Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/a1eb66-cc87-4a90-9c5d-ee3ca74bbb79/1/SD-zfR-wzNIW2t7EAAlWGoRKqDs.mft
File: SD-zfR-wzNIW2t7EAAlWGoRKqDs.mft (raw, json)
Hash identifier: OxmeOVWZyP1Gkfsx2D51not8EOVVkLuFKzgYjtmFk+g=
Subject key identifier: B6:5A:52:08:1C:6F:41:CC:B6:9C:CA:58:3B:38:FB:03:5C:00:74:C7
Authority key identifier: 48:3F:B3:7D:1F:B0:CC:D2:16:DA:DE:C4:00:09:56:1A:84:4A:A8:3B
Certificate issuer: /CN=483fb37d1fb0ccd216dadec40009561a844aa83b
Certificate serial: 019DA3AF448E0E6BD6CF59724E3784C0CA59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SD-zfR-wzNIW2t7EAAlWGoRKqDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/a1eb66-cc87-4a90-9c5d-ee3ca74bbb79/1/SD-zfR-wzNIW2t7EAAlWGoRKqDs.mft
Manifest number: 0578
Signing time: Sun 19 Apr 2026 03:01:05 +0000
Manifest this update: Sun 19 Apr 2026 03:01:05 +0000
Manifest next update: Mon 20 Apr 2026 03:01:05 +0000
Files and hashes: 1: SD-zfR-wzNIW2t7EAAlWGoRKqDs.crl (hash: FoBLL7qTFuVzus/ixuzK/0Sib7Mt/l6pO2d85T4qsis=)
2: xVWlyfjWNauHSqD1r_D5-LgllLw.roa (hash: dlJT/Xcxoye27KDxhsg9z9fDGJ9uuoxQEu/5uWsLfvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/a1eb66-cc87-4a90-9c5d-ee3ca74bbb79/1/SD-zfR-wzNIW2t7EAAlWGoRKqDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/a1eb66-cc87-4a90-9c5d-ee3ca74bbb79/1/SD-zfR-wzNIW2t7EAAlWGoRKqDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/SD-zfR-wzNIW2t7EAAlWGoRKqDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:af:44:8e:0e:6b:d6:cf:59:72:4e:37:84:c0:ca:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=483fb37d1fb0ccd216dadec40009561a844aa83b
Validity
Not Before: Apr 19 03:01:05 2026 GMT
Not After : Apr 20 03:01:05 2026 GMT
Subject: CN=b65a52081c6f41ccb69cca583b38fb035c0074c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:48:00:af:c8:79:c2:3e:2a:16:60:0e:98:46:
a1:df:70:4a:04:0c:ff:5c:ea:22:b1:39:98:80:c6:
52:0e:f5:16:fc:07:12:5c:61:eb:3d:f9:0e:6d:fb:
69:3b:56:d8:26:ce:38:4e:78:ed:07:f3:ea:c7:56:
37:99:4c:1e:24:b3:15:9a:64:57:53:92:6c:0e:ad:
2d:f0:bf:4c:04:46:a6:e7:08:21:43:57:09:9c:2d:
0a:d5:54:db:70:01:45:55:51:1d:20:ac:53:92:3a:
cf:e9:90:2b:aa:07:c2:1d:b0:6d:fe:a8:06:03:a8:
b1:78:6e:07:12:b8:0d:08:bc:dc:ff:81:b0:18:28:
b4:02:ef:67:2f:87:bc:53:d3:16:bc:29:ef:8c:53:
cb:27:41:86:08:51:6c:9e:ef:9a:b3:f5:26:bb:84:
31:57:2d:dd:4d:ea:52:87:c0:2e:af:b8:48:f7:42:
32:bd:ca:5f:aa:eb:4a:42:bf:ad:9c:7a:06:52:9b:
b9:19:8f:e6:76:dd:95:bc:6a:51:54:b3:47:09:7e:
71:8e:7f:e1:e4:28:a3:7a:78:3c:1e:2f:35:1d:2e:
19:40:db:19:ac:9d:a0:e3:af:1d:bf:88:bc:28:56:
67:75:33:71:38:d4:03:a5:61:b1:b7:39:38:c0:b7:
66:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:5A:52:08:1C:6F:41:CC:B6:9C:CA:58:3B:38:FB:03:5C:00:74:C7
X509v3 Authority Key Identifier:
keyid:48:3F:B3:7D:1F:B0:CC:D2:16:DA:DE:C4:00:09:56:1A:84:4A:A8:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SD-zfR-wzNIW2t7EAAlWGoRKqDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a1eb66-cc87-4a90-9c5d-ee3ca74bbb79/1/SD-zfR-wzNIW2t7EAAlWGoRKqDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a1eb66-cc87-4a90-9c5d-ee3ca74bbb79/1/SD-zfR-wzNIW2t7EAAlWGoRKqDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:67:2d:38:ce:68:f8:46:58:d5:95:2e:c9:28:3b:c1:66:c2:
6f:38:f3:59:ab:84:cb:41:01:b0:b7:44:15:6f:f8:75:a5:da:
36:8d:28:25:89:0c:f2:eb:b5:eb:9f:d9:08:2b:66:57:76:0e:
35:ad:f3:ea:6b:5e:c4:91:20:be:93:50:09:75:c3:b5:53:fd:
d5:fe:93:a2:f1:20:ed:aa:04:0a:75:1b:be:88:62:76:be:71:
62:1a:ad:6f:68:b1:f0:ee:1d:7f:2a:2f:91:f8:92:2c:cb:26:
be:d2:6a:2d:8c:2e:21:45:cd:da:1b:d4:bf:88:77:ad:ab:b4:
e3:ad:f7:8a:ed:a6:14:47:46:ca:a1:1f:84:3d:88:73:17:08:
23:d0:f9:d2:3b:f5:af:d9:d4:d8:bb:b5:09:5f:43:fd:07:06:
a5:16:db:6a:ef:1e:4b:fa:ab:34:9f:70:28:e2:f2:ff:7f:2d:
85:cd:e7:bf:8c:91:4a:56:7c:2c:4c:8d:5c:a5:38:4b:33:dd:
24:59:52:3a:5f:85:d8:16:0d:76:79:ad:56:b9:a0:be:99:38:
b3:7f:47:f2:24:dd:2b:c9:3c:50:f6:24:14:df:51:1d:1c:26:
dc:20:f1:be:9b:8d:3b:85:35:7a:07:7b:96:f9:dd:7b:64:a6:
75:88:ba:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:22:02 2026 by rpki-client