Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.mft
File: zNNXkIMM50aalMWbLizLv1420T8.mft (raw, json)
Hash identifier: lLWZ1p3mXnbKp2pwzyad0SlUKZp8b8YirTDLe1/2pC4=
Subject key identifier: 31:AB:38:DE:AF:C4:74:22:40:74:66:2D:E5:6A:E4:D1:5A:CD:1E:22
Authority key identifier: CC:D3:57:90:83:0C:E7:46:9A:94:C5:9B:2E:2C:CB:BF:5E:36:D1:3F
Certificate issuer: /CN=ccd35790830ce7469a94c59b2e2ccbbf5e36d13f
Certificate serial: 019D9999AFDB2F03BF71A1E1BF00547BEAD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNNXkIMM50aalMWbLizLv1420T8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.mft
Manifest number: 1339
Signing time: Fri 17 Apr 2026 04:01:19 +0000
Manifest this update: Fri 17 Apr 2026 04:01:19 +0000
Manifest next update: Sat 18 Apr 2026 04:01:19 +0000
Files and hashes: 1: TUvmrgBE44ev_WdD8HZ7-Tqrsvk.roa (hash: eGtgmPAMsFLuXajQP6UacgNI2KT3PlnsWKJ/DF91EtU=)
2: v87hPEGnMIsf-U-27Xa5aB7InJ0.roa (hash: vpt3+IR1X8NAWDYMxgQL6E8vBwuUgUGdnpH6ThIVLCI=)
3: zNNXkIMM50aalMWbLizLv1420T8.crl (hash: 5Z4V0w5E6X6x26DAxm1YOZVS8z/Ye7Ks5Q6rQBIiuJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zNNXkIMM50aalMWbLizLv1420T8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:af:db:2f:03:bf:71:a1:e1:bf:00:54:7b:ea:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd35790830ce7469a94c59b2e2ccbbf5e36d13f
Validity
Not Before: Apr 17 04:01:19 2026 GMT
Not After : Apr 18 04:01:19 2026 GMT
Subject: CN=31ab38deafc474224074662de56ae4d15acd1e22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f5:0b:0d:5b:7a:c7:12:86:14:3a:43:ee:62:
ea:46:6c:a8:69:79:63:f7:d6:b2:b3:a0:3b:67:f1:
b0:a6:6b:9c:d3:d6:fe:32:23:c2:01:70:72:f3:02:
f4:2d:3d:56:30:18:49:93:d7:36:51:0a:72:fa:9e:
43:9f:a9:ae:ef:5a:4d:6c:26:3b:b7:e4:c9:30:9b:
2b:dc:bf:a6:c7:9e:78:60:99:00:90:92:c4:d6:9c:
66:6d:a0:dd:cb:84:50:74:63:ce:fa:2e:f3:5b:4e:
eb:c4:a0:47:6a:f6:84:04:7e:18:3a:dd:7d:4c:9a:
c6:d3:8a:88:d6:2a:6a:99:24:95:a1:18:f5:61:b8:
17:63:24:f4:70:dd:f2:8c:c3:76:38:6c:97:c4:80:
47:fe:17:bd:59:35:a0:81:d3:67:87:c2:d1:16:3d:
39:19:9d:ad:a7:ae:4c:64:18:e9:7d:f3:a3:70:36:
d0:aa:ef:0e:bc:fc:1e:b1:c5:16:7a:72:d9:75:c3:
3d:ca:1c:73:76:f3:27:88:19:d3:99:06:c0:3e:8c:
38:06:c3:2f:b8:79:c5:4b:9b:c5:2c:e7:e0:28:37:
45:38:42:51:87:b7:90:ab:8f:e6:04:46:db:14:98:
1d:bf:c2:43:4a:43:1c:12:b8:54:91:c6:15:13:89:
bd:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:AB:38:DE:AF:C4:74:22:40:74:66:2D:E5:6A:E4:D1:5A:CD:1E:22
X509v3 Authority Key Identifier:
keyid:CC:D3:57:90:83:0C:E7:46:9A:94:C5:9B:2E:2C:CB:BF:5E:36:D1:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNNXkIMM50aalMWbLizLv1420T8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:37:6b:b4:56:32:57:5b:7d:5e:bd:3b:70:e9:d0:3f:ff:a1:
99:53:9c:44:b0:4f:de:52:51:e4:e0:ba:fc:c7:45:a7:81:65:
64:98:c8:a5:2b:31:01:a4:c4:b9:04:59:e4:47:8d:d8:e2:5b:
71:90:fe:a0:43:0a:0e:45:f5:af:b0:31:e8:05:f6:41:7b:7c:
92:55:0b:0a:7e:b6:2b:f5:49:f8:d7:04:a2:c5:d6:e6:f8:49:
4d:3e:aa:82:db:7a:e9:2e:33:2d:e0:9d:f7:27:8d:4b:42:94:
52:13:0e:6c:6c:80:06:c3:20:3e:8b:5f:bc:0d:46:ca:16:67:
57:97:a1:79:d4:7f:21:26:bd:9b:10:c2:62:d4:0d:0a:fe:33:
c8:7f:de:14:ac:32:a0:c6:6b:e1:4e:93:4d:7b:f4:cb:af:66:
1b:9e:fa:bf:73:7d:53:10:10:07:9d:02:d2:55:dc:ba:0c:27:
31:99:b9:91:28:2a:04:70:a6:be:a5:bf:58:d2:3b:4e:d3:7b:
a0:c4:71:55:9c:9e:81:b2:1d:0b:51:9e:5f:56:bc:6b:1d:26:
53:02:93:88:08:ed:a9:ba:51:29:30:b1:d7:c5:2c:54:29:2b:
de:94:0d:92:c4:ef:77:4f:6d:e9:43:77:f3:44:7d:94:5b:85:
02:f8:ed:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:42:37 2026 by rpki-client