Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/5bf30d-69eb-41a4-a90d-21b9f12d22f3/1/ZpT1sPq1_tLflTXiqcAp8YfVVAQ.mft
File: ZpT1sPq1_tLflTXiqcAp8YfVVAQ.mft (raw, json)
Hash identifier: 5+KcNeHcFhzxzCTJsiD9tVn6QSzR0RaqQL13O/1nbSw=
Subject key identifier: 9D:3F:CA:A1:E7:D7:DE:D6:C8:F9:EE:50:C2:AB:D9:86:0F:34:6D:AB
Authority key identifier: 66:94:F5:B0:FA:B5:FE:D2:DF:95:35:E2:A9:C0:29:F1:87:D5:54:04
Certificate issuer: /CN=6694f5b0fab5fed2df9535e2a9c029f187d55404
Certificate serial: 019D98BDF96C4016187A39DC23A44C7A083F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZpT1sPq1_tLflTXiqcAp8YfVVAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/5bf30d-69eb-41a4-a90d-21b9f12d22f3/1/ZpT1sPq1_tLflTXiqcAp8YfVVAQ.mft
Manifest number: 09E1
Signing time: Fri 17 Apr 2026 00:01:20 +0000
Manifest this update: Fri 17 Apr 2026 00:01:20 +0000
Manifest next update: Sat 18 Apr 2026 00:01:20 +0000
Files and hashes: 1: PKBAlxhxjbQl3V5bDnuBzljib9Q.roa (hash: eWzoIIDioxxQX7PyiTO6rBCtAXhu7H8TtLvFoqesiBg=)
2: ZpT1sPq1_tLflTXiqcAp8YfVVAQ.crl (hash: IYFisFdjIUmA42sVYbikmSZ43n1/PTTGQOQ80oU6XkQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/5bf30d-69eb-41a4-a90d-21b9f12d22f3/1/ZpT1sPq1_tLflTXiqcAp8YfVVAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/5bf30d-69eb-41a4-a90d-21b9f12d22f3/1/ZpT1sPq1_tLflTXiqcAp8YfVVAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZpT1sPq1_tLflTXiqcAp8YfVVAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:f9:6c:40:16:18:7a:39:dc:23:a4:4c:7a:08:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6694f5b0fab5fed2df9535e2a9c029f187d55404
Validity
Not Before: Apr 17 00:01:20 2026 GMT
Not After : Apr 18 00:01:20 2026 GMT
Subject: CN=9d3fcaa1e7d7ded6c8f9ee50c2abd9860f346dab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:27:cc:c2:81:b1:20:8d:86:ac:dc:ed:87:5b:
06:ef:a0:5b:e9:2f:e3:59:4f:89:6b:60:fe:b4:cf:
3e:b2:d0:f0:8d:e6:f1:bc:56:47:33:58:57:14:5d:
ff:e2:f9:6a:4d:41:1f:23:92:9c:ac:3d:03:85:4c:
11:d6:dd:a0:0f:ab:5d:d2:98:54:af:5f:cf:32:e3:
a6:12:e6:ff:21:51:29:d8:0a:57:fe:64:8b:36:53:
34:43:51:d0:73:f4:c9:63:94:3e:1f:b7:82:de:62:
38:60:96:bc:24:4b:78:89:0d:a0:62:8f:8f:ce:a5:
cc:e8:7f:51:e3:a6:22:43:3a:91:20:53:ad:43:fe:
b6:00:39:28:8e:ac:5e:cb:84:a2:bc:00:02:89:7a:
21:2b:6e:ff:07:9b:0b:0b:47:81:1d:1d:0b:aa:fb:
b6:46:ea:a1:4f:8b:f6:b7:a9:33:00:49:9c:38:2a:
d8:8a:da:3a:f8:f8:b7:9c:4f:3f:31:74:de:18:8e:
dd:b1:4d:41:60:b3:c8:bc:9c:98:c6:f4:74:4f:a9:
56:ef:dd:94:34:88:23:cf:86:6c:74:bf:13:bc:84:
4e:40:07:63:17:df:aa:ab:c3:67:92:ec:e4:43:eb:
1f:e3:37:f4:e9:94:b2:7c:af:08:b0:ca:90:87:d9:
d5:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:3F:CA:A1:E7:D7:DE:D6:C8:F9:EE:50:C2:AB:D9:86:0F:34:6D:AB
X509v3 Authority Key Identifier:
keyid:66:94:F5:B0:FA:B5:FE:D2:DF:95:35:E2:A9:C0:29:F1:87:D5:54:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZpT1sPq1_tLflTXiqcAp8YfVVAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/5bf30d-69eb-41a4-a90d-21b9f12d22f3/1/ZpT1sPq1_tLflTXiqcAp8YfVVAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/5bf30d-69eb-41a4-a90d-21b9f12d22f3/1/ZpT1sPq1_tLflTXiqcAp8YfVVAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:02:43:45:c0:68:44:e1:7c:6e:02:5c:72:3a:1e:c6:09:df:
a6:35:1b:a4:90:17:8a:4f:1f:c7:78:09:5c:5e:fe:0d:93:32:
f4:57:8b:c2:48:12:a6:3d:06:48:d1:23:6e:3f:18:19:b4:f5:
49:62:2d:26:e3:82:30:2b:c6:d7:31:73:08:35:ee:b0:45:59:
aa:53:6e:bd:36:c4:7a:cb:ce:48:ae:91:6d:3e:c7:0b:f8:e9:
e0:ec:0b:c3:62:78:f5:51:85:ba:0b:c3:5a:67:a2:38:b5:26:
76:b0:25:8a:82:13:44:df:80:3e:75:31:67:6e:8c:7c:99:30:
95:a5:84:48:64:59:13:5a:68:97:0b:e9:e6:fd:2e:60:80:eb:
54:3e:c9:c1:64:a2:65:d1:15:e7:b6:4e:34:ff:13:39:11:2a:
e9:cf:36:f6:82:e5:5a:e3:7d:3c:98:f6:6c:65:9e:ad:76:15:
cd:bf:e5:5a:a6:77:09:c6:db:f9:26:66:e0:05:28:4a:79:02:
84:63:1f:a4:8c:07:42:6d:7c:fc:ca:c3:c6:d4:4e:f6:4c:19:
86:cf:00:89:e1:74:4c:32:00:7c:41:d5:b9:2b:ab:50:8d:d8:
a6:3c:c1:6d:78:ee:4b:a9:a0:f7:7e:4b:60:2c:a1:3d:9b:56:
9b:19:52:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:04:45 2026 by rpki-client