Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.mft
File: ZlARZWRaqA3LoxWIXPN0rLbSEwU.mft (raw, json)
Hash identifier: edHAN+Fig9tInAiM2FeYGgEqOW9hV5uI+fe+peCEb5k=
Subject key identifier: C5:30:C1:75:50:8C:39:2C:AE:A0:EE:23:8A:12:D6:30:C9:D1:AA:18
Authority key identifier: 66:50:11:65:64:5A:A8:0D:CB:A3:15:88:5C:F3:74:AC:B6:D2:13:05
Certificate issuer: /CN=66501165645aa80dcba315885cf374acb6d21305
Certificate serial: 019DA41C7901C889DDE135D4188CF5FD9AC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZlARZWRaqA3LoxWIXPN0rLbSEwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.mft
Manifest number: 0CDB
Signing time: Sun 19 Apr 2026 05:00:22 +0000
Manifest this update: Sun 19 Apr 2026 05:00:22 +0000
Manifest next update: Mon 20 Apr 2026 05:00:22 +0000
Files and hashes: 1: ZlARZWRaqA3LoxWIXPN0rLbSEwU.crl (hash: bSEvZq2Kg8XFDGm61WzoGRqQWjlpME/6vQptQpiMfb8=)
2: bb1B8Fy2_C2bqbD9N4RRbHoFAbA.roa (hash: l0MLPIfI2aVoXdO47UK4RJDxoIk9MxZKupnuOkrWUdk=)
3: dcTwMDgwodHIo-S4yL4e4K41UJY.roa (hash: eMv2nsim1YJjG+0E2GpZFtw7b5BwXygPOnj8sq0+Gcw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZlARZWRaqA3LoxWIXPN0rLbSEwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:1c:79:01:c8:89:dd:e1:35:d4:18:8c:f5:fd:9a:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66501165645aa80dcba315885cf374acb6d21305
Validity
Not Before: Apr 19 05:00:22 2026 GMT
Not After : Apr 20 05:00:22 2026 GMT
Subject: CN=c530c175508c392caea0ee238a12d630c9d1aa18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:08:e1:89:28:47:96:0f:73:99:20:f0:15:b2:
40:b8:9c:90:b4:58:f2:85:76:28:c0:64:3a:51:a4:
32:b5:a7:6c:12:f5:92:f6:0b:6f:16:97:53:85:20:
83:ee:76:e4:b0:51:c8:35:70:58:af:35:c6:8c:6b:
ce:dd:de:27:47:2e:27:78:f6:d5:0b:bf:5a:50:9c:
df:df:79:4b:96:0b:5d:8b:dc:42:06:7d:79:87:06:
ea:15:e7:9d:5f:d4:91:c7:b0:08:2d:10:b6:2e:c2:
05:2a:b2:0f:b1:f8:a0:e1:8b:ec:d4:34:e2:a5:d1:
59:de:48:e1:5b:f3:33:ee:59:41:a6:c1:94:99:27:
94:f6:45:0e:5c:a3:bc:93:b0:8c:ab:1b:b1:f3:ba:
d0:af:93:76:39:d2:12:58:f3:c9:17:09:ec:ba:22:
e0:02:22:80:c6:27:72:bf:54:1d:dd:b9:37:f9:36:
f1:23:b6:d5:06:4e:86:ea:86:01:9f:8c:1b:bb:d7:
21:2f:61:dc:f2:80:76:5b:e4:35:c1:0c:2d:22:15:
2a:01:09:9c:4d:7c:62:01:72:10:20:3a:93:1d:2a:
34:ca:54:7e:79:e8:2a:95:a8:6e:c4:73:ad:b5:5f:
f5:ab:e8:ef:59:24:0f:8d:70:4d:de:25:4e:93:3d:
03:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:30:C1:75:50:8C:39:2C:AE:A0:EE:23:8A:12:D6:30:C9:D1:AA:18
X509v3 Authority Key Identifier:
keyid:66:50:11:65:64:5A:A8:0D:CB:A3:15:88:5C:F3:74:AC:B6:D2:13:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZlARZWRaqA3LoxWIXPN0rLbSEwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:0b:50:a0:7b:b2:af:07:fb:ee:e8:d6:71:d0:71:bf:92:7a:
f7:ce:fe:af:2a:b5:40:ef:b4:5e:2c:2f:0e:d8:7b:e6:20:6a:
9c:eb:06:ba:75:b9:42:30:21:8e:29:4f:4c:0e:ce:10:2b:40:
01:95:33:c4:b8:7e:07:00:c6:b3:4d:07:9d:da:bb:a0:4f:cf:
6b:d6:1f:b2:db:ef:e1:f0:d5:83:c0:79:f5:de:51:f3:0e:a1:
c1:d7:70:0e:83:ce:11:ab:52:2c:ff:94:d1:f1:84:33:43:6d:
23:b7:dd:0d:77:c5:f1:ad:76:be:27:2d:9c:b2:4a:20:62:49:
60:3d:fe:70:2e:88:43:38:e6:df:2e:2a:ff:8b:18:b5:5a:45:
72:64:c3:fc:72:8a:23:50:c9:87:57:68:13:27:a0:13:bc:b9:
bf:ab:28:86:41:a8:bb:ff:7e:57:76:2d:60:12:f0:15:50:c0:
08:82:0a:33:8f:8f:4b:39:e6:e6:7a:43:ad:39:f3:d0:4a:43:
e5:9a:f4:94:79:f6:a5:0e:36:f3:10:bd:a4:9e:ac:1d:c9:7b:
8f:d9:4b:fc:f3:8d:30:18:b3:c9:be:18:61:68:4d:7d:b9:b7:
d6:4e:47:e8:97:48:88:eb:2b:be:c0:ad:6e:e5:a3:8d:58:be:
29:e8:5e:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:47:22 2026 by rpki-client