Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.mft
File: zNNXkIMM50aalMWbLizLv1420T8.mft (raw, json)
Hash identifier: esSUwkxZxC791pgJphj1eN50TFGr/nfmLDt9fZxgP0k=
Subject key identifier: C2:D4:9C:51:96:DD:59:04:3C:35:F1:4F:52:1A:0B:78:7D:F1:E7:F2
Authority key identifier: CC:D3:57:90:83:0C:E7:46:9A:94:C5:9B:2E:2C:CB:BF:5E:36:D1:3F
Certificate issuer: /CN=ccd35790830ce7469a94c59b2e2ccbbf5e36d13f
Certificate serial: 019DA53000C82B717E2AB5E9198D698EA69A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNNXkIMM50aalMWbLizLv1420T8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.mft
Manifest number: 133F
Signing time: Sun 19 Apr 2026 10:01:19 +0000
Manifest this update: Sun 19 Apr 2026 10:01:19 +0000
Manifest next update: Mon 20 Apr 2026 10:01:19 +0000
Files and hashes: 1: TUvmrgBE44ev_WdD8HZ7-Tqrsvk.roa (hash: eGtgmPAMsFLuXajQP6UacgNI2KT3PlnsWKJ/DF91EtU=)
2: v87hPEGnMIsf-U-27Xa5aB7InJ0.roa (hash: vpt3+IR1X8NAWDYMxgQL6E8vBwuUgUGdnpH6ThIVLCI=)
3: zNNXkIMM50aalMWbLizLv1420T8.crl (hash: niHpnhD9nmNOZE/QYaDc5pTTccEqI7SB1FDz946WTXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zNNXkIMM50aalMWbLizLv1420T8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:30:00:c8:2b:71:7e:2a:b5:e9:19:8d:69:8e:a6:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd35790830ce7469a94c59b2e2ccbbf5e36d13f
Validity
Not Before: Apr 19 10:01:19 2026 GMT
Not After : Apr 20 10:01:19 2026 GMT
Subject: CN=c2d49c5196dd59043c35f14f521a0b787df1e7f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:25:2b:3b:33:2d:ec:38:c2:03:60:4d:6e:30:
c5:60:57:6f:ce:2e:c1:5e:55:4a:a1:20:31:4d:d7:
0f:39:cd:68:c0:b4:b7:de:1b:50:88:00:fc:8e:d8:
e6:30:8e:86:73:d9:ad:e6:cc:86:a5:bd:83:27:7c:
49:db:e2:d4:aa:4f:25:ff:e7:c1:a0:ce:f9:36:08:
96:27:84:22:4e:45:31:24:b9:4e:42:5c:5c:4c:e8:
63:ea:95:2b:7b:23:df:0a:8d:94:89:a1:37:e3:48:
17:d1:fd:b4:a8:a8:6b:ce:d8:59:d1:73:b6:89:51:
32:d9:57:61:54:78:dd:66:db:8e:f6:ca:6a:a9:a3:
4d:a4:9f:da:bf:ab:61:58:fd:05:51:67:d5:34:7a:
82:e3:aa:2c:46:7f:5f:4a:95:c0:de:fb:d2:c2:0b:
ef:e3:19:27:0f:54:90:81:88:34:5a:ac:09:07:27:
1b:16:d4:7f:72:8d:60:56:6f:3b:82:5b:f5:ee:2f:
11:dd:a9:e0:e5:6f:c2:13:24:cf:b0:ed:7d:b3:af:
c7:d0:73:85:0f:05:39:5b:61:53:59:18:bc:b9:bd:
e0:d1:ac:bc:d6:9a:b4:a3:48:47:13:fc:6f:66:33:
74:df:24:92:6d:a2:e0:cb:ca:fb:c0:a8:e0:06:6e:
bb:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:D4:9C:51:96:DD:59:04:3C:35:F1:4F:52:1A:0B:78:7D:F1:E7:F2
X509v3 Authority Key Identifier:
keyid:CC:D3:57:90:83:0C:E7:46:9A:94:C5:9B:2E:2C:CB:BF:5E:36:D1:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNNXkIMM50aalMWbLizLv1420T8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:15:59:99:b1:3d:aa:5f:8c:08:0d:35:6c:fd:46:92:1b:cc:
55:e1:5c:7b:52:56:e9:cb:a1:73:5c:07:74:88:e3:ec:00:50:
8d:a1:cc:76:f1:d6:c4:ef:8e:fb:7b:6c:26:94:14:ec:96:69:
01:3a:35:99:80:81:4d:6d:f8:1a:a0:d0:05:74:e0:ef:a9:cd:
bf:3a:98:63:f4:96:94:bb:a3:6e:79:7d:cd:04:9d:de:4e:c6:
d1:79:d0:05:34:d3:03:00:1d:84:9c:f4:0e:ff:ea:2f:b8:a4:
2c:02:d6:55:ab:9c:a8:be:bd:69:c1:2d:2a:7f:7b:e0:11:75:
c0:4b:41:c0:4b:80:bc:93:cc:da:d2:e0:8b:69:5c:99:7e:c6:
1a:3a:d4:b6:97:e4:6d:3a:83:7e:cc:c5:5b:3e:d4:ef:80:90:
39:ee:a5:fb:d8:b5:07:83:b6:39:a7:9d:66:64:cb:76:b1:8a:
66:9d:f1:33:49:4d:2b:f9:8d:41:54:13:55:70:1c:b4:42:66:
55:f8:62:ad:4a:8e:0b:54:3d:7e:50:f6:85:19:a0:ef:2d:d6:
f5:99:19:dc:44:66:b8:35:0d:21:37:4c:7c:62:0b:eb:3c:7c:
5c:8f:e7:4d:f5:80:00:7e:89:d3:1e:87:ea:60:25:04:98:97:
74:05:f9:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:44:08 2026 by rpki-client