
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/32f9b3-de2b-41f5-a949-90030d040ff7/1/Zr5SEJO7idx2JQsif39_umbiKNg.mft
File: Zr5SEJO7idx2JQsif39_umbiKNg.mft (raw, json)
Hash identifier: 06kRagpOhpSyNIvsVaKAZJuB7oWx7OrpVRBnaM4k78s=
Subject key identifier: 57:60:5D:F8:BC:96:39:D1:8B:3E:60:7F:85:A3:F5:73:4C:04:8A:BA
Authority key identifier: 66:BE:52:10:93:BB:89:DC:76:25:0B:22:7F:7F:7F:BA:66:E2:28:D8
Certificate issuer: /CN=66be521093bb89dc76250b227f7f7fba66e228d8
Certificate serial: 019EBEB6335DE5B9DEBAFF9675B3B6F77FD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zr5SEJO7idx2JQsif39_umbiKNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/32f9b3-de2b-41f5-a949-90030d040ff7/1/Zr5SEJO7idx2JQsif39_umbiKNg.mft
Manifest number: 04B0
Signing time: Sat 13 Jun 2026 02:01:12 +0000
Manifest this update: Sat 13 Jun 2026 02:01:12 +0000
Manifest next update: Sun 14 Jun 2026 02:01:12 +0000
Files and hashes: 1: Zr5SEJO7idx2JQsif39_umbiKNg.crl (hash: 8yLIEMu8K5kakHUX2NIrVLnjzT2G9oXI2G9u64TQnwM=)
2: aHYzogA8_WqXNHaKUaPcBWBK-e0.asa (hash: fDrzsmR+TVdgn5fOzpZUh6wt7D5Sp3KZs3IDsXyA4SA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/32f9b3-de2b-41f5-a949-90030d040ff7/1/Zr5SEJO7idx2JQsif39_umbiKNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/32f9b3-de2b-41f5-a949-90030d040ff7/1/Zr5SEJO7idx2JQsif39_umbiKNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zr5SEJO7idx2JQsif39_umbiKNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:b6:33:5d:e5:b9:de:ba:ff:96:75:b3:b6:f7:7f:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66be521093bb89dc76250b227f7f7fba66e228d8
Validity
Not Before: Jun 13 02:01:12 2026 GMT
Not After : Jun 14 02:01:12 2026 GMT
Subject: CN=57605df8bc9639d18b3e607f85a3f5734c048aba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:1e:af:ee:f0:65:3f:7a:c0:fa:b6:21:41:42:
6b:42:41:08:f9:be:89:47:a5:21:ec:10:f7:f9:6d:
fe:99:d3:3e:03:e2:4a:32:17:08:8c:fc:ff:24:ba:
27:97:e9:a0:71:80:b8:d7:c9:67:a5:eb:5f:50:50:
b3:a6:55:0e:60:ec:c0:c2:2d:1f:ce:27:c1:3f:02:
e5:d0:53:4a:17:e1:47:59:15:48:cf:8f:ad:ed:25:
48:be:66:f6:90:a3:87:c9:05:63:55:cc:6f:07:85:
93:a2:72:75:5d:bd:3a:9c:93:30:37:8e:0f:c7:e1:
04:19:e4:40:4d:42:63:98:c6:47:31:6d:4d:a4:16:
a4:40:f3:a7:9f:88:5b:41:e0:6a:63:08:26:b8:aa:
ed:dc:1d:77:78:66:9d:1d:74:b5:6d:d0:ed:58:51:
3f:f6:22:03:85:ab:aa:0c:0f:dc:0a:41:28:28:5e:
f7:74:5d:53:1b:f4:68:09:83:4a:02:7f:38:e9:b4:
5c:5f:36:a8:99:16:ef:70:b0:42:e1:e1:1e:ea:d6:
b2:8e:69:8c:7b:2c:af:23:09:5d:ca:8b:24:ce:93:
e8:96:18:08:47:a0:83:5f:fd:ff:ee:f9:12:0d:7c:
85:3b:7f:70:9d:2b:95:d1:f0:06:1a:18:5a:fc:df:
71:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:60:5D:F8:BC:96:39:D1:8B:3E:60:7F:85:A3:F5:73:4C:04:8A:BA
X509v3 Authority Key Identifier:
keyid:66:BE:52:10:93:BB:89:DC:76:25:0B:22:7F:7F:7F:BA:66:E2:28:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zr5SEJO7idx2JQsif39_umbiKNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/32f9b3-de2b-41f5-a949-90030d040ff7/1/Zr5SEJO7idx2JQsif39_umbiKNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/32f9b3-de2b-41f5-a949-90030d040ff7/1/Zr5SEJO7idx2JQsif39_umbiKNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:64:2d:02:dc:d8:c8:1e:c4:33:36:6f:b9:6a:4e:dd:24:03:
7a:e0:f4:3b:81:25:44:1d:05:dc:d7:0b:4d:fd:9c:0e:44:42:
b7:9a:01:8c:5e:28:53:44:db:9c:2a:08:34:65:2d:5c:f4:e2:
a0:7b:5b:6d:f3:23:6c:88:5a:7c:e3:0b:0b:fa:e7:00:91:cc:
f8:83:ff:f1:8a:01:9f:9c:10:0f:5a:d0:fe:e6:ac:75:9a:a1:
2c:ca:57:5c:fa:53:d0:2b:e8:de:a0:05:32:fa:07:af:f5:a3:
1d:b3:90:1f:7d:59:07:f8:b4:2e:84:21:4b:7f:4b:0d:0a:c4:
ab:5d:05:0b:39:49:79:a6:59:15:b6:f6:e9:9c:c2:ad:7e:89:
22:c5:cb:01:f6:f6:de:53:4e:98:50:1b:49:11:f3:ea:09:3b:
80:67:75:51:82:c0:d3:46:c1:74:0e:f6:ed:84:f3:20:87:77:
42:b2:47:a5:63:67:b0:de:93:83:c0:0e:5d:57:9c:25:87:93:
85:de:04:c8:09:e3:32:4d:11:ea:c4:e0:85:41:83:4b:a6:a4:
7d:35:de:8c:9a:ad:8d:1f:14:22:d7:1e:49:64:6d:65:5c:64:
6d:6e:e5:aa:05:f4:32:f9:79:ab:31:d9:af:19:fc:4f:3b:39:
c6:fc:83:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:47:33 2026 by rpki-client