Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.mft
File: ZZw1ZjM4jpvYl9AAo_OLweVG70o.mft (raw, json)
Hash identifier: E/PimYJV5hhOXIhZfeUi8Yvsjm4ShaXGoPqSdPwz8xM=
Subject key identifier: E0:52:28:E1:7D:6C:E6:86:19:48:86:47:2B:63:74:78:6B:7C:26:82
Authority key identifier: 65:9C:35:66:33:38:8E:9B:D8:97:D0:00:A3:F3:8B:C1:E5:46:EF:4A
Certificate issuer: /CN=659c356633388e9bd897d000a3f38bc1e546ef4a
Certificate serial: 019D9AE380AE84A56C2D636B776D4276573C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZZw1ZjM4jpvYl9AAo_OLweVG70o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.mft
Manifest number: 10B7
Signing time: Fri 17 Apr 2026 10:01:33 +0000
Manifest this update: Fri 17 Apr 2026 10:01:33 +0000
Manifest next update: Sat 18 Apr 2026 10:01:33 +0000
Files and hashes: 1: BMF2VpXZcBJDRIgbKu6WmPKlRZE.roa (hash: Qaj7moEkQ9ZCrPUXtOtCs5aCDU6SYqiy/nfoo9H7JTA=)
2: FUJsXxiOTQX7pzaDkL5Jbj6ETSk.roa (hash: Uv+Y92AvX9M/f9d8WVX2zm/JR3SnMp+hpIYMHfKMlJ0=)
3: QKv3-8YoDEK1Mitg0rmTL0SGOJM.roa (hash: DZBSel951tZH4WYCuGXNyVILmfYXwt90PA6IkSwgQS0=)
4: ZZw1ZjM4jpvYl9AAo_OLweVG70o.crl (hash: RbuLk+8m15kSTtWkJd2NyiTWwDkSPpeR9t64TgyAfAk=)
5: wK1thNBNOi3cJ4C_cLUUCpyCeDg.roa (hash: SYmUDWSPEMPAWWeOzzPct/i4L2oBAFG5xQ9Zk5i1914=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZZw1ZjM4jpvYl9AAo_OLweVG70o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:80:ae:84:a5:6c:2d:63:6b:77:6d:42:76:57:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=659c356633388e9bd897d000a3f38bc1e546ef4a
Validity
Not Before: Apr 17 10:01:33 2026 GMT
Not After : Apr 18 10:01:33 2026 GMT
Subject: CN=e05228e17d6ce686194886472b6374786b7c2682
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:46:7c:99:35:22:e4:fb:a8:3f:91:6d:fc:12:
01:ac:9b:e2:0a:c2:2e:9e:a3:9f:f3:09:ac:2e:27:
8e:20:5a:2c:0f:e0:53:6b:4c:bd:e7:d5:14:68:5e:
38:10:e8:3b:a4:58:7e:f5:79:3e:9a:24:75:c3:95:
d6:4f:67:f1:2c:98:cf:47:97:48:93:50:d2:eb:ec:
49:df:3a:f7:1a:aa:de:d3:a1:34:55:2d:98:62:09:
58:17:e1:e5:4c:1a:9c:2a:0a:e3:d7:98:e3:0f:7a:
82:64:d0:14:db:58:e7:3b:4d:42:34:4b:9d:f9:03:
d5:7a:cf:0b:b7:4e:57:34:92:f5:21:af:f1:14:ff:
fe:ca:5a:3a:39:2d:72:7e:21:33:ac:3e:bf:4f:9a:
34:72:72:5d:fa:d1:cd:c7:64:ca:ba:62:14:fd:e9:
24:42:95:49:ff:3c:de:21:e6:38:98:ca:e8:b1:d5:
81:f7:72:fc:a5:4d:dc:26:cf:18:59:ec:ae:d6:8e:
20:43:f1:b4:93:b5:b4:75:e6:77:4d:28:e4:76:86:
06:5e:f1:90:b9:1b:c4:02:88:a2:9d:03:87:c9:55:
f1:c6:df:a7:30:3a:87:0b:dd:76:45:2d:16:7f:5c:
d2:01:05:00:76:42:05:b4:78:0e:e1:a4:0f:03:f3:
37:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:52:28:E1:7D:6C:E6:86:19:48:86:47:2B:63:74:78:6B:7C:26:82
X509v3 Authority Key Identifier:
keyid:65:9C:35:66:33:38:8E:9B:D8:97:D0:00:A3:F3:8B:C1:E5:46:EF:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZw1ZjM4jpvYl9AAo_OLweVG70o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:06:55:fe:07:8d:45:75:09:9b:8e:ee:12:d0:2d:22:9c:e9:
e5:84:ba:08:05:89:0a:a4:35:d9:f4:d6:70:3b:1c:4d:8a:cf:
d1:a7:ee:bc:2d:c1:34:c0:90:5a:8e:e9:45:5a:5c:05:72:74:
9a:24:76:a1:77:f6:c5:f6:9a:e1:fe:42:88:1f:7f:30:ee:21:
80:c5:5f:78:68:da:05:b9:af:42:65:93:2f:e6:93:0b:cd:30:
92:87:f6:63:9a:48:7c:38:de:9a:11:16:99:5e:8b:76:f0:00:
0f:24:50:44:57:81:de:5d:71:8a:41:68:1a:93:ca:23:b9:4b:
a8:56:5d:1a:99:05:14:9a:44:04:25:46:8e:db:1d:72:bd:f1:
a4:79:13:67:4b:43:d4:49:62:5a:44:88:c6:0e:f2:5b:1e:e8:
61:ee:b9:8a:07:71:4c:44:29:fd:02:7b:32:b3:c9:96:4e:87:
a1:c6:d9:aa:b3:2c:ae:01:92:e3:dc:ef:9b:c5:5c:e9:71:33:
4e:c6:49:2f:a6:d7:8e:53:d3:9b:8e:25:0d:fe:d1:c3:5a:19:
47:28:80:94:a7:22:13:b6:57:4e:02:5d:37:2c:a2:70:23:c7:
e3:1f:7e:a7:39:a2:78:c6:4c:5a:e7:0a:2f:b2:43:22:de:ab:
f6:5e:e0:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:26:36 2026 by rpki-client