Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft
File: zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft (raw, json)
Hash identifier: Cu4PbWBjO6YSNasqP1//JrtrrsT5TSOuBwP3TgjW6H8=
Subject key identifier: 58:52:2A:C9:54:8E:8D:97:5B:E3:BD:9F:1C:9B:23:0F:FD:45:00:4B
Authority key identifier: CF:12:80:11:9F:44:0E:B9:9C:1E:64:D7:35:F2:DB:1E:FC:F9:38:27
Certificate issuer: /CN=cf1280119f440eb99c1e64d735f2db1efcf93827
Certificate serial: 019D9A071C85BD6A0581205C600F4D67F62A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft
Manifest number: 04D5
Signing time: Fri 17 Apr 2026 06:00:50 +0000
Manifest this update: Fri 17 Apr 2026 06:00:50 +0000
Manifest next update: Sat 18 Apr 2026 06:00:50 +0000
Files and hashes: 1: PZvM7OV3HBSDzuz3mBSkNgZPzmc.roa (hash: kJSRxmzdiI7BIFbxUX/bJ1SrkVhLp4C99F6EL5K5kVE=)
2: zxKAEZ9EDrmcHmTXNfLbHvz5OCc.crl (hash: uljrgXVw35pZgSXSnyDOpBdXZI7pdZDm1R3z7VxBxwc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:1c:85:bd:6a:05:81:20:5c:60:0f:4d:67:f6:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf1280119f440eb99c1e64d735f2db1efcf93827
Validity
Not Before: Apr 17 06:00:50 2026 GMT
Not After : Apr 18 06:00:50 2026 GMT
Subject: CN=58522ac9548e8d975be3bd9f1c9b230ffd45004b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:1d:ee:28:82:25:21:a0:12:b8:f2:58:ab:7e:
f5:5b:24:18:3c:b7:b7:74:66:8b:58:2b:9a:ea:34:
45:d5:4f:8b:8e:99:cc:73:1b:a5:e9:3f:7f:ba:e9:
63:a6:52:cf:25:02:bc:14:36:e5:2f:70:e0:15:33:
b5:64:81:5b:82:4c:57:73:c0:89:43:9e:47:28:61:
f6:11:25:e3:75:45:14:2e:61:54:2e:a7:e7:0f:8c:
2a:6b:9d:89:66:f2:9a:4e:ec:d6:bd:ea:73:6c:1d:
90:4f:4d:a9:b0:a4:aa:6e:d6:b6:00:7d:47:3d:9d:
0a:cf:b7:e8:42:19:47:11:a2:5a:fc:d0:ab:81:ca:
cf:2b:f0:d4:36:d3:81:8b:29:c8:95:2d:86:f2:d9:
9a:eb:e4:f3:3c:dd:c0:d0:0b:c1:25:a4:c5:e2:e7:
ca:5e:7c:6f:e2:98:5a:dc:92:72:8d:8f:86:33:ec:
2f:26:cf:c7:9a:50:87:08:b9:58:a8:d2:18:8a:c0:
91:87:6e:28:29:4f:1b:5b:4f:eb:bc:88:e2:d2:83:
0e:eb:3e:ed:aa:8d:4a:a6:c9:26:78:45:fb:3e:35:
87:01:92:1b:5a:97:4c:db:88:4b:15:22:30:71:a4:
a7:6e:15:3e:fe:6e:1e:9d:b7:3c:68:9a:bf:0b:e2:
cd:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:52:2A:C9:54:8E:8D:97:5B:E3:BD:9F:1C:9B:23:0F:FD:45:00:4B
X509v3 Authority Key Identifier:
keyid:CF:12:80:11:9F:44:0E:B9:9C:1E:64:D7:35:F2:DB:1E:FC:F9:38:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:5e:80:cc:ed:5b:b7:58:ce:40:42:e6:9a:65:f9:7e:dc:41:
1a:3d:a8:25:db:8d:85:ba:df:d1:74:71:85:7b:ad:06:65:36:
41:6b:e0:c3:35:b3:1f:5d:e8:ae:a4:50:11:13:50:ba:c1:8c:
18:de:1e:7e:81:74:cf:33:30:b5:09:39:33:d0:4c:5c:77:52:
e5:93:fa:f5:5e:2f:8a:c9:d2:df:82:57:27:b2:10:49:6d:ad:
a6:9e:f9:8e:9d:76:c4:fb:c2:7e:ae:40:a2:06:4e:a4:e6:3c:
10:e9:be:cc:9f:38:73:12:8a:36:fe:fa:b1:ce:b2:42:46:90:
a0:46:19:f1:b6:31:13:bd:c4:2e:83:11:1e:d7:83:83:d1:bb:
c9:6c:61:13:34:66:74:ab:be:3d:02:a3:bf:5a:e6:e4:56:91:
7c:c8:ba:2d:ca:98:ff:22:e2:6f:91:24:dc:bb:99:48:6c:8e:
58:c6:4a:a1:82:1e:40:81:df:0a:78:16:8d:4c:b6:16:9e:f4:
eb:30:b4:4c:a7:09:4f:0e:a8:99:42:60:67:98:d4:d7:6a:91:
45:16:2e:a3:ab:ef:e3:3d:16:08:4a:12:79:75:4c:c6:2a:d5:
4e:a4:20:87:79:d6:a1:b3:42:38:1b:3e:c9:30:9a:9d:25:bf:
6f:bc:1c:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:14:57 2026 by rpki-client