Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/ed3d4a-704f-4aa4-821f-dcd5e9478084/1/ZD2vEi46h6yqb9tiw1olKhmaWNk.mft
File: ZD2vEi46h6yqb9tiw1olKhmaWNk.mft (raw, json)
Hash identifier: zllkW83GCBDw4kQarncxk9FZYf+CVIHsnpOkYb7oUJk=
Subject key identifier: 88:C9:9C:71:61:EE:B9:0D:60:D4:AE:C2:8B:25:57:A8:57:A5:9A:9E
Authority key identifier: 64:3D:AF:12:2E:3A:87:AC:AA:6F:DB:62:C3:5A:25:2A:19:9A:58:D9
Certificate issuer: /CN=643daf122e3a87acaa6fdb62c35a252a199a58d9
Certificate serial: 019DA340BDD062606AAEE24B5C8229BB08FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZD2vEi46h6yqb9tiw1olKhmaWNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/ed3d4a-704f-4aa4-821f-dcd5e9478084/1/ZD2vEi46h6yqb9tiw1olKhmaWNk.mft
Manifest number: 104A
Signing time: Sun 19 Apr 2026 01:00:22 +0000
Manifest this update: Sun 19 Apr 2026 01:00:22 +0000
Manifest next update: Mon 20 Apr 2026 01:00:22 +0000
Files and hashes: 1: E02kulG3cuFET7qCfIGELuqcrIw.roa (hash: PQPtlTXvYqFKCXRfSmjkrshxIArKKipQAXnmpgfBnic=)
2: ZD2vEi46h6yqb9tiw1olKhmaWNk.crl (hash: gu/uDw0BArBhk56rZOjTztwclb04jniptvs9iZyxIdE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/ed3d4a-704f-4aa4-821f-dcd5e9478084/1/ZD2vEi46h6yqb9tiw1olKhmaWNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/ed3d4a-704f-4aa4-821f-dcd5e9478084/1/ZD2vEi46h6yqb9tiw1olKhmaWNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZD2vEi46h6yqb9tiw1olKhmaWNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 01:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:40:bd:d0:62:60:6a:ae:e2:4b:5c:82:29:bb:08:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=643daf122e3a87acaa6fdb62c35a252a199a58d9
Validity
Not Before: Apr 19 01:00:22 2026 GMT
Not After : Apr 20 01:00:22 2026 GMT
Subject: CN=88c99c7161eeb90d60d4aec28b2557a857a59a9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ab:cf:21:4d:2e:7c:bc:63:20:60:21:08:54:
9f:40:74:d1:4e:48:bf:f9:2c:78:f9:f4:bb:24:07:
73:5e:9a:ed:05:f9:60:b2:00:40:07:e6:5e:a5:25:
85:4e:be:2d:4c:2c:c9:1c:97:53:2d:fe:17:73:23:
5a:44:eb:b9:00:f3:95:f9:dd:a6:3e:85:eb:a6:62:
5b:3a:f5:d6:1d:1a:4c:d9:6e:5d:dd:c6:fb:20:30:
83:8c:76:c6:97:d2:93:55:d0:b7:29:b5:62:63:24:
f4:f6:f4:20:48:9a:69:70:39:35:44:bf:02:6c:c0:
43:fa:38:5c:18:c3:9d:09:bb:10:19:6d:9a:0c:46:
bd:1f:24:43:02:6e:91:25:19:51:77:74:37:54:3f:
79:25:ad:91:4d:8a:68:5a:75:8d:01:c3:45:4e:9c:
d6:16:a4:65:13:2a:51:22:41:5a:12:ae:39:73:e4:
79:ed:d2:95:60:21:83:92:7c:eb:85:56:99:60:a8:
bd:29:26:16:58:2f:1b:99:41:f3:07:2a:13:68:64:
a0:87:c0:33:17:23:81:02:04:0f:cc:30:50:68:3d:
f5:f2:ca:b8:09:3b:ed:a8:76:b9:eb:4c:67:8e:7f:
00:6b:be:fd:e1:fa:e9:18:ef:8c:0c:f4:2b:e0:7c:
a2:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:C9:9C:71:61:EE:B9:0D:60:D4:AE:C2:8B:25:57:A8:57:A5:9A:9E
X509v3 Authority Key Identifier:
keyid:64:3D:AF:12:2E:3A:87:AC:AA:6F:DB:62:C3:5A:25:2A:19:9A:58:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZD2vEi46h6yqb9tiw1olKhmaWNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/ed3d4a-704f-4aa4-821f-dcd5e9478084/1/ZD2vEi46h6yqb9tiw1olKhmaWNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/ed3d4a-704f-4aa4-821f-dcd5e9478084/1/ZD2vEi46h6yqb9tiw1olKhmaWNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:7f:a5:8d:8a:ef:cb:9a:a4:11:fc:a5:25:2e:4f:7b:c2:35:
19:3f:f3:27:78:0a:a0:6e:fb:81:9d:97:17:54:12:dc:0c:d8:
e8:59:98:2a:94:39:6c:04:e3:12:74:88:05:57:6c:7f:40:5b:
d1:0d:9c:08:b3:f0:f0:34:17:3f:4f:e1:2a:37:91:ce:44:d8:
0d:5a:2b:8a:35:3e:20:32:8e:bc:4f:e0:c6:4e:b6:a4:33:50:
20:72:13:81:4a:fa:5c:29:0d:2e:ff:fa:7e:97:66:db:41:61:
39:70:55:f0:62:ee:c3:e8:a7:4e:a9:b2:2d:1e:aa:43:79:a4:
63:a0:da:20:68:54:3b:d3:b6:11:e2:bf:5e:12:6b:22:5e:ec:
9e:45:29:f8:e9:3d:e9:b2:41:c5:1c:77:8b:2a:e9:69:18:72:
1c:dc:33:af:f0:9c:f5:62:c5:5f:ee:0a:e7:40:5a:cd:53:57:
f9:e7:de:6f:57:66:44:0a:ef:ab:12:08:98:23:1c:a7:60:e0:
75:a5:f8:63:d6:bc:b3:84:77:91:61:ce:b8:66:27:4a:72:3c:
a2:53:60:f3:50:ef:2c:a4:23:10:32:a9:4a:36:45:50:39:2c:
72:0d:be:0d:9f:73:78:dd:b6:3a:85:d4:87:2e:c0:22:72:17:
a6:35:42:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:15:52 2026 by rpki-client