Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.mft
File: rZr63kGDroAEjWuEgY7sRvaA-iY.mft (raw, json)
Hash identifier: pmXNYyPJ7ZbdvnsBezgZ7vRPjAoLcDM42WzlSlG3Xlw=
Subject key identifier: F5:3B:35:BD:A4:CC:DC:8E:33:F8:E9:9B:23:BC:96:A6:20:58:9A:70
Authority key identifier: AD:9A:FA:DE:41:83:AE:80:04:8D:6B:84:81:8E:EC:46:F6:80:FA:26
Certificate issuer: /CN=ad9afade4183ae80048d6b84818eec46f680fa26
Certificate serial: 019D985082ABDE7D90FE8C1D2E66E1D6E69B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rZr63kGDroAEjWuEgY7sRvaA-iY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.mft
Manifest number: 16F4
Signing time: Thu 16 Apr 2026 22:01:46 +0000
Manifest this update: Thu 16 Apr 2026 22:01:46 +0000
Manifest next update: Fri 17 Apr 2026 22:01:46 +0000
Files and hashes: 1: YhV2RPOqPZXVdAMRyoGhsYcqg5o.roa (hash: +2OSyQukbn8Ac2KWdiYjJtwI1C2RFg/LbfJyv2kiAaQ=)
2: rZr63kGDroAEjWuEgY7sRvaA-iY.crl (hash: tqqKUe/We7s6Fe+1VnFgZF0IiTlpxkkZkf2NUSKnKbc=)
3: zymQ8lQH58g9kZdGDaCuBYAYQI4.roa (hash: UsBi140YQptoK8CMotM0bOiYKyUZpHcPLjWyz1MACI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rZr63kGDroAEjWuEgY7sRvaA-iY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:82:ab:de:7d:90:fe:8c:1d:2e:66:e1:d6:e6:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad9afade4183ae80048d6b84818eec46f680fa26
Validity
Not Before: Apr 16 22:01:46 2026 GMT
Not After : Apr 17 22:01:46 2026 GMT
Subject: CN=f53b35bda4ccdc8e33f8e99b23bc96a620589a70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b1:0f:ca:9a:4d:04:2e:45:4e:a6:0f:ed:47:
9e:59:7f:15:0f:00:f4:59:df:36:c6:50:6d:90:00:
89:9c:8e:ee:50:49:98:31:93:aa:8f:97:0f:cd:17:
29:4c:f8:0e:2b:12:93:40:cc:c1:96:3c:99:75:c1:
d2:9d:f5:07:45:1a:9a:19:fe:76:72:b7:06:35:7d:
0e:2a:62:50:a1:aa:47:f3:30:04:8b:f2:fa:09:2a:
c2:f0:4b:41:6d:99:61:84:5c:48:64:f5:05:c4:d3:
f1:2f:27:f1:cc:be:f5:1b:33:2f:ce:9e:48:a4:37:
a9:c1:e7:84:04:af:36:48:a3:45:c9:59:5f:e8:fa:
76:ab:3f:11:49:62:40:0e:3b:cc:7c:72:1e:c8:e9:
15:5f:61:25:fd:a1:48:f9:9e:0e:fa:35:1f:0e:0c:
d8:07:0a:56:4d:92:43:a8:6d:5f:cd:0e:68:cd:f1:
ee:5a:ea:c4:7e:96:bd:28:f5:88:b0:ca:ef:ac:5e:
d2:b3:15:44:a5:67:1f:76:19:b2:3d:04:22:88:ff:
2c:e5:62:22:7a:f0:54:39:78:3f:e0:df:e1:0f:7e:
85:2e:f4:ef:ce:af:08:0e:9c:11:ff:a4:62:d0:6f:
83:d0:6c:e6:27:1e:8f:80:e2:b9:18:8b:3e:66:4a:
37:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:3B:35:BD:A4:CC:DC:8E:33:F8:E9:9B:23:BC:96:A6:20:58:9A:70
X509v3 Authority Key Identifier:
keyid:AD:9A:FA:DE:41:83:AE:80:04:8D:6B:84:81:8E:EC:46:F6:80:FA:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rZr63kGDroAEjWuEgY7sRvaA-iY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:db:50:5f:1a:ea:42:e8:a8:ba:9d:04:60:da:74:f2:35:75:
38:32:bc:37:e7:e0:c4:23:ae:e2:76:fb:3b:75:38:3c:32:d2:
57:12:be:db:21:b6:f4:71:af:00:e9:d4:6a:25:63:c4:d6:d4:
36:e8:36:65:a6:fd:36:55:cf:b3:07:a2:6b:18:8f:00:a2:50:
6c:16:ba:b3:47:b0:cf:6a:e2:1f:65:0f:45:00:83:60:69:b9:
c3:ed:d3:5b:9d:2c:ab:7a:27:2f:b5:23:8c:44:89:f3:bf:63:
99:89:2a:61:76:60:e9:8f:13:25:4f:97:ce:c3:3c:d9:0b:b2:
c1:9b:2c:39:72:55:02:e2:71:22:37:5b:a6:0c:43:8f:da:04:
c9:80:13:21:8b:9e:c6:90:e4:64:dc:08:47:6b:17:45:2a:c7:
4f:52:e1:1d:dd:a6:90:89:cf:9a:a6:d5:6b:47:8b:3a:fb:63:
7e:2d:3f:6d:0c:a9:24:72:e4:2f:dc:f6:23:18:d3:f3:c3:06:
b8:7a:92:ee:9c:e2:30:a9:db:36:1f:e1:06:20:ec:bb:4c:ab:
e4:a6:59:1e:d6:70:57:cb:49:b5:47:cc:34:7f:07:83:1e:d1:
cb:21:45:01:51:8c:f5:ea:40:7c:4e:d0:bc:29:a6:fb:9e:40:
ef:db:dc:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:33:49 2026 by rpki-client