
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/a725e2-e715-4fd2-81ec-ea42d6c159f3/1/ZRUuTmwkXAP-zfpIv5E5bL7-168.mft
File: ZRUuTmwkXAP-zfpIv5E5bL7-168.mft (raw, json)
Hash identifier: k9C/wC+rM/WvVW4MOX+/X9fJOtw3jMwmz8QimJcSth4=
Subject key identifier: 7B:FF:6F:2D:0F:9B:69:CB:BF:CE:54:9A:71:80:B0:DB:E1:E4:4E:34
Authority key identifier: 65:15:2E:4E:6C:24:5C:03:FE:CD:FA:48:BF:91:39:6C:BE:FE:D7:AF
Certificate issuer: /CN=65152e4e6c245c03fecdfa48bf91396cbefed7af
Certificate serial: 019DA59D58C5442BF8F8279A8104DB27E87D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZRUuTmwkXAP-zfpIv5E5bL7-168.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/a725e2-e715-4fd2-81ec-ea42d6c159f3/1/ZRUuTmwkXAP-zfpIv5E5bL7-168.mft
Manifest number: 92
Signing time: Sun 19 Apr 2026 12:00:45 +0000
Manifest this update: Sun 19 Apr 2026 12:00:45 +0000
Manifest next update: Mon 20 Apr 2026 12:00:45 +0000
Files and hashes: 1: ZRUuTmwkXAP-zfpIv5E5bL7-168.crl (hash: O+31X335aZ8x38+clPGyacpZMUYITw88qSATw1580Ac=)
2: zNqty2MMMtiYifN34tRpIOVX9sQ.roa (hash: yLB5f8Ek8IZkDyn4YFbsPyCUS3Yue+tSUM0kBMSr3B8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/a725e2-e715-4fd2-81ec-ea42d6c159f3/1/ZRUuTmwkXAP-zfpIv5E5bL7-168.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/a725e2-e715-4fd2-81ec-ea42d6c159f3/1/ZRUuTmwkXAP-zfpIv5E5bL7-168.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZRUuTmwkXAP-zfpIv5E5bL7-168.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 12:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:9d:58:c5:44:2b:f8:f8:27:9a:81:04:db:27:e8:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65152e4e6c245c03fecdfa48bf91396cbefed7af
Validity
Not Before: Apr 19 12:00:45 2026 GMT
Not After : Apr 20 12:00:45 2026 GMT
Subject: CN=7bff6f2d0f9b69cbbfce549a7180b0dbe1e44e34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:3c:46:60:a0:c8:bb:00:59:e2:e6:1d:13:2b:
f1:9d:85:93:41:17:86:64:53:fb:7f:88:41:44:2d:
33:be:61:2c:14:ab:ee:78:7e:4e:33:5e:dc:2c:b3:
49:b7:83:0c:f1:ed:13:e1:4f:ca:1f:ef:c4:e3:f8:
87:88:4c:da:c2:be:19:f2:e2:cf:52:48:e4:9e:94:
a0:5c:43:76:77:74:cb:46:ce:7e:86:68:08:58:04:
7a:22:85:49:5f:13:9e:2c:41:e0:78:2a:15:7e:74:
4f:74:4e:13:60:8c:1b:8a:95:2d:64:26:61:89:6a:
9c:99:4b:94:0b:8a:23:a2:a3:4f:85:93:f3:69:99:
c2:f5:5c:f5:10:68:15:19:9b:48:96:21:26:86:b0:
d3:e4:9d:72:19:9c:07:7a:f7:da:a9:6c:db:1a:bf:
90:30:1f:8e:ea:40:d0:a1:65:09:ee:58:6d:c3:49:
d2:4f:58:8c:0f:ee:82:56:ff:c3:30:08:19:2e:48:
76:34:0d:3f:4b:b5:ac:cf:d1:73:3f:cb:af:fe:27:
81:2c:6d:69:36:1f:b8:a0:64:bd:2e:f6:e2:9f:81:
b5:62:f0:bd:2e:61:e5:7f:e9:72:61:48:7c:b1:14:
6d:7c:d3:08:46:2c:ba:27:84:68:a0:8c:99:b4:c4:
f9:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:FF:6F:2D:0F:9B:69:CB:BF:CE:54:9A:71:80:B0:DB:E1:E4:4E:34
X509v3 Authority Key Identifier:
keyid:65:15:2E:4E:6C:24:5C:03:FE:CD:FA:48:BF:91:39:6C:BE:FE:D7:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRUuTmwkXAP-zfpIv5E5bL7-168.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a725e2-e715-4fd2-81ec-ea42d6c159f3/1/ZRUuTmwkXAP-zfpIv5E5bL7-168.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a725e2-e715-4fd2-81ec-ea42d6c159f3/1/ZRUuTmwkXAP-zfpIv5E5bL7-168.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:d2:6c:62:84:7e:d1:a6:9d:09:04:12:2f:4a:f1:56:b7:96:
0e:ab:83:bd:98:c5:bc:fc:3b:bc:16:5e:e0:03:6a:ec:2b:6a:
0d:2a:08:e8:4e:ab:1f:20:68:a8:46:81:4f:91:31:0d:5e:fb:
53:a6:84:b7:f3:3f:0f:8f:34:9b:19:31:6a:fb:fa:a8:df:59:
78:b8:8b:fd:e6:32:41:16:c6:7c:27:29:ff:e1:a9:69:5a:67:
09:0a:55:b0:dc:b2:a8:9e:80:6d:65:07:e8:f7:17:de:42:63:
56:91:6d:0b:34:98:3d:3d:f7:59:75:5b:02:44:86:25:9b:2f:
f5:83:dc:c9:a1:b0:6b:57:c6:ac:a6:da:58:6a:05:30:e0:7b:
69:5d:5d:53:dc:26:31:38:1d:b9:35:57:75:66:84:1a:b8:cf:
83:6a:be:fa:d8:69:4f:4e:35:10:5b:18:90:8e:1f:9a:ea:0b:
5f:0e:48:1e:90:89:bb:fa:62:9f:3f:f1:6f:f4:9b:90:a5:23:
b5:fb:83:65:4c:2f:5e:77:41:81:14:03:96:e8:66:2d:db:a9:
ab:d6:3f:87:1a:ca:28:68:0f:fb:88:1b:bb:57:f2:54:0b:07:
b7:4d:de:97:54:6c:1d:c2:d1:54:d5:e8:39:b3:1f:52:06:d9:
8a:07:72:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 15:31:17 2026 by rpki-client