Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.mft
File: ZJn3HhXA84zrolfTAwTtRL6ofFA.mft (raw, json)
Hash identifier: Topnfxa5Yifc0qfPftKkoR4/psRsbc11AmKrclSLIn0=
Subject key identifier: 6B:E5:BC:B4:12:E0:6F:E3:6B:64:39:F6:ED:A0:8A:61:26:FF:9C:F6
Authority key identifier: 64:99:F7:1E:15:C0:F3:8C:EB:A2:57:D3:03:04:ED:44:BE:A8:7C:50
Certificate issuer: /CN=6499f71e15c0f38ceba257d30304ed44bea87c50
Certificate serial: 019D9BF5AF540A53F8072B832A2C463D4F47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZJn3HhXA84zrolfTAwTtRL6ofFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 15:01:02 +0000
Manifest this update: Fri 17 Apr 2026 15:01:02 +0000
Manifest next update: Sat 18 Apr 2026 15:01:02 +0000
Files and hashes: 1: ZJn3HhXA84zrolfTAwTtRL6ofFA.crl (hash: GwEHjdVmEv9VXpeOcbfV1nMRXEqdyyCCG9BmVkgEtMQ=)
2: jq3mq-50R-JOu-sxSGPaEm55e08.roa (hash: taGtXrf0l3O9eeA97Wyzm9CoWyPxNXpqgCP99+lV8Hk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZJn3HhXA84zrolfTAwTtRL6ofFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 15:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:f5:af:54:0a:53:f8:07:2b:83:2a:2c:46:3d:4f:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6499f71e15c0f38ceba257d30304ed44bea87c50
Validity
Not Before: Apr 17 15:01:02 2026 GMT
Not After : Apr 18 15:01:02 2026 GMT
Subject: CN=6be5bcb412e06fe36b6439f6eda08a6126ff9cf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ae:7e:ef:e4:88:f8:00:a0:04:49:7b:34:44:
97:55:58:3f:fb:75:ed:e4:9c:15:8d:b5:42:f7:ff:
af:08:55:8c:29:2b:f6:64:a2:d5:77:ef:f0:7e:75:
06:91:dc:37:ab:45:a2:e7:67:6b:e2:45:82:1d:ac:
9d:e4:c3:69:86:72:fe:b9:a0:ea:c5:e9:33:32:39:
8d:df:e5:90:c4:b0:9b:6d:8f:a3:81:13:5c:1f:5a:
f2:98:7b:8d:45:50:5b:df:78:59:dd:a3:ba:df:77:
3c:31:80:8b:4d:d5:5a:79:8c:78:f0:aa:f9:cf:a7:
9e:98:78:9f:df:ad:ff:bd:e7:e7:9f:69:b5:5d:98:
6f:bf:d9:8c:12:73:92:cb:95:28:93:41:56:2f:c6:
4e:ec:67:5e:bb:e5:9b:7f:04:46:be:ca:c2:6a:41:
76:b2:aa:43:4e:32:ab:b2:e6:a1:64:4a:dc:d6:f9:
cf:a2:11:66:a1:22:f3:d3:2f:59:d8:35:6d:40:69:
35:4d:5a:a3:c1:ac:1c:e4:5c:3a:d3:bd:4e:ac:b4:
47:aa:11:ab:f4:ae:a1:18:63:24:58:68:3e:39:5a:
11:f3:c3:0d:56:3f:a9:f8:63:d6:85:87:a1:d9:c5:
7f:b8:ae:72:60:c2:12:bb:1c:00:28:9f:5c:81:f9:
59:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:E5:BC:B4:12:E0:6F:E3:6B:64:39:F6:ED:A0:8A:61:26:FF:9C:F6
X509v3 Authority Key Identifier:
keyid:64:99:F7:1E:15:C0:F3:8C:EB:A2:57:D3:03:04:ED:44:BE:A8:7C:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZJn3HhXA84zrolfTAwTtRL6ofFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:c6:ea:b9:b5:36:64:43:ba:a2:12:9d:1b:24:78:8e:b5:2b:
9b:6b:1c:cc:3a:5f:e4:97:90:b2:15:89:f5:85:b5:8a:84:7a:
71:c8:33:2e:ea:d0:01:b9:be:8b:0f:01:1d:61:42:f0:39:c1:
5d:d4:fa:91:31:0c:b4:e7:c0:86:5a:40:5b:62:ce:5d:66:89:
62:49:ca:a3:e6:08:95:a0:27:d9:d0:cf:69:e5:97:30:ea:9e:
84:0e:a7:62:00:86:69:ad:33:2d:c7:1e:be:5a:d5:15:5c:bf:
51:b8:50:d2:9d:50:99:19:46:01:67:6f:dc:eb:45:63:9c:76:
58:f7:01:a8:f8:45:08:33:fa:e7:67:dd:35:f6:ae:09:c8:c2:
8b:11:00:f1:3f:ec:0e:0c:55:37:60:11:98:25:fb:e5:eb:3e:
12:5c:70:b0:32:e7:63:57:28:e7:c0:d3:5b:2b:07:57:dc:ed:
8a:40:2d:9e:71:44:15:e0:c0:b5:54:3a:a4:18:39:53:25:20:
e6:ca:b9:98:c2:97:b6:e2:e0:34:7c:12:83:e1:9c:88:bd:18:
fb:41:db:3c:1a:7d:17:22:c8:d8:dd:66:dd:d7:7b:c2:ff:ed:
92:4b:7f:f6:58:4d:0b:40:d6:24:c6:ab:27:76:be:30:6f:f4:
49:85:ce:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:06:20 2026 by rpki-client