:fb:04:
45:14:fa:66:5b:d6:57:a7:5f:47:b4:58:f0:d1:58:
e4:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:88:B2:DC:91:A2:BD:A1:1D:3C:28:E3:1A:64:C9:94:30:6D:36:7D
X509v3 Authority Key Identifier:
keyid:D1:99:3F:78:CA:E4:45:9A:9B:9E:26:89:AD:30:F0:BC:44:CC:67:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Zk_eMrkRZqbniaJrTDwvETMZyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:5a:b5:b5:46:7e:8d:9a:b8:89:bc:74:39:a2:25:39:b5:c0:
5d:88:60:e5:65:bb:74:9c:56:c3:a7:92:85:e6:ca:e8:5f:8c:
a4:fb:83:e1:df:c8:e6:fa:f8:8f:2c:df:68:27:79:b9:85:b3:
6f:e1:80:07:6e:4b:bb:b1:a9:91:66:b2:ec:79:57:ed:12:bf:
c4:ac:4d:d3:57:3d:ed:9c:46:c4:b7:11:7e:11:5c:6e:78:fe:
da:43:17:3f:cb:d0:6b:b5:a0:41:cd:b8:db:ae:a2:b9:90:a6:
a9:16:89:87:8c:49:a9:11:6a:0f:b5:28:89:88:50:13:2a:83:
10:20:3c:ca:db:6a:84:ef:06:f8:be:bc:88:98:b8:9f:ed:c7:
0f:aa:80:7c:4f:bb:2e:f8:52:0c:17:d9:d5:ab:9c:73:7c:d1:
5c:98:a3:89:5a:32:08:c2:e4:dc:bf:16:79:c9:2d:96:d7:69:
45:7e:21:50:b8:8e:21:33:8c:b5:3f:47:c5:0b:9b:8f:58:e8:
68:4e:5f:78:88:91:99:23:3f:89:10:ba:fb:56:19:ad:d0:58:
c3:c3:f9:97:f4:06:f3:e2:76:0c:1c:64:0e:13:54:1a:30:28:
36:cc:80:e0:8c:f9:cd:72:21:9d:15:55:bc:2a:63:65:7f:5d:
f1:2d:6f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 11:18:15 2026 by rpki-client