
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/51885b-5693-4892-a1d4-1a19792a1d26/1/zS0OOdePxiAiVaW0rbVFg9ne3c4.mft
File: zS0OOdePxiAiVaW0rbVFg9ne3c4.mft (raw, json)
Hash identifier: 3Qb90IOWKqo8F4qkaFO2vguSbzHPcQ1nBiO0DpQHhf0=
Subject key identifier: 6E:25:22:07:77:B5:DA:DF:A5:58:5E:1F:CD:D7:29:A9:B1:99:DA:A3
Authority key identifier: CD:2D:0E:39:D7:8F:C6:20:22:55:A5:B4:AD:B5:45:83:D9:DE:DD:CE
Certificate issuer: /CN=cd2d0e39d78fc6202255a5b4adb54583d9deddce
Certificate serial: 019D98F4BE6BFBFC168FE6EFA531F1D9B31C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zS0OOdePxiAiVaW0rbVFg9ne3c4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/51885b-5693-4892-a1d4-1a19792a1d26/1/zS0OOdePxiAiVaW0rbVFg9ne3c4.mft
Manifest number: 0BE5
Signing time: Fri 17 Apr 2026 01:01:09 +0000
Manifest this update: Fri 17 Apr 2026 01:01:09 +0000
Manifest next update: Sat 18 Apr 2026 01:01:09 +0000
Files and hashes: 1: BzcIlfSqWBkxCx6sQahLAYgQl9U.roa (hash: iEU6LtcxUGPF+befnk/JbzTRId/51aZ7BTsMTWVBJf8=)
2: zS0OOdePxiAiVaW0rbVFg9ne3c4.crl (hash: 5a06PvqSDom012ygEKw6j/96QvLZwEDBRrTHjZS90ek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/51885b-5693-4892-a1d4-1a19792a1d26/1/zS0OOdePxiAiVaW0rbVFg9ne3c4.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/51885b-5693-4892-a1d4-1a19792a1d26/1/zS0OOdePxiAiVaW0rbVFg9ne3c4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zS0OOdePxiAiVaW0rbVFg9ne3c4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:be:6b:fb:fc:16:8f:e6:ef:a5:31:f1:d9:b3:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd2d0e39d78fc6202255a5b4adb54583d9deddce
Validity
Not Before: Apr 17 01:01:09 2026 GMT
Not After : Apr 18 01:01:09 2026 GMT
Subject: CN=6e25220777b5dadfa5585e1fcdd729a9b199daa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:18:cd:4f:9e:0c:94:1c:75:5f:89:fc:d6:d8:
e3:ec:80:76:a2:4d:cd:ed:0b:76:93:ca:72:22:f0:
54:b8:eb:04:7e:eb:e3:98:c5:90:2a:a8:e7:1d:13:
2d:58:cd:01:f4:ba:b4:84:8e:6c:5b:4d:80:c6:ca:
ea:d5:43:48:0b:32:63:86:92:8f:ae:3c:49:70:74:
8b:46:b0:83:b5:60:a1:48:69:2a:26:85:70:0a:ae:
47:10:59:a0:a9:f1:2f:fd:64:c4:bf:e4:06:01:a1:
ad:7f:86:77:9e:d7:92:98:dd:9a:3e:ef:80:08:d3:
91:4a:fc:87:83:f2:7a:fd:22:14:da:fd:df:ad:8f:
c7:76:8d:ce:c7:84:4c:90:13:20:fe:20:2f:5a:27:
a4:1c:4f:bb:55:fe:07:48:98:aa:46:52:8a:e9:d6:
47:b8:9d:43:cb:70:85:26:a5:c1:6e:03:2d:6a:5a:
20:4e:d3:da:ba:41:c0:ff:34:7d:ba:0c:e3:d6:dc:
81:f9:2a:06:3c:e2:39:a2:99:07:7d:bc:96:05:fa:
84:15:82:8b:f5:c3:56:1f:8e:da:b1:1a:14:88:c5:
20:f8:7d:74:66:d3:1b:3a:20:27:0f:99:90:bb:dc:
ea:01:c6:60:f4:e1:6f:8a:af:33:4b:cf:ae:9b:5f:
6f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:25:22:07:77:B5:DA:DF:A5:58:5E:1F:CD:D7:29:A9:B1:99:DA:A3
X509v3 Authority Key Identifier:
keyid:CD:2D:0E:39:D7:8F:C6:20:22:55:A5:B4:AD:B5:45:83:D9:DE:DD:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zS0OOdePxiAiVaW0rbVFg9ne3c4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/51885b-5693-4892-a1d4-1a19792a1d26/1/zS0OOdePxiAiVaW0rbVFg9ne3c4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/51885b-5693-4892-a1d4-1a19792a1d26/1/zS0OOdePxiAiVaW0rbVFg9ne3c4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:67:b9:cd:6d:59:10:74:34:4f:78:91:8a:f3:d1:01:c6:1d:
8c:5f:cb:13:57:1f:8b:ac:f1:3d:4a:dd:51:7c:a7:9b:bd:79:
68:6c:89:52:4f:9c:fa:9e:d4:fb:2b:65:02:a4:30:15:43:62:
f6:56:91:47:b6:e5:c2:47:6c:4d:1c:b0:30:27:91:3c:e7:99:
3b:b4:0a:aa:1d:02:5b:69:09:e5:90:a1:91:fc:15:42:0d:0d:
d4:bc:2d:89:97:0c:da:72:a1:74:23:c5:08:43:d7:e1:28:04:
d0:1c:da:77:2b:75:95:eb:51:ab:d9:42:2e:10:4a:be:7b:76:
09:d4:0b:ae:6c:ee:24:09:5b:6d:fd:f2:2b:82:32:46:d8:e8:
91:a7:25:83:12:33:7d:0e:39:47:ad:99:eb:59:6b:03:50:96:
b8:0e:0a:81:20:1e:87:a9:13:14:ef:f1:93:f8:00:5b:b5:7e:
7f:b4:f6:a1:04:11:ed:3e:00:54:44:ce:98:47:c3:94:80:8e:
e8:75:21:7b:25:98:cc:68:92:45:37:c8:da:d6:33:c3:0a:60:
2a:c9:f8:0b:cc:d6:0a:3b:10:2b:11:c7:8a:5d:6d:3c:15:9c:
cb:21:96:29:a0:4e:f2:49:2c:fb:5a:c2:6c:7b:98:42:ac:7f:
26:5d:94:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:03:53 2026 by rpki-client