Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.mft
File: zTCHzHAsjZNT_nj3kyRAt-hC_G4.mft (raw, json)
Hash identifier: mn1OSxjt7y2eUjxTgllREzNdYlr2JY6giQf7GD1wMiE=
Subject key identifier: 40:93:51:4F:90:C7:A0:B5:89:37:11:C4:5A:8D:5D:AA:DC:44:3E:E3
Authority key identifier: CD:30:87:CC:70:2C:8D:93:53:FE:78:F7:93:24:40:B7:E8:42:FC:6E
Certificate issuer: /CN=cd3087cc702c8d9353fe78f7932440b7e842fc6e
Certificate serial: 019D9BBEB751F2729C2CD614AE1101539854
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zTCHzHAsjZNT_nj3kyRAt-hC_G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.mft
Manifest number: 1241
Signing time: Fri 17 Apr 2026 14:01:00 +0000
Manifest this update: Fri 17 Apr 2026 14:01:00 +0000
Manifest next update: Sat 18 Apr 2026 14:01:00 +0000
Files and hashes: 1: a0kN2gfK01wMuqhoW-MZjPAbstc.roa (hash: mmiujuewrIIcuNRFw3juwDDGpDhJAvUuobcjAggyfUE=)
2: zTCHzHAsjZNT_nj3kyRAt-hC_G4.crl (hash: 2x9OUFMF3oJRtJbCMJnxekkSyOy3SgCXZvr2yamiu0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zTCHzHAsjZNT_nj3kyRAt-hC_G4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:b7:51:f2:72:9c:2c:d6:14:ae:11:01:53:98:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd3087cc702c8d9353fe78f7932440b7e842fc6e
Validity
Not Before: Apr 17 14:01:00 2026 GMT
Not After : Apr 18 14:01:00 2026 GMT
Subject: CN=4093514f90c7a0b5893711c45a8d5daadc443ee3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:04:1c:e7:a1:38:8f:d1:18:2f:40:0e:03:31:
bf:13:bb:c6:c2:75:74:3c:ba:9c:cd:f5:9f:9a:19:
65:b9:2d:27:8f:b2:4c:ab:b0:19:fd:f7:31:0c:15:
6b:07:86:ef:d9:f4:ce:14:c0:eb:75:08:57:6a:f3:
97:e2:31:19:53:5e:b6:b9:35:32:5f:ec:d5:f8:f3:
b2:b7:ed:54:c3:5f:65:99:e7:e0:cc:3b:30:c3:68:
05:03:86:9d:3c:1e:18:24:4a:4a:05:99:d6:f4:3e:
29:2f:c6:51:d8:59:c2:86:36:e7:7e:99:b8:6e:41:
62:c3:4e:b9:9a:fe:94:ba:ce:76:51:3a:ad:90:ef:
a5:3e:c8:7d:f3:c8:40:46:e4:34:03:4a:ff:28:60:
bc:fb:c0:2a:b7:1c:70:2c:97:57:ad:4f:9d:e1:79:
e1:30:5f:53:aa:b6:34:5b:25:57:99:0f:3b:93:29:
00:46:d5:e2:29:fd:ce:c9:92:3c:e9:b6:41:db:c5:
1d:24:38:b4:19:77:9f:90:e5:2b:1d:c4:72:be:4d:
56:c4:77:ab:06:3d:83:0c:b7:10:1f:ad:5c:b4:a6:
d8:87:df:83:54:9c:5b:0e:ca:28:8d:0a:73:ca:8d:
6f:6a:80:3b:a8:c9:4f:e3:9e:32:1b:34:52:c5:40:
71:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:93:51:4F:90:C7:A0:B5:89:37:11:C4:5A:8D:5D:AA:DC:44:3E:E3
X509v3 Authority Key Identifier:
keyid:CD:30:87:CC:70:2C:8D:93:53:FE:78:F7:93:24:40:B7:E8:42:FC:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zTCHzHAsjZNT_nj3kyRAt-hC_G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:e0:af:ca:6f:5e:bf:28:fa:a0:19:2c:8f:76:fa:6d:28:fb:
90:61:57:8c:94:e6:a6:8b:17:ff:45:29:0b:5b:04:52:28:ef:
b4:9c:7c:77:86:ba:ff:a9:f7:78:6d:2c:e1:20:8e:89:60:90:
cb:73:ab:02:1c:26:f8:1c:ff:78:ef:11:a5:14:5b:96:9f:43:
f3:57:04:a7:cd:f1:cc:72:53:13:c2:6b:2a:f7:4a:5e:8c:a2:
9a:41:38:d9:2e:52:13:be:42:89:8a:26:b4:ca:f1:07:3e:f1:
ba:ed:24:ec:d5:6b:a6:20:8d:55:85:b6:1e:32:c9:4c:57:58:
99:a3:7e:7a:1a:ed:ae:b4:6a:1d:86:3c:65:df:3e:19:d3:df:
bf:4e:3d:17:67:01:2f:03:3a:81:fc:70:a9:84:f2:75:5b:95:
de:53:59:67:67:d2:50:28:44:6c:99:f5:7a:75:f1:8c:a4:70:
dc:82:20:cc:ae:38:c5:98:0c:81:90:13:04:15:a1:e3:86:f0:
3c:b4:3d:68:a4:36:6c:7d:12:9a:84:98:7d:3c:fd:82:02:56:
cd:de:73:ba:2b:3f:78:0d:5a:d9:4f:75:c9:41:04:0a:43:f1:
a4:28:33:c4:f5:3d:8c:b0:fa:20:14:c1:3a:fc:38:c9:92:e3:
d4:b2:dd:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:57:53 2026 by rpki-client