Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/529be9-1fcf-46a3-b13d-c8acb7173b62/1/zBEL75xblqgxx6v5VZJ0S7rx7mc.mft
File: zBEL75xblqgxx6v5VZJ0S7rx7mc.mft (raw, json)
Hash identifier: tqa/mzEztw7ReMnraID0ELfZBgeo1HzJPtLrYuu3Rq0=
Subject key identifier: EA:D2:28:23:92:AB:95:61:8C:6E:29:19:E2:5D:24:0A:30:94:9F:A8
Authority key identifier: CC:11:0B:EF:9C:5B:96:A8:31:C7:AB:F9:55:92:74:4B:BA:F1:EE:67
Certificate issuer: /CN=cc110bef9c5b96a831c7abf95592744bbaf1ee67
Certificate serial: 019D9B1A0254F6B289C34F964B51846D002E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zBEL75xblqgxx6v5VZJ0S7rx7mc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/529be9-1fcf-46a3-b13d-c8acb7173b62/1/zBEL75xblqgxx6v5VZJ0S7rx7mc.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 11:01:05 +0000
Manifest this update: Fri 17 Apr 2026 11:01:05 +0000
Manifest next update: Sat 18 Apr 2026 11:01:05 +0000
Files and hashes: 1: NfMAyoJTTlfTXofMhxWF0UP-5NM.roa (hash: qIrqKt/eTqEcw7nBDpqcjINUCE3KnQXTWSeB3+cApcw=)
2: zBEL75xblqgxx6v5VZJ0S7rx7mc.crl (hash: dEBdJi5Y67BrHwKehcQoo2/gPfsSoXAdAyeaL2pARc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/529be9-1fcf-46a3-b13d-c8acb7173b62/1/zBEL75xblqgxx6v5VZJ0S7rx7mc.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/529be9-1fcf-46a3-b13d-c8acb7173b62/1/zBEL75xblqgxx6v5VZJ0S7rx7mc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zBEL75xblqgxx6v5VZJ0S7rx7mc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:1a:02:54:f6:b2:89:c3:4f:96:4b:51:84:6d:00:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc110bef9c5b96a831c7abf95592744bbaf1ee67
Validity
Not Before: Apr 17 11:01:05 2026 GMT
Not After : Apr 18 11:01:05 2026 GMT
Subject: CN=ead2282392ab95618c6e2919e25d240a30949fa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:bc:bc:a5:ee:24:54:6d:62:35:1c:3d:2d:75:
02:14:87:4a:27:2b:78:43:f9:24:2d:d1:f9:8d:53:
ec:3d:0b:d8:7f:a8:69:66:a4:a7:da:f7:c6:8b:41:
4e:e4:b1:70:3d:ca:96:22:0a:eb:48:01:bc:4d:7a:
0e:c3:86:8a:58:5f:a1:05:dc:57:93:eb:b4:8d:8a:
78:7b:06:29:4e:29:be:2c:26:7c:7c:5a:d2:12:18:
e2:af:85:99:27:c3:ab:80:34:50:7c:43:ca:fd:61:
21:e7:dc:06:93:71:f5:74:19:2f:76:60:64:f7:dd:
75:71:f1:4e:68:5a:11:41:2c:4c:02:5a:f1:47:44:
bc:f0:c0:6c:af:80:44:2a:9a:60:91:11:dd:8a:b9:
d7:ee:08:ac:d8:db:b8:5b:16:03:2f:b6:45:d6:d0:
87:09:80:a4:66:0b:11:68:51:3d:42:15:b9:55:4f:
5e:a6:83:87:59:34:ed:31:04:be:09:ea:18:3b:3a:
fc:b2:7e:de:72:3b:3a:cc:08:ee:1d:f0:aa:9d:18:
59:59:02:c9:49:68:e0:f2:a9:b8:9e:76:71:15:14:
a5:b4:d9:a9:c5:43:cf:27:a9:41:ed:74:d5:3e:bd:
6d:5f:4a:7b:45:6c:8e:4c:28:4f:31:ef:56:df:28:
cb:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:D2:28:23:92:AB:95:61:8C:6E:29:19:E2:5D:24:0A:30:94:9F:A8
X509v3 Authority Key Identifier:
keyid:CC:11:0B:EF:9C:5B:96:A8:31:C7:AB:F9:55:92:74:4B:BA:F1:EE:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zBEL75xblqgxx6v5VZJ0S7rx7mc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/529be9-1fcf-46a3-b13d-c8acb7173b62/1/zBEL75xblqgxx6v5VZJ0S7rx7mc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/529be9-1fcf-46a3-b13d-c8acb7173b62/1/zBEL75xblqgxx6v5VZJ0S7rx7mc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:74:95:9e:20:b1:b6:ad:fa:92:99:c3:c7:49:66:f6:ac:4f:
82:91:e3:43:c5:cc:f6:cb:29:91:b2:e8:6a:0e:bf:d1:db:91:
d9:9d:f7:69:dd:a9:7b:6b:75:c0:8f:40:4a:fa:ec:0f:39:69:
f7:57:7c:3f:02:54:d4:5a:a4:e0:84:62:e6:f5:c5:ac:45:bd:
fc:81:49:11:44:91:de:43:36:14:04:24:70:aa:04:69:f8:26:
1a:6f:58:00:e1:c8:76:31:28:58:9e:6d:0f:30:83:89:19:4c:
43:cd:b0:2b:92:e0:40:b0:b7:73:13:b2:f4:cc:10:c0:57:58:
fb:ce:d6:88:65:9b:c0:15:1f:17:a7:f6:70:30:ab:5a:6d:b9:
eb:e7:0f:64:d5:a7:fc:d4:27:00:46:e0:65:06:08:54:e8:e0:
7f:ac:d8:15:fe:be:1c:31:aa:54:8e:72:73:04:9f:f9:fd:52:
59:12:4c:f9:1f:70:b6:43:a3:38:ec:a0:e7:13:a3:5b:35:a8:
ef:ac:e3:73:14:f1:5a:1b:f2:a7:19:b9:93:5a:f6:8a:ec:ec:
6d:de:28:86:80:4a:4e:e0:79:2c:b1:85:b4:32:0b:08:4e:b8:
3b:e0:09:db:fa:e2:b0:cc:42:fc:bb:45:3c:55:a4:f8:88:c2:
56:88:ed:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:30:35 2026 by rpki-client