Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.mft
File: zs05HGYMPlfFO4fAtS7A0vL0J3U.mft (raw, json)
Hash identifier: ilZIGDchzhLk0Ql6EJvtrOi27pYEzI9bMhvxn5fq4iY=
Subject key identifier: BD:19:C7:37:FF:F5:E9:5D:FC:A1:7A:E6:58:10:CB:E9:6A:FC:9A:AC
Authority key identifier: CE:CD:39:1C:66:0C:3E:57:C5:3B:87:C0:B5:2E:C0:D2:F2:F4:27:75
Certificate issuer: /CN=cecd391c660c3e57c53b87c0b52ec0d2f2f42775
Certificate serial: 019EC0DB0A7DD5BC0E140C446B8F941C3C34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zs05HGYMPlfFO4fAtS7A0vL0J3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.mft
Manifest number: 0913
Signing time: Sat 13 Jun 2026 12:00:40 +0000
Manifest this update: Sat 13 Jun 2026 12:00:40 +0000
Manifest next update: Sun 14 Jun 2026 12:00:40 +0000
Files and hashes: 1: K1WYHWxT9hUhyCzFRd3qp6J1SRo.roa (hash: ofCgYNoPNZP6vNBlI2XsxCW6wFsFBZey/s584doB1q4=)
2: nNBG6JVVM3hu0P20Vu06-SMt-9I.roa (hash: M+TeIwkxE9H/4NhfymMWaPcB1L3//0ChdU6G+C5A8KM=)
3: zs05HGYMPlfFO4fAtS7A0vL0J3U.crl (hash: iGgUjhHFu+PmF8Al0hwTaRfshN7okoNUKiXihz+fps4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/zs05HGYMPlfFO4fAtS7A0vL0J3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:db:0a:7d:d5:bc:0e:14:0c:44:6b:8f:94:1c:3c:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cecd391c660c3e57c53b87c0b52ec0d2f2f42775
Validity
Not Before: Jun 13 12:00:40 2026 GMT
Not After : Jun 14 12:00:40 2026 GMT
Subject: CN=bd19c737fff5e95dfca17ae65810cbe96afc9aac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:8c:17:61:47:5b:81:8c:0d:31:bc:c8:8d:bf:
7d:0e:f2:c6:1c:f0:b8:e0:dd:97:92:f4:0a:39:4c:
10:92:f2:14:d3:27:2d:0f:ff:5f:3d:e1:e3:70:29:
85:c9:3b:db:2e:12:c9:ae:26:fe:88:67:a6:cd:f9:
f0:04:83:f4:50:7f:34:6d:07:74:4e:0a:c0:33:17:
b8:a8:e5:63:9d:82:1f:48:89:53:f5:33:b7:c5:1d:
44:c6:bc:32:2f:21:f6:c1:f3:5b:d4:83:bd:dc:21:
8d:41:7c:31:bb:ce:88:52:10:5e:49:97:c8:82:24:
10:c1:28:07:a6:66:00:41:a3:62:e3:25:ca:fc:90:
60:5a:87:2f:69:3d:e4:f9:e1:e8:fd:57:97:95:47:
85:87:4d:58:22:4d:4c:cf:30:9c:1a:30:9e:36:84:
31:de:4b:73:bb:e0:41:d5:1f:f7:e6:ec:dc:3b:2a:
0c:10:ce:37:e9:77:1f:51:9b:bb:1b:b2:77:85:41:
01:1b:67:7f:cc:f1:d1:77:36:e1:9d:bf:75:f1:2d:
8e:7d:b5:50:06:96:be:80:3b:9d:c6:a8:a8:46:67:
94:4a:62:61:16:6c:05:eb:41:df:e7:ac:dc:04:17:
98:6c:76:1e:a2:e1:3c:0a:79:99:74:db:c4:54:44:
42:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:19:C7:37:FF:F5:E9:5D:FC:A1:7A:E6:58:10:CB:E9:6A:FC:9A:AC
X509v3 Authority Key Identifier:
keyid:CE:CD:39:1C:66:0C:3E:57:C5:3B:87:C0:B5:2E:C0:D2:F2:F4:27:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zs05HGYMPlfFO4fAtS7A0vL0J3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e5:90:74:a7:8e:3a:03:4f:b8:e8:31:f2:8b:e6:9f:22:ce:3c:
bb:9c:45:75:a8:de:ef:12:15:df:1b:9e:8a:b6:0a:60:a0:4d:
b7:1c:9e:8f:15:e5:c9:85:22:de:b0:6e:4a:61:6c:9d:bf:95:
6f:24:4c:66:ad:d7:8f:7f:dd:ef:3b:e3:3f:4b:c1:12:76:c9:
12:df:a7:b2:a8:3f:db:0c:0f:20:0c:51:00:9a:c1:c1:3f:45:
d2:3f:c8:46:91:05:39:85:c1:d5:49:26:16:a0:7e:35:7c:37:
d1:51:fd:29:bc:c4:4e:5b:5a:c9:b3:16:4c:57:df:09:c6:77:
69:8b:df:44:b2:a9:97:51:a1:e1:5d:53:c5:6c:8e:24:7b:a5:
7f:92:38:88:97:49:17:2e:f1:b7:bc:34:2a:34:76:b4:13:ea:
f9:3a:29:3e:ff:3b:6b:62:be:b1:ca:7a:3f:ca:3e:95:db:56:
a1:55:8c:ac:48:f5:60:d7:50:fe:24:64:9a:32:60:4f:b2:d9:
a1:d7:04:0c:f1:82:ed:9f:a5:31:75:de:40:9b:f0:37:f6:06:
f9:cb:87:3f:e9:e4:16:1e:ba:4d:5f:36:02:8d:24:cb:41:60:
74:1b:92:62:29:18:6f:ce:02:2e:ed:06:a9:ce:99:6d:f3:be:
99:a2:34:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:53:53 2026 by rpki-client